Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134382e302f32342d3234203d3e20323132323338.roa
File: 39342e3135362e3134382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 1mkeKcs9MWx3mdfAJL3nWNe0uLMJixXrvdZoQVJfzOA=
Subject key identifier: 4B:CB:E2:23:D5:9D:1C:9F:A8:2F:F8:99:E9:1A:9C:5D:2F:F4:11:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1DCDC1223511A3D98C940ACD5535E316D65CFC22
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134382e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:10 +0000
ROA not before: Tue 22 Sep 2026 13:24:10 +0000
ROA not after: Tue 21 Sep 2027 13:29:10 +0000
asID: 212238
IP address blocks: 94.156.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:cd:c1:22:35:11:a3:d9:8c:94:0a:cd:55:35:e3:16:d6:5c:fc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:10 2026 GMT
Not After : Sep 21 13:29:10 2027 GMT
Subject: CN=4BCBE223D59D1C9FA82FF899E91A9C5D2FF41137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:07:75:91:9e:7d:ad:f2:96:99:4a:87:f0:
04:a9:a4:fb:b1:f0:ed:e3:94:9c:fa:8a:7a:e7:b5:
d0:f2:47:b4:1d:c8:59:71:57:0f:78:42:a4:52:ea:
1d:e2:7b:dc:4d:45:2d:59:ac:93:4c:27:69:8a:99:
ce:36:7c:9f:e4:ce:7f:72:24:74:78:cc:16:a1:d8:
74:55:1a:35:62:ac:83:2e:d3:4a:60:57:bb:8c:3b:
50:b0:b0:ea:43:82:f3:6c:f2:58:00:40:da:2d:7b:
26:51:0a:81:cd:f3:29:5b:a0:23:8e:fd:80:43:c2:
53:ac:b1:4a:bc:f0:36:90:c4:82:4a:44:0b:46:3a:
1e:bb:40:c4:f6:77:a0:55:08:ad:ad:7b:f9:ca:2e:
c0:d3:ab:b0:c3:34:bb:7e:09:a5:33:b6:13:c6:42:
bc:e4:8a:7f:85:b0:c2:dc:4f:bf:a1:ab:4f:00:9b:
44:32:d3:24:3e:a6:af:65:49:06:fc:74:cf:94:f1:
55:08:cf:21:2d:60:95:d0:48:2d:fd:22:c7:87:06:
df:9d:46:91:da:66:be:09:27:6c:56:b4:14:c5:35:
20:d7:37:76:a6:0f:f6:b0:74:ca:05:a4:4c:1b:39:
ad:23:be:a9:cd:0e:c1:1a:a1:18:0b:c8:a9:7c:26:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:E2:23:D5:9D:1C:9F:A8:2F:F8:99:E9:1A:9C:5D:2F:F4:11:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3134382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:48:a7:ec:58:f4:0e:9e:d7:cc:e6:67:16:ab:df:4e:86:24:
fc:3b:61:92:7c:91:e2:58:dc:31:f4:45:37:44:1a:3a:cb:ba:
2b:ea:ba:c4:04:3d:74:f3:1f:0d:02:a2:dd:8e:92:00:8c:fc:
3c:b3:fd:14:5f:a5:55:7e:9b:4d:5d:01:8a:76:27:09:f1:6f:
d5:3f:17:be:3b:ce:1e:9e:ea:5f:26:5e:0e:73:cb:11:e6:92:
2c:40:57:2e:77:ad:34:84:f1:46:6a:0d:a3:06:b6:2a:f4:c0:
5c:67:b3:ae:57:c4:ac:e7:b3:1d:dd:16:8e:b5:e3:c4:db:7e:
b3:87:fe:79:1a:f3:6f:f6:21:15:63:37:69:3c:d9:5f:54:b1:
8a:cc:1a:3e:2b:b8:9c:89:78:4e:4e:de:05:9c:da:df:6b:34:
a7:d2:0a:41:a4:a2:0d:00:33:c7:32:00:f7:79:8e:77:54:71:
e3:47:ff:ce:f5:25:bc:e9:98:7f:e4:2c:17:47:fe:7f:c4:7b:
45:23:5b:2f:f6:78:c5:02:0d:ac:8a:5f:9a:08:8d:a4:a4:9b:
01:e9:8a:4c:d0:27:c7:f7:2b:1f:1c:35:96:85:10:29:73:3d:
2d:56:2e:d5:cd:c0:ca:71:01:48:2d:71:85:e1:cf:d9:a8:8a:
1e:0e:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:23:10 2026 by rpki-client