Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
File: 39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Z0Z869UeZqjBDF7K5ZVfmriJBpYUD815oIOgjw4JYPE=
Subject key identifier: BC:CA:12:D1:EB:4C:7D:90:E9:2C:A2:3E:84:B3:AF:CA:1F:B6:64:3A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 334F75E34F0C442B407FB111F784450BA6905C47
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:25:59 +0000
ROA not before: Wed 01 Jul 2026 15:20:59 +0000
ROA not after: Wed 30 Jun 2027 15:25:59 +0000
asID: 136787
IP address blocks: 91.229.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4f:75:e3:4f:0c:44:2b:40:7f:b1:11:f7:84:45:0b:a6:90:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:59 2026 GMT
Not After : Jun 30 15:25:59 2027 GMT
Subject: CN=BCCA12D1EB4C7D90E92CA23E84B3AFCA1FB6643A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:2b:f6:fe:14:6b:3c:1f:60:99:26:eb:23:
ec:d9:dc:9e:24:69:c8:8e:62:cd:eb:83:3d:0d:bd:
32:b0:a1:cb:ab:7f:62:50:ae:9a:30:6b:e1:00:36:
0b:75:93:5d:4f:83:5f:88:53:33:2f:ba:09:ab:a2:
dd:9b:ef:19:24:f1:51:6c:3a:ea:bd:cd:cf:a5:80:
f6:00:c8:d1:66:c1:1c:7e:a0:f7:2d:82:c7:1f:94:
c2:df:18:40:93:bd:e6:0d:ba:c7:53:4c:f6:43:73:
87:52:53:db:58:ac:5a:91:61:b6:cc:c0:58:c2:68:
d4:d3:bb:01:80:94:1f:5e:f2:e0:fb:7e:c8:8d:8e:
c6:df:00:0e:a8:3b:b5:64:e6:13:f4:ca:0a:f1:96:
2c:a4:df:82:fb:83:ff:42:3d:97:fa:31:8f:d5:3d:
66:cf:6d:23:e4:c4:dc:ea:98:73:f7:61:84:f2:52:
ea:ef:c6:e6:ca:1f:df:69:df:38:03:da:50:f7:d6:
b0:fa:bd:04:96:f3:5c:cf:32:84:94:34:73:4b:f6:
40:23:ab:fd:4e:be:e8:14:85:21:1c:39:e7:5d:9b:
26:2e:47:09:40:64:b0:1b:67:2a:39:c3:b0:30:2d:
c1:12:2e:32:b1:39:b1:3c:f4:c8:1a:39:4c:57:9c:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:12:D1:EB:4C:7D:90:E9:2C:A2:3E:84:B3:AF:CA:1F:B6:64:3A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.244.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3e:4f:6a:5c:02:b5:e1:86:78:3b:02:f1:85:bd:2b:99:0d:
1c:39:ec:5a:17:0d:8c:05:d4:a7:74:e4:11:4b:e5:ef:7f:97:
47:15:ab:d7:46:5e:ca:46:8d:1b:81:6b:b1:10:58:93:48:8e:
91:e6:aa:f6:b1:06:bb:27:22:88:da:7e:44:78:0f:44:13:7b:
89:4b:d0:69:b0:83:fe:0d:b1:1f:3c:a4:68:3c:14:9e:eb:96:
e2:11:27:a6:9b:2e:d2:00:db:f9:47:a0:4c:5d:ac:d9:b7:d1:
c8:54:4a:e7:7e:23:35:ed:ee:a3:21:23:68:2b:d3:1a:d6:cb:
66:75:d2:47:0c:2f:cb:d8:c2:7d:4e:48:35:2a:be:2f:24:06:
9f:bb:58:75:2b:fa:89:e1:21:de:33:6d:59:87:f3:95:f6:2f:
f0:26:b1:4c:03:8f:b4:60:8c:2a:d5:78:29:3c:56:b1:b8:66:
7d:b9:bc:0d:e8:90:b5:7f:48:4d:ac:a1:d9:d7:fa:67:3c:b2:
c0:4b:73:8d:86:13:58:4f:9e:8c:b9:e3:49:51:93:aa:7d:92:
7c:87:7b:ab:5b:19:b3:e5:f0:0f:bd:39:b8:54:57:1c:28:37:
c9:1d:2f:45:a2:da:83:8f:03:f8:bb:7d:29:41:aa:5e:da:5b:
9a:c0:11:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:41 2026 by rpki-client