Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32382e302f32342d3234203d3e20323033333830.roa
File: 39342e3135362e32382e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: Zh3dFyq5Lubi7lRV3hKVgyqOyMG0+ht7N/eYSRqqvSE=
Subject key identifier: 20:77:85:F1:1C:A8:7B:90:A6:2F:16:64:78:48:9B:90:63:C1:D7:F2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 75FBF77B04C49F2F2D22A1B00B130D1FF9F1AB09
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32382e302f32342d3234203d3e20323033333830.roa
Signing time: Mon 03 Aug 2026 22:27:35 +0000
ROA not before: Mon 03 Aug 2026 22:22:35 +0000
ROA not after: Mon 02 Aug 2027 22:27:35 +0000
asID: 203380
IP address blocks: 94.156.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 13:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fb:f7:7b:04:c4:9f:2f:2d:22:a1:b0:0b:13:0d:1f:f9:f1:ab:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 3 22:22:35 2026 GMT
Not After : Aug 2 22:27:35 2027 GMT
Subject: CN=207785F11CA87B90A62F166478489B9063C1D7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:84:3b:92:3d:1e:88:a0:bd:75:27:43:90:
9f:e3:ab:9a:54:a7:e8:86:95:0c:5e:d7:1f:e2:be:
df:cd:6f:4e:27:a6:7f:0d:d1:cb:3f:b3:8f:84:62:
e8:d4:16:c6:e2:4a:15:50:c9:6f:cc:af:ff:fb:b1:
6a:71:a5:f4:de:c0:e4:6d:f3:e6:cd:6e:89:ae:81:
1f:f3:3c:58:e1:e4:79:d6:e6:23:f7:b5:63:b3:7e:
87:86:08:3d:74:a6:d0:44:1d:f3:b3:da:32:5d:38:
eb:bb:97:44:d1:62:82:5d:e8:e5:4c:08:63:fb:fe:
a2:10:80:d8:90:4a:59:f7:7d:54:a3:5a:fa:80:b3:
2b:f7:22:ba:d3:e0:a7:9e:cf:97:f7:01:ec:c7:40:
74:7b:30:07:f6:61:fb:1b:c4:ff:19:a7:12:e3:e8:
c7:f8:02:76:26:f4:34:e3:bc:97:a0:b4:6d:81:e6:
4c:32:d4:a9:d1:3a:6c:22:00:a7:7d:22:16:36:18:
04:0d:81:75:e1:d8:2b:6b:92:75:b0:3b:39:6b:a4:
e0:14:b3:fd:28:c8:71:17:3b:ec:96:82:60:42:35:
ad:39:f1:88:db:e8:e8:2e:7a:e4:ac:9f:82:22:02:
2b:ed:3d:58:61:9e:bc:18:a1:67:3b:82:42:8e:93:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:85:F1:1C:A8:7B:90:A6:2F:16:64:78:48:9B:90:63:C1:D7:F2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32382e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1e:7e:81:d8:6b:ae:36:9b:19:6b:2f:3e:58:83:91:f6:6a:
ed:45:b2:5d:5c:3e:f4:c3:cc:c9:4c:bf:24:6f:a0:87:a7:cf:
07:f9:29:14:30:11:e5:e6:a2:1a:22:1b:12:61:bf:4a:66:1d:
be:74:17:9a:8f:ce:e6:36:e0:e5:8c:97:e7:5c:5c:2b:38:29:
3d:a1:0b:fb:8f:c1:33:76:10:68:6d:29:01:20:55:2b:96:34:
72:5a:80:3b:d9:cf:a9:a3:68:56:99:09:b0:ba:82:ea:c3:f8:
b4:ef:c1:de:d6:c9:f9:bd:bb:66:2b:2d:f2:b9:c5:0e:2b:ea:
da:0e:8e:9d:a7:61:93:61:d0:25:78:4c:02:fd:58:33:05:75:
f4:32:a0:e0:32:09:2f:f2:4f:09:ac:73:77:50:d2:88:2e:e7:
91:45:1d:c1:a3:1e:bf:27:a7:93:15:20:6e:08:bf:08:4b:bb:
82:d9:46:dd:7a:e7:c8:ae:f9:7c:60:ec:8a:1e:b1:28:e0:34:
08:3c:c7:12:18:4e:30:7b:d7:be:6c:98:c9:e3:9a:16:83:58:
b6:7b:0c:58:47:87:78:90:37:c1:fd:07:9a:7a:be:82:fa:72:
58:85:1e:85:85:cb:9a:98:51:42:58:2c:ad:15:92:a1:31:69:
09:18:f9:7e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdfv3ewTEny8tIqGwCxMNH/nxqwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDMyMjIyMzVaFw0yNzA4MDIyMjI3MzVaMDMxMTAvBgNV
BAMTKDIwNzc4NUYxMUNBODdCOTBBNjJGMTY2NDc4NDg5QjkwNjNDMUQ3RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPoQ7kj0eiKC9dSdDkJ/jq5pU
p+iGlQxe1x/ivt/Nb04npn8N0cs/s4+EYujUFsbiShVQyW/Mr//7sWpxpfTewORt
8+bNbomugR/zPFjh5HnW5iP3tWOzfoeGCD10ptBEHfOz2jJdOOu7l0TRYoJd6OVM
CGP7/qIQgNiQSln3fVSjWvqAsyv3IrrT4Keez5f3AezHQHR7MAf2YfsbxP8ZpxLj
6Mf4AnYm9DTjvJegtG2B5kwy1KnROmwiAKd9IhY2GAQNgXXh2CtrknWwOzlrpOAU
s/0oyHEXO+yWgmBCNa058Yjb6OgueuSsn4IiAivtPVhhnrwYoWc7gkKOk1prAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUIHeF8Ryoe5CmLxZkeEibkGPB1/IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMjM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMzMzMzODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XpwcMA0GCSqGSIb3DQEBCwUAA4IBAQCLHn6B2GuuNpsZay8+WIOR9mrtRbJdXD70
w8zJTL8kb6CHp88H+SkUMBHl5qIaIhsSYb9KZh2+dBeaj87mNuDljJfnXFwrOCk9
oQv7j8EzdhBobSkBIFUrljRyWoA72c+po2hWmQmwuoLqw/i078He1sn5vbtmKy3y
ucUOK+raDo6dp2GTYdAleEwC/VgzBXX0MqDgMgkv8k8JrHN3UNKILueRRR3Box6/
J6eTFSBuCL8IS7uC2UbdeufIrvl8YOyKHrEo4DQIPMcSGE4we9e+bJjJ45oWg1i2
ewxYR4d4kDfB/Qeaer6C+nJYhR6FhcuamFFCWCytFZKhMWkJGPl+
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:39:55 2026 by rpki-client