Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa
File: 39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 1ocBsrE5LyqIC/nL/kXdTd0eMqYd2d1frF+DcKmphiM=
Subject key identifier: B4:6F:D2:61:8D:3C:AB:EB:A7:45:F5:11:7E:E8:5E:62:BB:C6:42:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3979698917D1E7D595B905F014BAB26CA5EFB756
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa
Signing time: Wed 05 Aug 2026 10:27:39 +0000
ROA not before: Wed 05 Aug 2026 10:22:39 +0000
ROA not after: Wed 04 Aug 2027 10:27:39 +0000
asID: 147049
IP address blocks: 94.156.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:79:69:89:17:d1:e7:d5:95:b9:05:f0:14:ba:b2:6c:a5:ef:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 10:22:39 2026 GMT
Not After : Aug 4 10:27:39 2027 GMT
Subject: CN=B46FD2618D3CABEBA745F5117EE85E62BBC6429B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:5e:27:fc:37:37:b3:1a:17:8b:8c:02:87:
b1:e0:ad:30:17:b2:43:c9:39:52:41:b3:ae:28:fa:
ca:5d:6f:c4:18:02:21:79:ea:ff:d1:29:ac:c4:5e:
fa:e7:35:b1:bd:3d:31:3d:15:e9:12:d4:bc:8b:ac:
8f:01:64:9c:4c:2d:d0:9c:27:38:2c:34:5c:ec:a3:
c6:7e:42:44:0d:52:3c:f0:c4:c1:a9:2b:ae:69:d5:
96:8c:cb:01:b2:6d:71:c3:9b:c9:3c:80:66:63:b9:
76:1f:78:c0:3f:1c:5e:23:b5:93:a9:a8:cc:ae:0c:
22:55:04:2f:6b:23:e9:44:1c:63:a4:74:99:15:f2:
1b:05:34:8f:46:f6:4a:39:0e:db:f0:fd:e4:3a:f0:
ff:47:12:84:e4:96:b3:47:07:23:43:2d:89:f3:f7:
85:8b:d3:a7:86:6e:12:b1:05:40:ae:8b:b8:3c:bc:
7e:1b:78:ff:c1:88:71:25:44:e2:29:ca:f4:20:15:
84:05:6e:90:b6:ba:29:46:fc:57:14:92:a5:cb:b7:
60:a6:0b:2e:58:f0:45:6b:82:6a:17:ec:ed:0c:0e:
8f:b2:d5:35:fc:93:00:a7:7f:68:18:f6:6b:c9:d6:
00:2f:b4:0f:36:bc:14:fb:b7:7a:69:f2:84:81:6e:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:D2:61:8D:3C:AB:EB:A7:45:F5:11:7E:E8:5E:62:BB:C6:42:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134392e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.149.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0a:0b:84:de:2b:d0:e6:7f:46:67:cb:7a:b0:57:ab:f6:d1:
4e:f0:61:ae:7e:44:5c:67:5e:63:fe:6b:54:0a:9f:e3:da:7a:
91:7b:85:0e:d9:ec:8e:d5:07:8a:2c:dc:37:e1:4a:1a:9b:f8:
78:07:08:5b:ef:1e:a0:8c:ff:da:ad:ed:a1:bd:6e:37:08:be:
3c:00:8e:b8:60:1d:21:28:de:0d:48:28:7b:8b:e2:91:4a:ef:
81:91:2d:5c:48:d3:49:2e:58:0e:ee:eb:3b:0d:74:a1:74:c8:
97:38:ec:cf:7c:14:27:7c:8f:be:b9:84:7b:9f:38:8f:ed:f2:
bd:1a:4a:af:43:38:5e:10:26:16:4d:4f:27:bc:32:ba:6e:c1:
c0:ce:b4:c1:52:66:77:3c:bb:7a:ec:ba:cb:fc:49:9e:72:4e:
dc:91:e3:18:e4:d7:82:9f:79:3a:09:8a:3f:15:7a:bc:47:c7:
4d:60:a0:7f:14:28:4c:5e:8a:15:27:58:26:a9:0b:b8:91:c4:
1f:ff:a1:30:07:a1:86:0f:42:75:d7:2b:47:36:d8:a0:b9:2b:
e8:8e:ff:4b:9f:69:de:3d:71:22:36:1d:4f:db:22:48:6f:f5:
b0:b8:c8:0c:9a:b1:1b:6b:9c:44:57:9b:1f:d2:7c:7d:74:15:
d9:58:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:23:00 2026 by rpki-client