Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS39238.roa
File: AS39238.roa (raw, json)
Hash identifier: Fub5Qj7MUJobG7Gt1ADmTdMTFzgR8Y4EcOW8vVPiGo0=
Subject key identifier: 50:F7:83:0B:4A:C2:46:FC:7A:73:60:AC:D0:8C:81:F6:D7:70:58:2E
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 463CD29652D3E12191574CC34A690E0F78B959DE
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS39238.roa
Signing time: Mon 13 Jul 2026 19:55:02 +0000
ROA not before: Mon 13 Jul 2026 19:50:02 +0000
ROA not after: Mon 12 Jul 2027 19:55:02 +0000
asID: 39238
IP address blocks: 83.171.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3c:d2:96:52:d3:e1:21:91:57:4c:c3:4a:69:0e:0f:78:b9:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Jul 13 19:50:02 2026 GMT
Not After : Jul 12 19:55:02 2027 GMT
Subject: CN=50F7830B4AC246FC7A7360ACD08C81F6D770582E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:3c:ec:98:51:b1:e7:3d:fc:0f:ad:29:d4:
c8:9c:12:10:cc:58:91:23:a3:62:67:7a:22:21:e3:
13:99:ae:6d:32:58:27:81:62:96:c0:5e:18:8c:24:
18:7d:5b:15:4e:96:12:10:a4:75:ad:0b:46:4c:b0:
01:9d:c7:bc:3b:42:88:ab:94:e3:7d:ad:09:2f:05:
aa:a3:86:a9:14:ff:c3:5d:9e:5c:f7:dd:23:0f:29:
4a:7b:54:12:c2:9c:36:31:39:91:99:cb:f0:26:67:
2c:f4:5d:66:bc:af:82:b1:60:79:bf:49:6b:2e:46:
53:c3:c1:21:39:75:c2:a0:72:41:99:9d:d1:8a:c9:
40:60:46:48:39:bd:7c:e7:30:c1:46:6c:64:20:36:
9f:cd:7f:31:d6:ea:d5:f8:b9:0d:cc:27:65:99:fe:
8d:b0:8f:14:4f:75:b3:41:7a:06:62:9d:73:91:c9:
51:01:16:ac:ad:6a:f4:c8:9d:96:39:87:22:54:12:
89:2c:f2:9e:9c:39:eb:ba:cf:d1:22:a8:a3:70:36:
ba:5a:2a:bb:36:38:60:12:11:4e:18:6e:2f:06:a8:
a7:9d:88:05:41:09:20:00:0b:8a:39:6b:03:4b:00:
22:fd:32:d5:77:08:9e:70:c5:3e:e9:d1:16:e1:0f:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F7:83:0B:4A:C2:46:FC:7A:73:60:AC:D0:8C:81:F6:D7:70:58:2E
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS39238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2c:b7:b9:a5:99:84:77:a1:e8:48:61:08:2c:01:85:30:91:
74:e5:17:de:5a:64:e6:44:41:46:e9:b4:8e:43:42:1b:b2:bb:
c8:7f:d8:fc:d3:c8:27:e2:e6:c9:c9:c1:d4:e3:00:1a:f9:5c:
f4:d1:74:a7:bf:48:b4:a9:38:bd:18:db:2c:7d:33:2d:7e:0f:
d6:9d:bb:7b:c9:81:df:0c:ec:5c:7a:b4:6c:b4:72:dd:1c:06:
13:e8:32:60:95:42:3a:60:86:e8:79:19:51:11:2d:5b:7b:3d:
71:eb:17:23:34:66:a0:97:15:63:1b:88:79:18:25:f6:4b:36:
2f:63:6a:d8:8d:98:27:20:8f:c5:fa:b7:f5:2f:bb:75:ab:9e:
2d:e1:2d:d7:9b:3b:94:c3:e1:61:5a:9a:8b:8c:cd:f1:e1:7d:
88:34:6b:e5:49:70:ea:22:9a:42:2d:05:f7:32:6f:17:a1:7f:
0a:c6:65:86:9b:f2:0f:5d:98:c5:a8:dc:20:5a:da:43:2a:0a:
81:5e:37:ff:6b:06:f8:9c:cd:11:46:77:9d:02:0c:29:18:1a:
f0:b3:6d:3e:54:c5:3d:d3:4f:b9:e4:91:8c:4c:45:d3:ab:0b:
a6:35:c2:39:4f:75:bf:7a:61:73:05:ab:13:f3:85:fc:ec:d9:
fb:fe:50:eb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIURjzSllLT4SGRV0zDSmkOD3i5Wd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjA3MTMxOTUwMDJaFw0yNzA3MTIxOTU1MDJaMDMxMTAvBgNV
BAMTKDUwRjc4MzBCNEFDMjQ2RkM3QTczNjBBQ0QwOEM4MUY2RDc3MDU4MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGjzsmFGx5z38D60p1MicEhDM
WJEjo2JneiIh4xOZrm0yWCeBYpbAXhiMJBh9WxVOlhIQpHWtC0ZMsAGdx7w7Qoir
lON9rQkvBaqjhqkU/8Ndnlz33SMPKUp7VBLCnDYxOZGZy/AmZyz0XWa8r4KxYHm/
SWsuRlPDwSE5dcKgckGZndGKyUBgRkg5vXznMMFGbGQgNp/NfzHW6tX4uQ3MJ2WZ
/o2wjxRPdbNBegZinXORyVEBFqytavTInZY5hyJUEoks8p6cOeu6z9EiqKNwNrpa
Krs2OGASEU4Ybi8GqKediAVBCSAAC4o5awNLACL9MtV3CJ5wxT7p0RbhD9L5AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUUPeDC0rCRvx6c2Cs0IyB9tdwWC4wHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMzkyMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTq/Qw
DQYJKoZIhvcNAQELBQADggEBACMst7mlmYR3oehIYQgsAYUwkXTlF95aZOZEQUbp
tI5DQhuyu8h/2PzTyCfi5snJwdTjABr5XPTRdKe/SLSpOL0Y2yx9My1+D9adu3vJ
gd8M7Fx6tGy0ct0cBhPoMmCVQjpghuh5GVERLVt7PXHrFyM0ZqCXFWMbiHkYJfZL
Ni9jatiNmCcgj8X6t/Uvu3Wrni3hLdebO5TD4WFamouMzfHhfYg0a+VJcOoimkIt
BfcybxehfwrGZYab8g9dmMWo3CBa2kMqCoFeN/9rBviczRFGd50CDCkYGvCzbT5U
xT3TT7nkkYxMRdOrC6Y1wjlPdb96YXMFqxPzhfzs2fv+UOs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:24 2026 by rpki-client