Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: OknfBLPaQQGfTtCUReOLtMb5VTGSpZSd//UUfBSgmZs=
Subject key identifier: 3C:B4:D7:70:AD:9F:D0:83:E6:4C:AB:AC:1F:E5:35:ED:B3:22:66:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F67A01273028022D904C7BC67C4BE71EEDF3AA9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 29 Jul 2026 22:27:18 +0000
ROA not before: Wed 29 Jul 2026 22:22:18 +0000
ROA not after: Wed 28 Jul 2027 22:27:18 +0000
asID: 214155
IP address blocks: 94.156.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:67:a0:12:73:02:80:22:d9:04:c7:bc:67:c4:be:71:ee:df:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:18 2026 GMT
Not After : Jul 28 22:27:18 2027 GMT
Subject: CN=3CB4D770AD9FD083E64CABAC1FE535EDB3226617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:f4:10:86:ec:6f:c7:5d:83:ef:75:3b:37:
fa:98:6d:46:8f:63:f9:29:3a:ea:3c:4e:cd:84:6c:
27:8a:9a:1e:58:e9:20:47:4c:e8:1e:3f:b6:34:54:
55:71:31:78:2a:c3:dc:04:e7:d0:1f:98:a2:ab:9b:
03:ef:20:7a:56:c0:df:f7:f6:59:cd:f7:51:c5:f6:
9c:c8:05:66:30:2c:89:77:34:d3:66:45:52:f2:a8:
e2:b9:5d:34:a9:1a:b9:75:04:ff:d6:d3:d5:22:e6:
14:28:51:46:bb:01:50:26:da:3c:cd:dd:f9:43:51:
cb:85:f5:d7:1a:3e:48:5b:7c:0e:d2:c5:97:88:94:
96:f3:e1:10:3f:3c:62:72:9f:85:6e:e6:f8:6e:04:
94:41:0e:b6:c0:d1:e6:0c:0f:98:a1:37:31:3b:fe:
fc:ae:fb:95:88:f3:93:66:c0:ae:66:db:19:4a:20:
fe:92:ea:11:46:67:f1:94:d8:b4:d6:d7:0d:21:dc:
89:8e:f7:26:ec:24:25:a7:c5:4c:97:d0:1c:b4:22:
aa:28:ec:80:80:d9:c5:9b:83:22:84:93:80:b0:50:
dd:2e:94:14:65:e9:47:f3:f9:8e:f2:99:bc:f8:82:
c2:ca:97:39:a5:c1:b7:6b:d0:6c:04:16:99:ba:32:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:D7:70:AD:9F:D0:83:E6:4C:AB:AC:1F:E5:35:ED:B3:22:66:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233312e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:dd:7b:71:2e:68:22:9a:b2:be:b5:b5:5c:c4:f6:98:34:96:
9f:98:ae:8b:38:6b:d9:53:83:59:af:f4:0e:da:d9:65:93:b2:
81:b7:9d:9f:7c:81:0e:92:8b:2e:58:72:70:85:2b:1c:7e:be:
73:10:e1:bd:04:2a:85:fa:5c:3b:8f:92:fc:68:b0:b8:b6:a5:
09:d0:06:f2:b6:25:37:88:b8:c6:07:fd:04:e8:34:e0:68:be:
be:0c:e4:bf:4e:d0:81:aa:64:e2:ff:b8:8a:10:47:db:6b:14:
e3:6d:60:5e:b2:f6:79:f3:f9:5c:1a:02:7b:bb:f9:79:26:0d:
50:cf:43:56:7a:b9:d6:36:0b:31:13:af:89:e9:e3:ce:0c:ba:
5c:b2:a2:18:81:25:a8:6c:1f:aa:0d:ed:1c:38:57:34:e6:ab:
c3:60:69:ea:26:19:23:5c:4d:c5:a9:63:22:df:fe:38:87:8f:
86:0f:d9:a7:56:8b:7c:5b:9b:96:e7:f0:43:7b:7f:65:1e:4e:
2e:1c:e3:fb:c4:4e:6f:9e:74:b3:53:7d:cc:b1:08:c5:c3:4b:
d6:e6:66:f7:bd:08:c4:4d:e3:dd:60:16:9d:ca:ae:5b:75:62:
ab:08:59:6d:ef:f2:c4:9e:f5:df:82:92:b6:1d:55:4c:3d:c9:
cc:d6:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:46 2026 by rpki-client