Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20323132323338.roa
File: 39342e3135362e33302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: sZ4ESQ5biF3Or5RpelD9Xbny57a0yUUe81PSO71Sc8U=
Subject key identifier: 9D:65:4B:E3:8F:BB:5F:28:D0:14:C5:CA:E5:E5:41:0A:EC:00:BF:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4425C803E2E4EF295F51AA40B1C3496B1F06457C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 29 May 2026 12:24:40 +0000
ROA not before: Fri 29 May 2026 12:19:40 +0000
ROA not after: Fri 28 May 2027 12:24:40 +0000
asID: 212238
IP address blocks: 94.156.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:25:c8:03:e2:e4:ef:29:5f:51:aa:40:b1:c3:49:6b:1f:06:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 12:19:40 2026 GMT
Not After : May 28 12:24:40 2027 GMT
Subject: CN=9D654BE38FBB5F28D014C5CAE5E5410AEC00BFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:bc:10:91:de:ab:09:dd:d3:4e:fb:56:a6:
d1:46:82:92:f6:42:c8:91:66:47:b6:1c:fb:2e:da:
eb:dd:5c:6f:a6:67:68:1d:3a:5e:16:39:13:62:a3:
70:e4:f0:db:89:58:e4:dd:da:35:f4:be:aa:4d:de:
f8:da:b1:7b:16:6d:9f:78:3a:20:6e:4d:35:8c:43:
c8:d4:f8:1a:a6:8e:a5:78:1e:fe:e8:0c:85:74:7f:
07:4d:a3:06:26:b2:89:ab:3e:82:46:18:03:9c:82:
7f:a5:51:2e:f9:3a:e5:99:4f:0d:c7:9a:19:f7:8f:
d9:02:4e:76:b2:76:d2:48:2e:77:49:a1:b8:7f:f8:
04:92:d0:59:57:b1:db:a8:1d:03:e4:7e:83:a4:8f:
03:62:50:5d:f1:2a:5e:2b:3a:19:54:d9:f7:b5:5a:
7d:7b:d1:6a:96:eb:11:de:35:37:31:78:99:d3:97:
26:11:40:42:f2:ff:fd:94:9c:b1:87:0b:cf:97:ac:
9e:d0:51:5c:bc:32:09:39:e3:91:e4:53:54:43:5a:
87:51:ee:d9:b8:6b:cc:8a:6a:86:ab:42:70:f8:6e:
a6:68:55:21:1d:a2:ba:c9:e8:29:89:04:99:1c:65:
cf:62:e3:5e:0f:84:c0:54:6f:f9:af:d2:fa:ea:de:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:65:4B:E3:8F:BB:5F:28:D0:14:C5:CA:E5:E5:41:0A:EC:00:BF:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.30.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6f:f4:3c:26:be:b4:8c:2a:5b:08:95:c3:37:11:2a:be:ac:
14:56:14:89:1b:cd:1e:15:d9:cf:94:84:e7:ec:25:36:dd:56:
11:87:1c:58:a1:66:7e:24:0b:b4:e0:e7:72:fb:b8:4b:90:24:
fd:86:83:b7:a5:48:6f:43:3f:d0:0d:09:3f:47:ee:74:eb:cb:
9c:bb:b8:3f:51:dd:d7:3f:af:2f:98:3f:9d:da:82:b0:d7:7e:
4e:f2:87:0f:91:cf:15:ca:15:75:6b:4c:01:0f:60:b9:69:37:
cb:91:27:e2:9b:ac:f3:45:98:32:1b:1c:12:9d:fd:b7:05:52:
40:d7:fb:cd:da:80:b8:e7:3a:8b:ee:15:d9:22:0f:30:da:73:
1f:0d:d2:3f:e6:68:31:43:8b:69:3e:2b:b8:c7:8b:0e:b5:e8:
f4:11:5e:dd:f2:1c:d6:f9:2d:02:4b:20:a2:af:0c:eb:0d:00:
7d:32:08:b6:93:a2:c7:29:22:78:4e:0c:69:bc:38:16:b0:ac:
af:fe:3d:38:0b:92:46:92:33:0e:87:93:f3:b9:3f:a3:72:85:
a3:0c:8c:8a:f5:2a:f1:96:08:e3:a7:f3:8d:33:59:0b:ac:e5:
16:cd:45:3a:a0:3f:f2:59:07:39:ea:72:83:71:97:cf:e2:75:
7b:6f:51:00
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIURCXIA+Lk7ylfUapAscNJax8GRXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MjkxMjE5NDBaFw0yNzA1MjgxMjI0NDBaMDMxMTAvBgNV
BAMTKDlENjU0QkUzOEZCQjVGMjhEMDE0QzVDQUU1RTU0MTBBRUMwMEJGQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ELwQkd6rCd3TTvtWptFGgpL2
QsiRZke2HPsu2uvdXG+mZ2gdOl4WORNio3Dk8NuJWOTd2jX0vqpN3vjasXsWbZ94
OiBuTTWMQ8jU+BqmjqV4Hv7oDIV0fwdNowYmsomrPoJGGAOcgn+lUS75OuWZTw3H
mhn3j9kCTnaydtJILndJobh/+ASS0FlXsduoHQPkfoOkjwNiUF3xKl4rOhlU2fe1
Wn170WqW6xHeNTcxeJnTlyYRQELy//2UnLGHC8+XrJ7QUVy8Mgk545HkU1RDWodR
7tm4a8yKaoarQnD4bqZoVSEdorrJ6CmJBJkcZc9i414PhMBUb/mv0vrq3gYvAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUnWVL44+7XyjQFMXK5eVBCuwAv6wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XpweMA0GCSqGSIb3DQEBCwUAA4IBAQAyb/Q8Jr60jCpbCJXDNxEqvqwUVhSJG80e
FdnPlITn7CU23VYRhxxYoWZ+JAu04Ody+7hLkCT9hoO3pUhvQz/QDQk/R+5068uc
u7g/Ud3XP68vmD+d2oKw135O8ocPkc8VyhV1a0wBD2C5aTfLkSfim6zzRZgyGxwS
nf23BVJA1/vN2oC45zqL7hXZIg8w2nMfDdI/5mgxQ4tpPiu4x4sOtej0EV7d8hzW
+S0CSyCirwzrDQB9Mgi2k6LHKSJ4TgxpvDgWsKyv/j04C5JGkjMOh5PzuT+jcoWj
DIyK9Srxlgjjp/ONM1kLrOUWzUU6oD/yWQc56nKDcZfP4nV7b1EA
-----END CERTIFICATE-----
Generated at Thu Jun 4 06:12:51 2026 by rpki-client