Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20323132323338.roa
File: 39332e3131342e36312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: URhPUh+QEdzDwEA9EE+Skw3jjJR8B2pegBaCUnwTfXI=
Subject key identifier: 3D:56:A3:5C:DC:39:1F:7D:40:E9:42:E3:6E:EF:A4:5E:28:71:5E:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 223CCDEB0920FC84051C03B4CC942440EF161776
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:10 +0000
ROA not before: Tue 22 Sep 2026 13:24:10 +0000
ROA not after: Tue 21 Sep 2027 13:29:10 +0000
asID: 212238
IP address blocks: 93.114.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:3c:cd:eb:09:20:fc:84:05:1c:03:b4:cc:94:24:40:ef:16:17:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:10 2026 GMT
Not After : Sep 21 13:29:10 2027 GMT
Subject: CN=3D56A35CDC391F7D40E942E36EEFA45E28715E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:2e:70:53:32:e7:d6:6f:bb:f6:a6:34:23:
2b:57:d7:7d:af:e7:39:b5:16:d7:1d:2b:87:5d:e5:
eb:9d:df:40:ef:5a:44:8a:9f:10:08:e3:fb:0b:ec:
e7:31:54:a6:95:87:f5:8c:4b:f2:c2:e9:36:64:9b:
fb:75:00:fd:70:08:60:ce:0c:c6:2b:35:d1:a8:78:
6b:d1:0a:6b:84:99:e1:d1:69:c4:5f:cc:1e:5c:30:
67:19:78:35:9c:3a:eb:7a:2f:8e:94:eb:de:79:f0:
d0:73:fa:0d:42:c3:2c:76:5d:34:f9:3d:e5:18:f8:
96:54:ac:ea:4b:06:ff:26:32:bc:9c:51:4a:cc:42:
7a:8a:e7:1a:97:8f:b4:9b:92:aa:e3:98:95:ee:3a:
1e:b7:b7:76:dd:93:69:1b:88:8f:09:fd:e8:fd:75:
40:ce:f8:3c:18:e3:f1:db:af:57:ae:98:02:3f:2b:
2f:90:4b:2d:da:a7:68:88:c9:31:28:6f:ca:f6:d6:
a7:bc:fa:1b:05:52:56:74:03:bd:57:b7:bb:02:76:
dc:f5:bd:cc:57:fb:53:9f:fd:29:8c:dc:69:4c:07:
13:3c:ec:dc:d1:8a:63:ca:d5:55:84:14:c6:48:99:
24:7d:c4:8e:6b:5a:05:3d:34:0c:75:6a:ed:6d:77:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:A3:5C:DC:39:1F:7D:40:E9:42:E3:6E:EF:A4:5E:28:71:5E:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8e:df:e8:81:92:c5:24:95:21:4c:ad:44:87:73:6f:81:60:
68:bf:c9:52:2a:c2:e4:a1:0a:69:3a:4d:3b:ee:66:b5:65:8a:
98:85:37:f0:f2:bf:8d:b6:2e:3e:bd:81:00:41:dd:3b:5e:ca:
d1:d9:71:05:cd:9a:bf:c4:44:10:2b:e8:77:7e:11:e4:e7:1e:
48:e0:24:07:b3:b7:e7:60:eb:0b:e0:a1:10:d6:13:54:00:12:
3f:6f:fa:f5:c7:c8:f9:7c:bc:20:42:55:eb:24:36:03:5b:fe:
07:4c:18:8f:f8:78:a9:65:b3:12:df:f3:f3:5b:b3:34:f7:fb:
c7:be:90:e1:e2:f5:05:c2:47:ac:93:2e:26:2b:a6:81:8b:ac:
7b:c9:ac:b0:d2:d1:ef:4a:49:2f:50:5f:d2:f9:b5:b7:8b:18:
59:3f:70:d8:ee:ce:6f:3d:78:24:5e:ec:3e:0b:69:a2:a0:cc:
09:90:5a:84:f2:5a:ec:7e:04:b5:2d:c7:33:2b:26:cf:89:aa:
6f:ed:77:a0:d7:bf:37:3e:23:bd:8b:0b:6a:97:ae:e2:5d:5e:
f4:19:fe:77:87:f6:16:0a:d9:23:d2:45:82:fb:36:7a:42:77:
95:f8:90:c5:74:32:dc:e3:03:f6:59:56:66:2a:a6:03:95:d1:
5b:9f:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:15 2026 by rpki-client