Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33312e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e33312e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: wxBcNMnoqniwK8As8kVxxShqaSmoEsUdAbV5Yqnf+gw=
Subject key identifier: EE:E9:D3:88:57:43:21:C9:18:C1:61:D4:03:7D:82:4C:6D:37:6E:98
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79424593BD472716447650CA36420E54BFE7B06A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33312e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 29 Jul 2026 22:27:17 +0000
ROA not before: Wed 29 Jul 2026 22:22:17 +0000
ROA not after: Wed 28 Jul 2027 22:27:17 +0000
asID: 214155
IP address blocks: 94.156.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:42:45:93:bd:47:27:16:44:76:50:ca:36:42:0e:54:bf:e7:b0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:17 2026 GMT
Not After : Jul 28 22:27:17 2027 GMT
Subject: CN=EEE9D388574321C918C161D4037D824C6D376E98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:30:e2:ec:09:a1:6f:30:c3:4b:38:fd:bf:
ba:3f:7f:f8:24:63:8e:77:70:9b:90:ca:c3:fc:0f:
d3:ec:7c:d4:c2:58:eb:c4:ed:84:4a:ee:cf:a4:c0:
25:f1:ca:56:6e:48:1b:d4:14:48:dc:85:43:b4:25:
ec:ee:56:9a:60:40:f0:b5:3c:ab:6b:06:75:1c:82:
dc:ac:95:63:88:09:36:38:80:40:f1:55:24:b0:c1:
ab:1f:46:32:ca:0d:b2:24:74:d0:75:f6:2d:38:be:
4a:59:08:44:29:ad:54:19:1c:ee:fa:9b:50:66:0c:
95:c8:ce:24:72:f4:02:d7:7a:70:3a:f6:3c:6f:46:
69:9a:d7:cd:6f:7f:d2:2f:4f:7a:80:9b:0d:39:0d:
0c:60:15:ba:a8:08:0f:3f:56:46:86:ab:d8:d7:6b:
83:37:7d:6d:1e:42:14:69:f4:64:54:2f:ef:b7:b9:
c7:37:7a:6c:4c:2c:af:a2:9d:3c:49:8e:00:c6:f7:
1c:cc:1e:20:c2:a7:ab:4c:2f:ea:f6:97:e4:2b:b6:
42:be:a2:20:fe:65:bc:71:fc:aa:c9:c9:4c:9a:2f:
73:8f:6f:d7:79:f6:7f:f1:ab:b9:b6:b4:29:c7:94:
93:d0:10:55:be:a6:68:58:5a:fe:40:d1:5c:38:1e:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:D3:88:57:43:21:C9:18:C1:61:D4:03:7D:82:4C:6D:37:6E:98
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33312e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.31.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b7:0f:3a:81:ec:6d:1e:34:08:e4:78:5d:d4:13:c4:ec:e9:
70:62:06:35:f8:b0:66:bb:7a:1c:d4:60:49:73:72:13:d0:79:
e1:76:ee:22:cb:0a:47:12:68:5c:d2:4f:92:35:ad:cb:3f:66:
42:cd:72:3c:a4:af:e8:e2:6c:ed:77:2a:95:49:f2:b2:d7:7e:
01:ad:28:d8:c4:88:fd:8f:2b:bb:04:d4:77:5a:6f:28:52:2f:
fb:66:d3:bc:36:13:d2:a5:29:e8:4b:23:c3:db:19:49:13:ed:
05:ee:a6:45:78:ce:03:cd:d3:37:08:c7:6f:8b:1f:56:64:fc:
87:7d:93:c4:ea:7b:78:df:37:95:fe:35:30:85:00:35:38:ef:
a1:a8:7c:4c:1b:02:95:eb:58:e0:0a:e8:bd:72:2e:2d:57:ff:
83:85:ab:bc:50:30:02:6a:cf:24:cb:01:84:a0:7d:7f:18:5e:
c6:29:c8:1b:d3:c9:d8:aa:da:39:2c:49:49:ae:21:88:47:35:
0a:1f:c7:3a:34:db:c9:bc:70:6e:cc:c5:0d:eb:01:95:9d:e2:
5b:96:13:f7:05:bc:f4:20:59:b4:74:64:8d:49:e3:a5:a0:48:
9d:b5:e9:f5:37:ce:5f:f4:f3:56:67:d7:68:c1:05:55:67:7c:
fa:79:19:63
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeUJFk71HJxZEdlDKNkIOVL/nsGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjkyMjIyMTdaFw0yNzA3MjgyMjI3MTdaMDMxMTAvBgNV
BAMTKEVFRTlEMzg4NTc0MzIxQzkxOEMxNjFENDAzN0Q4MjRDNkQzNzZFOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HTDi7AmhbzDDSzj9v7o/f/gk
Y453cJuQysP8D9PsfNTCWOvE7YRK7s+kwCXxylZuSBvUFEjchUO0JezuVppgQPC1
PKtrBnUcgtyslWOICTY4gEDxVSSwwasfRjLKDbIkdNB19i04vkpZCEQprVQZHO76
m1BmDJXIziRy9ALXenA69jxvRmma181vf9IvT3qAmw05DQxgFbqoCA8/VkaGq9jX
a4M3fW0eQhRp9GRUL++3ucc3emxMLK+inTxJjgDG9xzMHiDCp6tML+r2l+QrtkK+
oiD+Zbxx/KrJyUyaL3OPb9d59n/xq7m2tCnHlJPQEFW+pmhYWv5A0Vw4Hg6/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU7unTiFdDIckYwWHUA32CTG03bpgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzEzNTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XpwfMA0GCSqGSIb3DQEBCwUAA4IBAQAYtw86gextHjQI5Hhd1BPE7OlwYgY1+LBm
u3oc1GBJc3IT0Hnhdu4iywpHEmhc0k+SNa3LP2ZCzXI8pK/o4mztdyqVSfKy134B
rSjYxIj9jyu7BNR3Wm8oUi/7ZtO8NhPSpSnoSyPD2xlJE+0F7qZFeM4DzdM3CMdv
ix9WZPyHfZPE6nt43zeV/jUwhQA1OO+hqHxMGwKV61jgCui9ci4tV/+Dhau8UDAC
as8kywGEoH1/GF7GKcgb08nYqto5LElJriGIRzUKH8c6NNvJvHBuzMUN6wGVneJb
lhP3Bbz0IFm0dGSNSeOloEidten1N85f9PNWZ9dowQVVZ3z6eRlj
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:00 2026 by rpki-client