Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233372e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: xlU4kVdwk7oiDoF+bffscimCuIIUyzgFn5roi6hyudE=
Subject key identifier: 74:89:D1:E8:B9:7E:40:B4:A6:42:50:E8:48:7D:3E:C6:67:C7:7D:C1
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 7FE50C4546B1D45E3FD9F6F261983DA256532827
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233372e302f32342d3234203d3e203438303730.roa
Signing time: Tue 28 Apr 2026 16:07:17 +0000
ROA not before: Tue 28 Apr 2026 16:02:17 +0000
ROA not after: Tue 27 Apr 2027 16:07:17 +0000
asID: 48070
IP address blocks: 94.126.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e5:0c:45:46:b1:d4:5e:3f:d9:f6:f2:61:98:3d:a2:56:53:28:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Apr 28 16:02:17 2026 GMT
Not After : Apr 27 16:07:17 2027 GMT
Subject: CN=7489D1E8B97E40B4A64250E8487D3EC667C77DC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:d3:08:6c:b9:18:3b:2d:d9:45:b8:12:58:
b0:55:4b:c2:89:a9:80:f4:08:90:5b:87:91:31:be:
cc:3b:91:6d:d8:ec:36:f8:f4:66:b9:03:d9:f1:c3:
78:a1:f1:ab:74:e4:d0:89:0f:b5:0e:45:85:b4:fc:
8a:a7:a6:a8:59:e8:3a:bc:d1:ed:e3:b3:7b:bb:3e:
e8:aa:35:d2:cb:c7:0f:73:2c:8a:f3:a6:54:30:02:
d1:76:40:d0:59:a0:a3:66:cd:f8:19:a8:09:d8:6e:
b4:db:82:2b:ca:52:e0:06:bd:38:68:70:4e:c2:f3:
bc:4f:56:b7:60:db:52:46:38:d4:59:cb:dc:9c:51:
65:aa:52:a0:df:94:c0:32:be:4b:cd:bb:7f:1e:63:
73:97:df:44:f5:d6:fe:c0:19:3d:f1:ad:b0:79:77:
b3:41:7f:4e:8c:af:27:ec:8d:0b:b7:fc:62:e7:11:
80:29:34:2b:dd:c8:51:62:0f:85:ed:2e:93:35:16:
ce:e7:a1:3b:07:66:87:22:e6:72:97:61:dc:c8:ed:
22:3f:e6:0f:fa:44:53:4c:3e:62:40:55:ed:b4:7a:
ce:ad:80:86:ae:e3:43:c6:32:20:74:21:40:ed:73:
0a:69:d6:ce:17:1c:60:61:2f:36:99:26:7b:8a:ab:
50:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:89:D1:E8:B9:7E:40:B4:A6:42:50:E8:48:7D:3E:C6:67:C7:7D:C1
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233372e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.237.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:04:20:36:8c:45:c4:5d:48:c4:c8:3b:03:5b:5d:ec:20:28:
20:c2:9d:62:4a:35:c7:62:2e:e1:f0:74:6b:59:9c:e0:a8:8e:
64:4f:f0:96:2b:25:d7:6b:f6:8a:d3:a0:f8:6a:82:69:db:2a:
d1:29:3e:e9:80:5b:e8:0e:9d:c2:61:6d:8f:b4:5e:64:e9:b1:
8f:b2:2c:b3:eb:fd:2f:59:27:fa:ea:d4:71:94:ce:de:1d:40:
76:fd:04:e0:f8:da:0f:9c:af:99:06:a0:50:72:ac:ab:80:b3:
8a:96:5c:f8:ce:ca:dd:46:d1:58:42:c0:df:55:73:c0:14:d2:
b2:38:a4:4a:35:70:48:98:95:08:1d:d4:6a:ad:25:4c:6a:dd:
05:14:36:15:eb:d1:a4:0d:7b:98:0c:af:fd:58:15:97:96:2e:
f5:9b:22:33:e0:3d:84:c0:2c:d3:3e:06:f5:4a:12:74:9e:60:
1a:3d:e1:d6:12:0f:88:ca:84:d7:f9:a0:7b:14:bd:f3:56:0e:
83:44:40:56:0c:ae:19:54:0a:c2:35:48:bc:ee:46:a2:87:a2:
ff:4a:46:f6:9b:35:f0:96:78:0c:62:f0:9a:22:a2:08:d4:1b:
04:b5:aa:7a:87:d4:02:76:ad:b0:22:50:a3:da:c9:83:82:a6:
56:0a:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:29 2026 by rpki-client