Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32392e302f32342d3234203d3e20323732303936.roa
File: 39342e3135362e32392e302f32342d3234203d3e20323732303936.roa (raw, json)
Hash identifier: k4/i7Qw4a7UMf1cttd/CgQePxplOk68R5KWG5Yj6kKs=
Subject key identifier: 05:E3:13:39:06:F5:2E:63:A9:02:34:5F:0A:6D:9E:33:7A:CF:8C:15
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66BAC49E9D0EE2A4E415DF60F5C15F008E371EC4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32392e302f32342d3234203d3e20323732303936.roa
Signing time: Fri 31 Jul 2026 13:27:32 +0000
ROA not before: Fri 31 Jul 2026 13:22:32 +0000
ROA not after: Fri 30 Jul 2027 13:27:32 +0000
asID: 272096
IP address blocks: 94.156.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ba:c4:9e:9d:0e:e2:a4:e4:15:df:60:f5:c1:5f:00:8e:37:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 31 13:22:32 2026 GMT
Not After : Jul 30 13:27:32 2027 GMT
Subject: CN=05E3133906F52E63A902345F0A6D9E337ACF8C15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:24:68:57:83:7d:b5:69:7a:92:43:af:a8:
bf:e4:30:2f:c2:b8:f0:27:4b:e6:e0:cd:23:3a:a1:
79:58:73:08:65:e1:1f:bf:64:95:62:b1:d8:a7:46:
1f:b5:27:f9:d7:09:cf:11:39:a2:53:0d:3f:38:8c:
b6:dc:74:f7:38:ca:c8:3e:54:fe:86:89:33:44:02:
a4:83:f4:05:ca:96:e5:10:33:86:a1:a3:62:2f:25:
a1:60:b2:fd:93:84:a9:c4:93:47:b9:0e:5c:89:d9:
46:e2:f7:ee:5b:ec:e3:8e:3a:07:80:e5:6b:12:3b:
42:46:82:30:84:61:ee:9f:50:fe:0c:d2:3c:f8:19:
1e:29:f5:a9:84:9c:f5:81:db:6c:b9:f0:6e:c4:d6:
1f:3c:63:df:84:11:4d:07:df:99:19:fa:09:f1:a5:
42:29:27:05:3d:4c:a3:90:62:70:8f:39:c9:a9:dc:
c8:23:f5:1f:c2:68:c8:6b:a1:f8:01:90:fb:0a:5e:
b8:44:ba:08:8d:73:36:5b:f4:a9:fe:93:e0:f0:76:
71:7e:dd:2b:62:f3:ca:86:89:ef:9f:bd:c1:d2:4e:
54:83:1d:25:7b:25:49:1a:71:e0:17:e0:b5:cf:71:
fc:1c:ab:57:d6:a1:90:8b:bd:b0:e9:7f:c2:ef:29:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:13:39:06:F5:2E:63:A9:02:34:5F:0A:6D:9E:33:7A:CF:8C:15
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32392e302f32342d3234203d3e20323732303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.29.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:71:e9:45:68:77:df:84:c2:1c:52:2f:61:cf:fb:29:2e:7c:
f2:a2:d1:65:de:8a:9e:1b:50:0b:5e:e9:35:c1:eb:c9:03:57:
bf:b4:08:04:38:9d:be:f4:1e:22:d0:13:18:95:43:ad:9f:b8:
ec:ea:62:fc:f8:1d:40:00:8a:11:e5:63:a7:6b:9b:25:6a:fa:
35:bb:1f:cb:1a:f5:02:9d:8d:04:ca:c3:ab:80:6b:68:e5:ff:
20:3f:96:85:11:c2:a6:a2:d4:d4:f0:74:fa:ef:45:70:86:53:
82:81:32:ae:f0:cb:81:e1:a1:04:37:27:bc:84:4f:24:6c:f5:
b4:b1:26:e0:be:39:8c:33:ae:a0:69:18:3a:9b:24:67:91:36:
19:77:39:fe:e7:15:76:7c:60:f6:af:5e:40:2f:94:73:df:93:
08:4f:dc:30:17:80:75:2a:fc:6a:79:8a:fa:89:90:4e:28:8e:
92:aa:04:e8:31:13:7b:00:2e:a2:71:cb:22:0e:af:d3:f7:87:
ad:fb:6b:7e:14:1f:a2:2a:d2:03:f5:75:4e:f8:bc:2e:7d:c0:
13:07:7b:f8:09:a5:27:f7:39:3f:9d:ba:82:d2:d2:4e:4b:b1:
4c:41:1d:83:da:ab:a7:9e:c6:e3:b4:a8:f7:5b:ee:1e:0f:85:
56:a7:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:38 2026 by rpki-client