Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233322e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: X8PnZpr0EdBA5RUWuQSsCNK5H5VUChiA/ypM8jex1co=
Subject key identifier: 8B:C1:18:09:C9:13:1F:35:6A:CF:4F:F7:1C:D3:70:9A:6F:3E:CA:75
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 687B7B8F9A6F498DCB211AA242180CEB598A9728
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233322e302f32342d3234203d3e203438303730.roa
Signing time: Tue 28 Apr 2026 16:07:18 +0000
ROA not before: Tue 28 Apr 2026 16:02:18 +0000
ROA not after: Tue 27 Apr 2027 16:07:18 +0000
asID: 48070
IP address blocks: 94.126.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7b:7b:8f:9a:6f:49:8d:cb:21:1a:a2:42:18:0c:eb:59:8a:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Apr 28 16:02:18 2026 GMT
Not After : Apr 27 16:07:18 2027 GMT
Subject: CN=8BC11809C9131F356ACF4FF71CD3709A6F3ECA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:fc:08:b8:4b:51:81:bc:ef:57:d8:de:9f:
40:0f:34:16:93:6f:2b:aa:20:32:ff:4b:ca:43:db:
c7:5d:2d:84:87:f6:56:8e:d7:5d:3c:cd:eb:43:12:
dd:57:33:3a:85:6d:d0:35:80:04:d0:e2:74:9d:d0:
19:42:c8:76:61:d8:81:64:f2:3f:1d:9a:df:55:85:
dc:3a:a8:f7:32:a7:49:ed:62:f9:d1:c7:c6:0b:5f:
22:25:57:3e:7b:35:58:6f:c1:3e:23:c7:81:27:9c:
b8:0a:68:c2:d2:be:d5:0a:15:2f:82:49:61:97:6d:
1e:45:1f:73:f7:05:12:4f:88:6b:0a:67:3a:40:cb:
4f:d7:e0:d8:5a:ea:e4:e2:47:6a:ee:8c:ec:91:c4:
75:af:23:1e:c8:97:62:52:8e:9f:90:33:77:18:a9:
ea:da:9e:d0:54:d5:9c:45:7f:5f:28:c0:0d:ad:8d:
92:11:79:66:b4:bd:ff:3f:08:8f:44:c6:37:ba:90:
4d:b2:a6:6b:f4:33:ee:ca:95:b0:5f:00:56:1c:34:
c8:3c:e1:58:f1:77:91:57:10:8c:c3:b9:0d:2f:62:
ea:e2:9d:9d:79:31:db:60:e5:38:0b:03:75:2a:64:
f8:1a:70:a4:23:d1:52:e4:70:c8:29:7b:85:ff:d2:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C1:18:09:C9:13:1F:35:6A:CF:4F:F7:1C:D3:70:9A:6F:3E:CA:75
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233322e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/24
Signature Algorithm: sha256WithRSAEncryption
33:12:46:cc:dd:e8:9c:27:5e:79:b6:f5:28:1a:14:04:ff:09:
55:04:b8:09:dc:c2:26:c8:36:47:8c:3d:2e:d1:a2:00:5f:85:
d6:eb:86:72:3e:47:b0:06:bb:8c:f4:51:f8:c3:f2:00:1a:04:
39:2d:e9:68:3a:03:eb:6c:c3:33:8d:d7:5f:67:86:a8:d9:e1:
54:95:52:b2:0a:96:13:a0:e7:ae:4e:1b:19:11:da:5b:91:a6:
c8:3c:b1:ca:98:8c:53:96:12:49:44:66:6d:5d:43:8c:ba:c2:
12:e2:86:11:fd:57:5e:bf:0d:4e:18:73:58:84:b2:a4:e3:45:
bc:77:a2:b5:f8:ec:76:2d:d5:cc:17:62:56:1c:ad:ad:30:c0:
8e:72:08:a4:6f:10:94:fc:4d:72:7f:9b:4d:a7:c1:27:62:31:
e8:d7:b0:a2:d8:ee:77:f1:2c:d2:0d:16:9b:88:b7:b6:53:8d:
7a:6f:e9:99:6a:c0:93:49:51:c4:5a:b9:f2:48:dd:2b:cd:9f:
c0:02:de:ef:bb:2a:f8:82:b0:2c:70:e8:0a:45:25:94:31:62:
03:d9:81:aa:19:ad:ba:fd:d1:8d:53:81:0b:c3:f6:ab:45:74:
8e:69:a1:3d:8c:32:41:ae:c4:30:6a:4a:6d:e3:5f:d6:40:ce:
ad:9f:11:8b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaHt7j5pvSY3LIRqiQhgM61mKlygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNjA0MjgxNjAyMThaFw0yNzA0MjcxNjA3MThaMDMxMTAvBgNV
BAMTKDhCQzExODA5QzkxMzFGMzU2QUNGNEZGNzFDRDM3MDlBNkYzRUNBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWGvwIuEtRgbzvV9jen0APNBaT
byuqIDL/S8pD28ddLYSH9laO1108zetDEt1XMzqFbdA1gATQ4nSd0BlCyHZh2IFk
8j8dmt9Vhdw6qPcyp0ntYvnRx8YLXyIlVz57NVhvwT4jx4EnnLgKaMLSvtUKFS+C
SWGXbR5FH3P3BRJPiGsKZzpAy0/X4Nha6uTiR2rujOyRxHWvIx7Il2JSjp+QM3cY
qerantBU1ZxFf18owA2tjZIReWa0vf8/CI9Exje6kE2ypmv0M+7KlbBfAFYcNMg8
4Vjxd5FXEIzDuQ0vYurinZ15Mdtg5TgLA3UqZPgacKQj0VLkcMgpe4X/0hKPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUi8EYCckTHzVqz0/3HNNwmm8+ynUwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzkzNDJlMzEzMjM2MmUzMjMz
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Xn7oMA0GCSqGSIb3DQEBCwUAA4IBAQAzEkbM3eicJ155tvUoGhQE/wlVBLgJ3MIm
yDZHjD0u0aIAX4XW64ZyPkewBruM9FH4w/IAGgQ5LeloOgPrbMMzjddfZ4ao2eFU
lVKyCpYToOeuThsZEdpbkabIPLHKmIxTlhJJRGZtXUOMusIS4oYR/Vdevw1OGHNY
hLKk40W8d6K1+Ox2LdXMF2JWHK2tMMCOcgikbxCU/E1yf5tNp8EnYjHo17Ci2O53
8SzSDRabiLe2U416b+mZasCTSVHEWrnySN0rzZ/AAt7vuyr4grAscOgKRSWUMWID
2YGqGa26/dGNU4ELw/arRXSOaaE9jDJBrsQwakpt41/WQM6tnxGL
-----END CERTIFICATE-----
Generated at Wed May 13 05:09:08 2026 by rpki-client