Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: GAWZYYDwsOlKdKyp7PTXI/UrCvh+l1mDQ2h9llOVew4=
Subject key identifier: E8:63:F6:A2:2F:6F:7A:F3:2F:A9:4D:A0:AB:75:90:6F:D2:B4:78:65
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 5A9C9640E35C0D476A4037AA42ABFBA56EF75972
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
Signing time: Tue 28 Apr 2026 16:07:18 +0000
ROA not before: Tue 28 Apr 2026 16:02:18 +0000
ROA not after: Tue 27 Apr 2027 16:07:18 +0000
asID: 48070
IP address blocks: 94.126.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9c:96:40:e3:5c:0d:47:6a:40:37:aa:42:ab:fb:a5:6e:f7:59:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Apr 28 16:02:18 2026 GMT
Not After : Apr 27 16:07:18 2027 GMT
Subject: CN=E863F6A22F6F7AF32FA94DA0AB75906FD2B47865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:3a:8a:61:01:e2:82:01:2e:3b:86:3f:bd:
80:46:10:f4:d8:f7:a4:0e:9e:a3:bc:76:fa:62:4c:
d0:9a:15:61:08:b5:76:ed:4b:f8:af:2c:9c:1d:fa:
fd:fa:cf:59:9e:0f:ff:a2:5d:12:26:1c:96:b5:11:
7a:ec:aa:59:e7:ba:13:db:ff:a9:84:60:b8:4b:5d:
da:8b:1a:79:e6:81:7d:ea:1d:1c:9a:c9:93:d1:a8:
56:6e:22:96:11:74:b2:47:22:76:c5:43:16:db:a0:
31:ab:fa:dc:4c:3e:0a:b8:34:3a:2c:56:a3:fb:59:
6f:e8:3c:a3:11:48:08:2d:66:1a:d9:8d:9b:23:20:
2e:f0:e0:e0:e3:a7:d9:59:6e:91:ec:65:b2:d9:06:
2f:75:46:ab:a2:d4:dd:52:ee:5a:82:f4:45:6e:49:
38:49:87:f7:85:be:72:fa:a9:78:27:15:3d:45:62:
e9:a3:6b:70:24:6a:9c:bf:d5:c6:e7:16:93:b3:cb:
00:5c:5e:b0:ea:7a:b6:16:ef:06:d3:8a:d0:24:bb:
62:b3:1a:56:37:58:70:eb:c1:4f:6c:a7:9a:55:ac:
e0:19:5e:6a:48:46:4b:eb:e6:13:a5:0e:e9:3f:8f:
85:34:4a:41:4b:98:b0:5a:a0:ab:d0:3c:69:c4:a4:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:F6:A2:2F:6F:7A:F3:2F:A9:4D:A0:AB:75:90:6F:D2:B4:78:65
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ae:8e:30:44:c8:1d:72:a3:6f:96:5d:e3:f7:67:43:92:00:
31:27:69:e2:04:3b:41:9d:f4:dc:3d:a1:3d:bd:52:91:5f:61:
32:e7:0c:b3:1e:48:73:09:79:31:7f:e9:22:96:a8:e9:0d:ea:
c6:37:f0:31:60:d1:17:f7:02:29:9c:4d:99:34:e0:e7:ff:7c:
12:c0:2b:1e:55:1b:19:d8:20:f5:f0:cf:a8:2a:2b:3c:06:07:
38:2e:b8:6f:c9:0f:8c:55:22:8b:c4:41:2d:4d:3a:39:4a:c8:
26:65:ff:ad:41:70:a7:a9:e3:7e:cb:f2:79:c9:d2:e9:d8:4c:
d9:5a:a6:b3:81:df:8f:c9:28:59:50:c4:86:24:8e:7c:b3:65:
d0:93:ce:39:ce:91:2f:22:ca:e4:1c:6c:00:53:74:c8:db:eb:
eb:f7:ce:a8:27:ed:37:a5:63:3b:d8:ba:6a:bf:ba:0c:57:aa:
18:fb:67:2b:fb:0f:13:f0:05:96:14:16:e0:43:94:73:17:d3:
10:4e:b2:89:36:b9:0f:e3:50:23:a2:cc:60:c2:97:b8:ca:f2:
cd:1a:78:ad:b8:30:54:f2:47:c9:04:e5:b8:3f:6e:aa:cd:75:
a7:f6:04:c0:65:19:d6:78:63:de:e1:2c:40:8c:59:c3:98:dd:
7e:3f:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:18 2026 by rpki-client