Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: V9Ij7magwG7bremrhjFZdeOzi+NN8tjTrCGakQy41u8=
Subject key identifier: 39:6C:4A:04:CB:67:36:F1:A0:07:14:6A:C5:E9:5C:22:A1:4D:6F:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 269AE0CCEC84939F08EEDF21846B134FE5E93785
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 29 Jul 2026 22:27:16 +0000
ROA not before: Wed 29 Jul 2026 22:22:16 +0000
ROA not after: Wed 28 Jul 2027 22:27:16 +0000
asID: 214155
IP address blocks: 94.156.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9a:e0:cc:ec:84:93:9f:08:ee:df:21:84:6b:13:4f:e5:e9:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:16 2026 GMT
Not After : Jul 28 22:27:16 2027 GMT
Subject: CN=396C4A04CB6736F1A007146AC5E95C22A14D6FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0d:c9:51:5b:22:92:8a:b2:b8:89:82:a2:62:
cd:d5:49:ac:96:bf:09:8f:9d:d4:6e:ae:4f:ef:94:
12:db:b8:73:08:10:70:ca:86:32:b6:11:45:d4:61:
11:a7:10:db:cd:f9:60:08:67:de:c8:cb:da:74:3e:
33:f2:85:b4:20:4d:42:26:93:c2:75:9e:38:5c:16:
2e:70:a4:67:6b:38:20:53:65:69:5d:7f:aa:04:5f:
67:62:ff:d1:d4:d6:32:7b:d6:39:c1:bb:22:74:86:
7a:22:dd:3b:75:ac:fc:e7:20:e7:57:dd:52:b7:99:
38:b3:e6:6b:81:ce:fd:d3:6e:88:06:8f:7f:7c:12:
e1:a7:87:3a:88:6a:97:4c:9d:26:8d:9b:57:7f:1f:
20:be:65:22:06:69:7c:eb:19:8e:0b:1d:0c:aa:d1:
d3:e6:6e:36:d7:ce:c8:a3:7a:9c:87:da:0f:13:e0:
91:9b:b1:54:50:ed:08:8c:96:e5:8e:18:cb:7f:0a:
17:f8:c3:71:c3:7f:59:61:ba:48:85:c9:73:fd:76:
3d:d9:99:19:d0:12:e2:5f:bb:7e:50:e7:f9:ba:e3:
53:9f:1b:a8:ab:26:2a:bd:50:66:62:78:40:03:2f:
e5:4a:a5:1b:e4:db:fc:9f:c3:70:8b:24:79:0c:a9:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:4A:04:CB:67:36:F1:A0:07:14:6A:C5:E9:5C:22:A1:4D:6F:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.228.0/24
Signature Algorithm: sha256WithRSAEncryption
25:62:9b:70:07:a2:6e:0e:9e:56:21:af:40:8d:fd:87:e9:21:
96:e7:2b:3c:08:6a:8d:25:9c:9f:19:19:05:d3:9e:a0:da:31:
f2:01:76:30:ac:c4:94:7f:87:3d:e0:53:f4:de:b9:9c:e0:80:
ad:9c:7c:59:01:3b:91:08:36:7a:e1:c1:4e:c4:48:e4:c6:4c:
9a:a2:01:de:d5:61:43:14:ec:e1:f5:14:27:42:da:c3:6f:5d:
c0:b3:10:07:49:57:d1:31:3e:3c:76:e2:ec:14:b2:5e:33:b2:
c7:78:84:e9:67:83:77:48:46:06:42:ed:3c:68:1b:c4:91:17:
26:47:f0:0d:6a:c3:2f:34:b0:ae:66:e9:8c:7a:2d:1f:a7:81:
ff:bd:08:ef:73:f5:03:47:fd:6f:19:8c:03:ae:ce:84:48:6e:
78:55:00:ef:c0:f6:49:fe:43:54:43:3b:8a:fd:9d:68:c4:82:
7c:f1:27:01:10:9b:e4:34:e8:75:16:e5:b1:56:97:c0:22:77:
5d:5d:06:50:80:d2:8b:cf:f7:e1:1d:58:c4:be:51:5c:f1:e1:
97:44:b8:be:5a:5d:75:08:ee:4b:2a:b2:70:62:8e:60:21:d4:
90:80:96:60:d0:bd:ba:76:cd:4a:f3:f3:1d:ff:1e:57:d0:39:
78:79:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:12 2026 by rpki-client