Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: JzeK+EyY1rXEyVJBFb7mATzvZjEG+vOdaoQA1T4t7Fc=
Subject key identifier: 6C:61:6B:78:F3:B6:16:AE:E4:68:4A:51:C7:8C:B2:8C:C6:D9:CA:F1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 47B6C37A8C2E55D5245205181B77C14E83F5BC12
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 29 Jul 2026 22:27:18 +0000
ROA not before: Wed 29 Jul 2026 22:22:18 +0000
ROA not after: Wed 28 Jul 2027 22:27:18 +0000
asID: 214155
IP address blocks: 94.156.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b6:c3:7a:8c:2e:55:d5:24:52:05:18:1b:77:c1:4e:83:f5:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:18 2026 GMT
Not After : Jul 28 22:27:18 2027 GMT
Subject: CN=6C616B78F3B616AEE4684A51C78CB28CC6D9CAF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:03:dc:13:90:60:ea:36:7f:0b:7a:f6:82:e2:
d1:ca:11:ae:ef:8d:4f:2b:87:06:72:23:60:a0:eb:
a8:90:5e:b2:e0:95:ae:f0:d0:b4:a4:c0:7f:12:d6:
d8:4b:2b:08:33:cb:bb:9a:bf:45:cf:b5:23:9e:43:
08:90:8d:7e:fa:4b:d3:59:e8:fc:ce:8b:4a:33:be:
c4:be:a3:44:86:bc:62:c2:fb:45:67:dc:08:95:80:
79:e0:5f:c0:b1:38:1c:b0:bd:f2:e4:e0:e3:7b:b9:
23:30:de:f9:23:1d:13:5b:e5:7c:09:6c:5e:62:89:
85:c1:c3:a6:0b:2f:31:d1:75:8a:20:a6:bc:26:dc:
bd:bc:5f:0d:78:b7:56:af:16:7b:ec:e6:c9:c7:43:
bf:1b:a1:5c:8d:d7:2a:35:79:d3:0b:f4:eb:c9:73:
70:d1:1d:de:18:2d:53:2a:92:17:6c:69:c8:e9:ab:
0c:9f:1b:82:69:12:f8:c5:b0:55:02:f5:a5:9e:ec:
a8:d8:1e:cf:85:20:93:9d:9e:09:b1:51:ae:52:b8:
c1:ac:cb:3a:dc:27:47:89:95:29:b6:05:a8:5e:27:
db:84:0a:ec:b2:4e:89:5b:b8:99:99:d3:02:ae:2f:
6c:bc:d2:be:65:53:e8:f0:a4:bc:71:03:22:77:72:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:6B:78:F3:B6:16:AE:E4:68:4A:51:C7:8C:B2:8C:C6:D9:CA:F1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.230.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9d:20:2d:82:b9:68:9a:c1:eb:11:04:28:b7:d2:a3:72:3d:
bb:3a:c2:c4:e0:f6:1d:cd:f7:b4:21:a5:0f:6d:fe:f9:85:f4:
d0:fa:66:a6:ff:45:39:2d:bf:b5:85:d7:09:d0:51:f6:a3:a0:
59:5b:16:66:74:62:d9:d9:6a:8d:8c:95:ad:68:f7:0e:f5:40:
5f:6c:28:5d:d8:9a:f3:fb:bd:9b:a6:b0:16:f8:e0:c2:6d:27:
f4:25:d8:bd:1c:96:be:c3:8b:f2:54:39:2c:97:4b:30:aa:5d:
0a:32:4a:af:f4:65:a9:4c:e4:45:55:56:3a:c3:83:06:83:89:
eb:d5:a7:3f:0c:21:b7:39:8c:11:fa:d0:be:7d:7d:e2:94:8a:
47:34:7f:27:4a:93:de:55:6c:61:a8:ee:3f:2d:2d:8d:2f:5d:
4c:99:03:28:a2:ba:13:f3:13:77:82:ea:36:7a:8b:f4:fd:0e:
38:96:b4:c7:3b:e0:8f:17:90:e7:2f:3a:1d:d1:7a:b5:14:85:
8c:97:76:f3:65:10:f2:36:a7:0f:5d:20:08:1d:4e:bb:34:70:
3a:d8:5b:5d:1b:66:4b:55:14:ae:14:37:0b:61:06:48:eb:b2:
06:27:2f:80:c6:b2:f6:02:3c:5f:c4:47:d7:61:16:1f:78:97:
a1:dd:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:57 2026 by rpki-client