Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3135312e302f32342d3234203d3e20323037313337.roa
File: 39342e3135362e3135312e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: FKvsHi+kXbAM0hcLPt3CjDijt/Mukao73Sw7S0fGr+4=
Subject key identifier: 2C:94:D7:52:E1:11:5F:CE:B4:92:D3:94:D7:F7:A1:80:15:31:EC:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 161D50AE54EE0279876A387F1BA0DA0EB847BF86
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3135312e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 05 Aug 2026 10:27:39 +0000
ROA not before: Wed 05 Aug 2026 10:22:39 +0000
ROA not after: Wed 04 Aug 2027 10:27:39 +0000
asID: 207137
IP address blocks: 94.156.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:1d:50:ae:54:ee:02:79:87:6a:38:7f:1b:a0:da:0e:b8:47:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 10:22:39 2026 GMT
Not After : Aug 4 10:27:39 2027 GMT
Subject: CN=2C94D752E1115FCEB492D394D7F7A1801531EC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:00:75:db:96:f0:a9:1e:e7:fc:34:1f:d1:
8b:a1:d7:00:9a:d3:45:1d:30:09:c5:bd:3d:b2:f2:
fc:c4:fa:4f:04:e4:4d:ee:a4:fd:32:9f:fb:23:ad:
3b:1d:8e:a4:1b:92:12:1d:a3:88:a9:be:fe:80:c6:
9f:60:f6:1a:89:f6:80:49:ec:ec:63:58:72:27:2e:
25:8b:54:2a:da:69:bb:9b:ee:07:5f:15:a1:35:bd:
54:7a:7a:6c:94:1e:62:a8:f8:f7:5a:a6:76:a4:59:
d6:66:13:6f:3e:52:73:42:b8:9c:a4:16:fb:6d:3e:
be:a6:85:1a:52:3b:e4:42:cd:7b:30:74:4e:ea:68:
81:26:1b:96:2a:ec:7e:19:8c:b9:82:85:78:25:81:
e4:8f:f4:ed:61:ee:a4:4a:cb:ec:cf:14:46:fb:23:
74:73:9b:36:92:8e:9a:6c:29:4a:46:05:dd:3a:f2:
7c:2d:bf:5f:cb:d9:5c:c2:9e:81:9b:36:5e:34:82:
85:93:37:36:d2:de:d2:ce:3d:f2:be:04:93:df:57:
06:df:56:8a:b4:4c:a5:f0:f2:f3:70:72:5a:5f:42:
b1:98:c8:52:91:b5:24:df:fa:56:58:6d:5f:21:6a:
d3:4c:a2:2f:6d:22:bb:79:d9:5c:8e:4e:4a:ca:52:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:94:D7:52:E1:11:5F:CE:B4:92:D3:94:D7:F7:A1:80:15:31:EC:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3135312e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.151.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e5:4f:61:0f:15:92:2f:d7:4d:cc:b2:44:15:27:01:72:3a:
f5:8d:45:f2:80:33:8f:a2:47:21:2f:af:92:fe:88:ba:2b:b6:
d7:88:e7:40:4d:30:7f:5a:95:4a:a1:aa:0d:07:9e:a7:22:ed:
27:2e:94:27:f2:af:c1:dc:1c:6e:0d:75:87:db:15:a5:73:3a:
0f:60:a7:77:50:6f:bf:ac:b8:1f:2f:34:d2:5c:c0:33:d7:76:
e4:18:34:41:36:f0:30:53:dc:41:9e:33:8b:3b:95:62:dc:7f:
fa:fa:59:f4:1d:15:d7:23:39:1c:60:60:e3:1d:4d:74:a8:34:
71:12:0e:d5:e9:75:7a:81:02:19:02:92:b3:07:54:62:29:c9:
d7:74:03:05:87:95:31:61:db:d2:cc:0e:9b:53:08:09:00:e2:
c3:60:67:6d:c4:0f:7b:77:9e:b8:8f:47:d4:8e:7f:d0:9b:88:
73:b2:ac:d3:d3:9e:ea:d8:89:3b:c4:d8:b3:1f:4a:e3:3c:e5:
e6:1a:76:51:63:88:7a:77:64:bb:49:6b:40:2b:27:20:fb:2b:
c3:c1:49:27:8d:ac:a3:8a:db:ed:fb:ec:fc:78:33:be:60:9a:
5f:96:92:d7:af:98:27:4f:8b:f7:65:6e:15:a7:e4:89:5b:55:
8a:97:45:01
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFh1QrlTuAnmHajh/G6DaDrhHv4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDUxMDIyMzlaFw0yNzA4MDQxMDI3MzlaMDMxMTAvBgNV
BAMTKDJDOTRENzUyRTExMTVGQ0VCNDkyRDM5NEQ3RjdBMTgwMTUzMUVDMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lQB125bwqR7n/DQf0Yuh1wCa
00UdMAnFvT2y8vzE+k8E5E3upP0yn/sjrTsdjqQbkhIdo4ipvv6Axp9g9hqJ9oBJ
7OxjWHInLiWLVCraabub7gdfFaE1vVR6emyUHmKo+PdapnakWdZmE28+UnNCuJyk
FvttPr6mhRpSO+RCzXswdE7qaIEmG5Yq7H4ZjLmChXglgeSP9O1h7qRKy+zPFEb7
I3RzmzaSjppsKUpGBd068nwtv1/L2VzCnoGbNl40goWTNzbS3tLOPfK+BJPfVwbf
Voq0TKXw8vNwclpfQrGYyFKRtSTf+lZYbV8hatNMoi9tIrt52VyOTkrKUr1zAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQULJTXUuERX860ktOU1/ehgBUx7CowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMTM1
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABenJcwDQYJKoZIhvcNAQELBQADggEBAITlT2EPFZIv103MskQVJwFyOvWNRfKA
M4+iRyEvr5L+iLortteI50BNMH9alUqhqg0Hnqci7SculCfyr8HcHG4NdYfbFaVz
Og9gp3dQb7+suB8vNNJcwDPXduQYNEE28DBT3EGeM4s7lWLcf/r6WfQdFdcjORxg
YOMdTXSoNHESDtXpdXqBAhkCkrMHVGIpydd0AwWHlTFh29LMDptTCAkA4sNgZ23E
D3t3nriPR9SOf9CbiHOyrNPTnurYiTvE2LMfSuM85eYadlFjiHp3ZLtJa0ArJyD7
K8PBSSeNrKOK2+377Px4M75gml+WktevmCdPi/dlbhWn5IlbVYqXRQE=
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:53:52 2026 by rpki-client