Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
File: 39342e3135362e33302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hh7D9Si28UgFGQQ9fxyOSfe59mCu8fk3S/QKucn/huc=
Subject key identifier: AB:C2:88:94:5D:27:25:6A:8D:A7:11:42:43:4B:3A:B9:92:89:88:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 01A184C4B1497CF35135F2820323B2B100EC8A2E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 29 Jul 2026 22:27:16 +0000
ROA not before: Wed 29 Jul 2026 22:22:16 +0000
ROA not after: Wed 28 Jul 2027 22:27:16 +0000
asID: 136787
IP address blocks: 94.156.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:c4:b1:49:7c:f3:51:35:f2:82:03:23:b2:b1:00:ec:8a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:16 2026 GMT
Not After : Jul 28 22:27:16 2027 GMT
Subject: CN=ABC288945D27256A8DA71142434B3AB992898829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:bd:71:1c:28:d2:90:42:84:58:dc:e4:40:
7a:4e:3a:70:10:73:f8:bc:b1:74:c9:32:f6:13:92:
d9:c8:2d:9e:eb:df:ff:8c:79:a2:47:14:7a:35:9e:
99:b3:45:cf:11:e1:77:58:6b:24:d6:45:07:72:b5:
2e:77:55:f8:b3:06:d0:44:d3:a1:0e:bf:27:95:7a:
cb:9a:d2:3e:1d:1e:39:cb:95:ad:f0:0b:8b:06:fa:
7e:50:6b:02:f1:83:78:81:f9:bb:bb:4f:99:ec:dc:
24:a3:47:89:36:9c:8a:07:0f:d2:c2:88:b2:c7:07:
21:45:bb:ba:e7:7b:12:fd:b7:3e:cf:8a:1e:d7:c0:
6b:23:ec:d5:cf:f8:87:e9:24:c9:11:23:68:73:96:
09:9f:2b:51:96:cf:41:13:a2:0a:70:7e:98:85:9a:
4e:f2:d3:d5:50:96:93:35:6f:13:84:5d:e5:ca:c7:
56:ad:ed:b9:80:49:ea:2c:8c:ca:3b:b3:7a:00:34:
c9:af:d0:fb:0d:75:7b:8c:62:8b:31:a9:4a:a1:f1:
45:5d:89:98:bd:81:9e:ef:aa:66:c6:f1:c0:06:f9:
64:17:d6:10:a3:ff:80:fe:ec:65:ec:83:e5:26:98:
0f:de:38:78:ea:80:c9:43:32:e1:c1:3d:b6:62:e8:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:88:94:5D:27:25:6A:8D:A7:11:42:43:4B:3A:B9:92:89:88:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:08:e3:c1:62:4c:9c:64:b2:1e:9e:39:f2:7b:25:80:84:b6:
ab:b9:35:ca:93:77:f8:8e:5c:80:b7:8c:6a:3e:bd:95:4f:36:
59:36:fa:14:04:60:08:61:4a:ae:1d:a9:04:a0:4d:17:a3:ae:
92:f4:d3:ba:aa:84:7d:10:00:1f:bf:5f:78:28:80:9b:e5:b8:
38:cd:0e:18:ae:d4:cd:4d:fb:22:94:9d:6a:92:28:8b:99:3e:
60:90:9b:cf:cb:7d:4e:7c:22:e3:91:53:5a:9d:2e:b1:68:5b:
6c:21:ab:26:8a:89:b1:a9:6d:d1:36:72:49:f8:d9:4a:01:6d:
b5:97:63:2b:7f:97:ec:3c:d5:95:61:9e:fd:11:ec:81:02:bd:
31:66:12:36:bd:75:4e:7b:b7:60:78:06:ef:a4:55:6c:57:69:
05:9f:03:c8:62:e3:7c:d5:8e:8e:b8:d7:45:69:97:ba:b8:9c:
d4:53:8c:e5:eb:8f:c2:3a:de:57:d8:f5:f5:08:44:90:00:31:
78:e1:c5:e7:36:d8:f2:78:53:14:eb:8f:06:56:bf:c0:c5:f7:
30:60:c4:29:7f:fb:1e:25:96:b8:db:13:16:91:2b:1f:29:a0:
24:d2:75:56:b3:4f:fe:fd:0c:58:6b:1a:d1:27:0b:e3:5d:e5:
e0:7f:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:24:31 2026 by rpki-client