Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232392e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3232392e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: yWW6V3m2wFcajhasTqH6kkT3DhEZsCdXgViXw9plMOk=
Subject key identifier: CA:C4:2F:EE:37:08:5D:70:19:B4:D9:9B:AA:B4:C7:5A:58:39:76:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 444064F3030913F02F0197D23E78852BC42FCC50
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232392e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 29 Jul 2026 22:27:17 +0000
ROA not before: Wed 29 Jul 2026 22:22:17 +0000
ROA not after: Wed 28 Jul 2027 22:27:17 +0000
asID: 214155
IP address blocks: 94.156.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:40:64:f3:03:09:13:f0:2f:01:97:d2:3e:78:85:2b:c4:2f:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:17 2026 GMT
Not After : Jul 28 22:27:17 2027 GMT
Subject: CN=CAC42FEE37085D7019B4D99BAAB4C75A583976A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:9d:52:41:ca:33:ca:b6:e5:a9:b4:08:39:
59:b8:23:48:ac:15:6a:2e:b5:d4:8c:eb:a4:b6:6f:
5d:88:40:34:5c:2f:90:81:17:e5:1f:68:b1:60:5c:
fd:32:29:66:e7:74:51:3e:00:63:4e:f4:00:80:74:
72:9c:04:97:90:bc:af:dc:45:f0:e4:30:59:a6:86:
d7:b5:f8:4f:e6:5c:61:b5:75:d4:ca:11:10:72:6c:
c5:54:cb:b9:72:73:38:dc:1f:c2:d9:a3:a8:c8:c9:
fd:db:cd:00:20:33:23:15:84:6b:11:d0:0a:46:26:
e1:b6:7b:18:d3:bb:3d:e1:3b:82:d4:e7:22:92:a7:
01:26:87:48:cb:8b:6b:94:b2:c7:3d:3b:67:e0:3c:
80:25:b6:ec:11:25:e2:92:2c:82:0f:b2:f3:87:e2:
c5:47:18:e5:c1:ae:ec:cd:93:cd:a0:0b:a6:ee:bb:
e3:1b:07:ff:3c:68:ba:79:d8:27:c1:7f:b6:94:0b:
42:fa:8c:34:71:83:cb:4f:3a:55:1b:5c:6a:b0:7a:
f8:24:45:b3:dc:4c:3a:4d:0e:92:99:aa:e9:3e:7b:
66:ec:8e:8f:d4:22:57:a4:9e:05:0b:d4:cb:86:0d:
d7:d3:57:6b:04:6e:b2:3d:7a:31:f0:78:93:da:45:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:2F:EE:37:08:5D:70:19:B4:D9:9B:AA:B4:C7:5A:58:39:76:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232392e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.229.0/24
Signature Algorithm: sha256WithRSAEncryption
29:91:75:96:1a:79:21:12:4e:7f:a8:24:15:05:0f:c0:d1:ae:
76:6b:b4:1c:c9:06:94:ce:e5:b9:52:ed:3c:e5:25:ef:5f:63:
87:64:4f:63:fa:0a:c2:73:7a:0c:53:f3:0d:ab:6e:62:14:9d:
32:8d:1c:e8:fb:b1:64:95:3f:b4:2f:61:af:4c:0f:9e:a7:46:
c8:6e:01:24:88:90:e6:fa:13:34:ba:00:9b:15:bc:db:06:06:
4f:21:fa:08:eb:b9:2f:bf:c5:b6:69:49:25:d3:13:7a:1f:8f:
80:c8:eb:7f:78:4a:93:75:dc:95:31:22:07:10:09:ac:34:d5:
d5:2e:4d:29:7e:97:a6:67:c9:ef:56:61:ca:75:5c:68:7f:6c:
80:2c:e5:87:6c:2a:fd:b6:0f:c1:c1:e3:a4:99:85:91:4f:54:
59:4a:22:3a:76:69:53:f4:82:28:42:83:8f:5a:bd:6f:07:1b:
e9:a1:47:57:10:2c:6a:06:7b:3d:f2:58:cb:80:09:23:3b:f0:
93:64:9d:fc:2e:db:c9:80:82:4e:77:f1:5e:3e:13:32:6e:36:
ee:bc:d5:6b:fe:08:ec:ef:48:ba:8a:ab:76:ab:1d:a3:24:b3:
c2:14:2c:4c:9a:d5:54:83:e5:86:9f:b7:95:af:67:29:ed:c9:
07:bb:72:4e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUREBk8wMJE/AvAZfSPniFK8QvzFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjkyMjIyMTdaFw0yNzA3MjgyMjI3MTdaMDMxMTAvBgNV
BAMTKENBQzQyRkVFMzcwODVENzAxOUI0RDk5QkFBQjRDNzVBNTgzOTc2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSZ1SQcozyrblqbQIOVm4I0is
FWoutdSM66S2b12IQDRcL5CBF+UfaLFgXP0yKWbndFE+AGNO9ACAdHKcBJeQvK/c
RfDkMFmmhte1+E/mXGG1ddTKERBybMVUy7lyczjcH8LZo6jIyf3bzQAgMyMVhGsR
0ApGJuG2exjTuz3hO4LU5yKSpwEmh0jLi2uUssc9O2fgPIAltuwRJeKSLIIPsvOH
4sVHGOXBruzNk82gC6buu+MbB/88aLp52CfBf7aUC0L6jDRxg8tPOlUbXGqwevgk
RbPcTDpNDpKZquk+e2bsjo/UIlekngUL1MuGDdfTV2sEbrI9ejHweJPaRXxVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUysQv7jcIXXAZtNmbqrTHWlg5dqUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMjMy
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMTM1MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABenOUwDQYJKoZIhvcNAQELBQADggEBACmRdZYaeSESTn+oJBUFD8DRrnZrtBzJ
BpTO5blS7TzlJe9fY4dkT2P6CsJzegxT8w2rbmIUnTKNHOj7sWSVP7QvYa9MD56n
RshuASSIkOb6EzS6AJsVvNsGBk8h+gjruS+/xbZpSSXTE3ofj4DI6394SpN13JUx
IgcQCaw01dUuTSl+l6Znye9WYcp1XGh/bIAs5YdsKv22D8HB46SZhZFPVFlKIjp2
aVP0gihCg49avW8HG+mhR1cQLGoGez3yWMuACSM78JNknfwu28mAgk538V4+EzJu
Nu681Wv+COzvSLqKq3arHaMks8IULEya1VSD5Yaft5WvZyntyQe7ck4=
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:59 2026 by rpki-client