Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233362e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: S6SDwC2GerOednlOJRuHDglzVix1yTGmgDUQmwuEP9k=
Subject key identifier: 79:78:C8:A6:7D:8F:DD:F1:D9:A5:AA:3D:01:98:AE:51:01:85:78:D8
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 4ADEA9437661B595F0CD957EE9CC6DA7A65FC4C6
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233362e302f32342d3234203d3e203438303730.roa
Signing time: Tue 28 Apr 2026 16:07:17 +0000
ROA not before: Tue 28 Apr 2026 16:02:17 +0000
ROA not after: Tue 27 Apr 2027 16:07:17 +0000
asID: 48070
IP address blocks: 94.126.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:de:a9:43:76:61:b5:95:f0:cd:95:7e:e9:cc:6d:a7:a6:5f:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Apr 28 16:02:17 2026 GMT
Not After : Apr 27 16:07:17 2027 GMT
Subject: CN=7978C8A67D8FDDF1D9A5AA3D0198AE51018578D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:b7:03:13:a0:d4:61:b0:85:7d:98:46:ab:
ee:44:cf:d5:15:71:1e:e0:5b:9d:fc:78:1c:1f:bd:
a5:d4:91:2a:81:f4:05:7d:a3:d6:fb:43:f4:cc:c6:
71:f1:50:c1:c6:5f:95:9a:52:6e:9f:9d:28:85:d2:
16:ea:9e:7a:48:d4:56:62:42:8c:63:49:74:18:04:
b3:01:26:ee:b2:e7:fd:7f:98:0a:b3:27:f0:5e:16:
14:da:76:44:8e:5f:03:81:d3:ed:01:1f:d7:59:82:
58:ea:58:86:5b:a8:17:fe:5b:e4:1b:38:75:77:2e:
e5:85:4d:9c:a2:f4:02:ff:19:5a:14:9e:e1:54:e6:
7d:f9:0c:71:83:5c:19:77:bc:9d:05:45:d2:d4:dd:
a2:21:98:e1:63:6c:8b:30:21:8e:20:1b:6a:e5:b1:
42:5f:38:ee:dc:33:f5:ef:41:0f:2d:ca:b8:3d:b9:
78:97:91:3b:47:53:0b:4e:5c:7b:ec:17:f2:80:b9:
72:75:f5:9f:13:39:21:f9:56:45:19:3d:0a:6d:8a:
13:93:fc:d8:06:c7:71:a4:ce:96:7d:06:18:47:35:
28:ba:fd:25:e7:01:63:25:1d:7a:11:d1:3b:d3:17:
64:cb:06:7d:04:7a:37:f8:37:86:e7:fa:1f:0d:a1:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:78:C8:A6:7D:8F:DD:F1:D9:A5:AA:3D:01:98:AE:51:01:85:78:D8
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233362e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.236.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a4:90:55:73:3a:b5:9b:18:ab:7b:14:81:35:b5:95:5d:2c:
fc:6f:8e:75:e0:80:eb:76:ea:de:99:6a:f0:45:18:20:d3:ee:
96:24:d6:e7:d9:97:56:be:52:a2:b7:6e:5a:bb:67:4e:e9:d0:
fd:4d:ef:3f:09:ce:37:96:3d:1c:7f:03:37:da:40:77:4b:27:
66:32:a7:c5:1e:64:f5:24:b3:2f:19:5f:ec:f3:04:f7:ae:ef:
ef:81:42:ab:44:d1:a7:16:42:da:c1:9c:5b:0c:51:39:97:3a:
6c:b5:95:98:ba:a6:fe:5e:0e:a5:9f:91:d4:00:78:a2:6b:ab:
10:4c:a1:ae:b3:11:5e:65:d8:d8:96:9d:75:dc:d8:d1:62:88:
a5:7a:60:70:b8:a6:ed:a8:ef:40:dd:97:f7:f6:ee:3a:2f:7d:
be:61:a0:c8:27:76:a7:c0:16:c0:ea:e6:fa:ca:4e:06:c2:27:
0e:94:80:13:80:c0:90:a1:75:95:1f:0e:30:f2:2e:aa:22:75:
f2:eb:b7:a3:ee:04:71:1d:0f:4e:9a:d3:cd:5f:eb:b5:4b:75:
69:3d:45:7c:02:75:af:b9:bc:90:69:c2:03:c3:24:62:ab:6a:
ac:cd:8e:8b:4f:b8:2c:4f:07:ad:4e:31:aa:86:9c:7c:cf:6e:
70:8a:ce:6c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUSt6pQ3ZhtZXwzZV+6cxtp6ZfxMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNjA0MjgxNjAyMTdaFw0yNzA0MjcxNjA3MTdaMDMxMTAvBgNV
BAMTKDc5NzhDOEE2N0Q4RkRERjFEOUE1QUEzRDAxOThBRTUxMDE4NTc4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BbcDE6DUYbCFfZhGq+5Ez9UV
cR7gW538eBwfvaXUkSqB9AV9o9b7Q/TMxnHxUMHGX5WaUm6fnSiF0hbqnnpI1FZi
QoxjSXQYBLMBJu6y5/1/mAqzJ/BeFhTadkSOXwOB0+0BH9dZgljqWIZbqBf+W+Qb
OHV3LuWFTZyi9AL/GVoUnuFU5n35DHGDXBl3vJ0FRdLU3aIhmOFjbIswIY4gG2rl
sUJfOO7cM/XvQQ8tyrg9uXiXkTtHUwtOXHvsF/KAuXJ19Z8TOSH5VkUZPQptihOT
/NgGx3GkzpZ9BhhHNSi6/SXnAWMlHXoR0TvTF2TLBn0Eejf4N4bn+h8NoUovAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeXjIpn2P3fHZpao9AZiuUQGFeNgwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzkzNDJlMzEzMjM2MmUzMjMz
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Xn7sMA0GCSqGSIb3DQEBCwUAA4IBAQA2pJBVczq1mxirexSBNbWVXSz8b4514IDr
duremWrwRRgg0+6WJNbn2ZdWvlKit25au2dO6dD9Te8/Cc43lj0cfwM32kB3Sydm
MqfFHmT1JLMvGV/s8wT3ru/vgUKrRNGnFkLawZxbDFE5lzpstZWYuqb+Xg6ln5HU
AHiia6sQTKGusxFeZdjYlp113NjRYoilemBwuKbtqO9A3Zf39u46L32+YaDIJ3an
wBbA6ub6yk4GwicOlIATgMCQoXWVHw4w8i6qInXy67ej7gRxHQ9OmtPNX+u1S3Vp
PUV8AnWvubyQacIDwyRiq2qszY6LT7gsTwetTjGqhpx8z25wis5s
-----END CERTIFICATE-----
Generated at Wed May 13 05:09:04 2026 by rpki-client