Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3135302e302f32342d3234203d3e20323037313337.roa
File: 39342e3135362e3135302e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: 5gl9PeDRaOPIWpbus9NGsb/IQXyUDh5Lne/GMK/W9lk=
Subject key identifier: 06:79:2F:A4:31:FC:CC:6B:1C:B2:4A:08:D5:24:10:1E:94:30:EA:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 498C1DC184389F376425CE9C98B6EEE8F7BECBEA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3135302e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 05 Aug 2026 10:27:39 +0000
ROA not before: Wed 05 Aug 2026 10:22:39 +0000
ROA not after: Wed 04 Aug 2027 10:27:39 +0000
asID: 207137
IP address blocks: 94.156.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8c:1d:c1:84:38:9f:37:64:25:ce:9c:98:b6:ee:e8:f7:be:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 10:22:39 2026 GMT
Not After : Aug 4 10:27:39 2027 GMT
Subject: CN=06792FA431FCCC6B1CB24A08D524101E9430EA73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:07:08:8d:fb:ad:90:49:7d:27:3a:da:18:
bb:2b:11:5a:bf:d9:a9:aa:5a:15:b3:db:dc:3e:55:
59:61:64:de:21:91:a6:1c:c0:5a:f8:34:b9:f3:b4:
aa:9a:2a:ae:6d:a8:45:88:4c:26:ee:f0:e7:dc:5d:
65:9e:1c:1a:07:a5:e6:2a:a7:e9:96:70:8f:69:f2:
72:d2:a2:52:c7:cd:ba:f0:19:a3:b8:2e:9e:56:5f:
3e:21:bf:4a:87:f5:b2:a1:a5:4a:8c:e0:1b:ab:88:
64:7f:81:1d:e4:bb:b5:c1:56:a7:20:b7:2b:0c:a4:
1b:1a:55:25:31:88:61:4d:26:7b:38:1d:3a:b1:95:
20:56:57:f7:2e:f2:06:c4:86:fe:63:07:eb:44:2d:
07:6b:80:f0:ad:21:f0:ae:bb:9b:97:c9:1c:80:e6:
b4:27:c2:78:2a:df:2d:7a:93:3c:fd:5c:b1:9f:6d:
16:7d:09:9d:da:0b:75:f6:4e:39:1d:68:f4:bc:3d:
ca:b8:14:d8:61:3f:6b:26:22:78:d7:0f:b7:5c:37:
08:2f:90:87:fa:5b:a6:03:dd:9b:e9:38:09:ae:3d:
80:4f:be:07:f7:ea:00:1f:4d:6f:5b:6f:7f:3c:d4:
50:58:19:bf:bb:17:b9:8d:19:ce:3e:23:ef:c0:a3:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:2F:A4:31:FC:CC:6B:1C:B2:4A:08:D5:24:10:1E:94:30:EA:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3135302e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.150.0/24
Signature Algorithm: sha256WithRSAEncryption
19:73:ba:c3:f8:79:bd:a7:bf:55:08:84:85:f9:a8:cb:56:ef:
33:ef:f7:1c:71:67:66:6b:f1:11:fa:bc:ee:86:47:9a:0f:f7:
cc:94:09:16:56:e1:4e:3b:03:14:36:54:fd:c0:ca:8c:71:a2:
c0:3d:32:91:b7:d5:98:ed:35:f8:ab:03:1d:a0:af:0e:c2:c3:
9a:97:35:42:f6:75:e3:45:a9:69:7b:1b:cc:48:d0:c8:0f:43:
0e:bc:57:23:35:53:d6:24:f3:85:4a:c4:9a:40:d2:dc:88:5b:
e2:da:16:84:e0:98:6f:11:59:64:16:42:e3:66:56:d5:c0:91:
e1:db:f2:30:0e:f4:e7:0e:ba:8d:40:58:64:ad:ec:84:02:59:
60:e6:d3:eb:e7:5e:8e:2a:c1:7a:3c:d9:10:3b:82:de:88:f0:
6c:50:ee:fd:91:a6:ee:9f:51:d6:4c:e7:ab:5f:d5:13:bd:29:
e5:c7:57:c9:78:39:fd:fa:04:2f:74:6c:87:38:96:98:7f:91:
60:cc:83:8b:1e:6c:b2:70:2d:12:df:c0:ce:46:65:ff:45:ab:
0d:a1:72:3b:83:c9:44:cb:f8:df:0b:cf:f3:cc:be:49:f7:35:
3e:af:a8:ee:45:d8:48:a6:d5:33:e3:a9:e7:ea:00:70:8e:61:
61:56:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:05 2026 by rpki-client