Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230342e302f32342d3234203d3e203432333636.roa
File: 39342e3135362e3230342e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: UGvd3KyZ+Q/hKX+28T8UClEgnsq/+dPzGbKwP0mva1w=
Subject key identifier: 4A:77:18:51:B1:16:51:88:8C:D3:40:12:3C:0C:98:BC:3C:C0:92:9F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 592BD868DC68DF8C9F2A68A597F478F692FECE90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230342e302f32342d3234203d3e203432333636.roa
Signing time: Fri 15 Aug 2025 15:47:06 +0000
ROA not before: Fri 15 Aug 2025 15:42:06 +0000
ROA not after: Fri 14 Aug 2026 15:47:06 +0000
asID: 42366
IP address blocks: 94.156.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2b:d8:68:dc:68:df:8c:9f:2a:68:a5:97:f4:78:f6:92:fe:ce:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 15 15:42:06 2025 GMT
Not After : Aug 14 15:47:06 2026 GMT
Subject: CN=4A771851B11651888CD340123C0C98BC3CC0929F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:f8:ca:71:a3:92:fa:06:f6:2d:d2:57:df:
35:21:3d:96:b8:cb:60:bb:21:35:c1:a0:03:32:e5:
12:73:73:7e:cb:bd:69:4d:6a:dc:96:e9:c3:c0:c3:
eb:53:20:3b:9f:3f:f3:dd:ee:21:40:2c:ce:b2:5b:
80:a0:43:80:d6:c2:e4:21:e2:d9:ac:fb:b8:b8:3b:
76:65:6f:f9:3c:ab:59:0f:b5:7c:be:97:f8:3a:82:
7b:40:5c:41:5b:78:ab:3a:dd:ae:6a:b0:5c:27:be:
40:42:93:c4:6a:89:b3:e6:ad:ee:d5:e5:da:d9:c4:
e6:a3:43:20:8a:5f:19:7f:7d:8f:f7:16:bc:b3:c8:
57:e2:89:97:69:bf:69:23:df:e5:b0:70:bf:ce:87:
81:ac:be:01:00:a0:0c:9f:22:46:0b:23:9b:e4:7b:
bf:33:64:75:76:98:88:7d:69:b1:80:98:28:c9:e4:
a5:f2:a5:ed:f5:c4:f6:60:89:bb:6e:b5:2e:37:08:
13:61:fe:7b:a2:06:d1:db:bf:92:eb:98:12:76:b7:
38:de:2b:27:53:20:ed:ca:83:87:35:f2:5e:0c:6e:
6f:60:9e:6f:31:44:e0:44:70:47:0d:90:72:81:9d:
41:a4:8a:67:d7:2d:97:0e:18:be:e2:0e:6a:d3:c4:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:18:51:B1:16:51:88:8C:D3:40:12:3C:0C:98:BC:3C:C0:92:9F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230342e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:83:ff:e6:ff:f5:67:b0:52:11:db:ec:63:5d:98:9c:b5:52:
8b:f7:43:63:e5:8b:2e:ea:7b:22:21:e5:95:46:fd:98:47:17:
81:c4:3a:e9:83:8e:f6:0e:ea:4a:10:11:31:ce:92:9a:aa:d2:
b5:64:74:44:32:76:4e:55:a4:10:e5:08:69:6b:f5:e0:23:c7:
92:ce:75:e4:77:29:ad:a6:07:a8:b3:91:7c:b6:95:39:c0:2c:
13:45:9a:32:13:8a:d0:05:4c:4a:cb:c5:bb:8b:b7:d1:74:0a:
88:90:5e:e7:17:ed:c4:ba:35:54:ed:e9:a5:0b:9f:09:a5:58:
dc:02:91:e8:56:4a:ed:4f:8e:42:7b:27:d1:67:30:92:16:fa:
a8:e5:10:36:41:cf:68:f9:9f:b9:06:ce:87:c9:1f:34:8f:5f:
43:0c:7d:71:50:ad:bc:4e:35:80:c4:45:20:95:3b:1e:04:a0:
50:2c:90:70:27:71:c7:8a:ec:a5:2b:89:f7:52:7a:09:89:55:
4f:42:e0:32:06:dc:ef:01:86:bf:ef:c2:ef:ce:88:e6:05:72:
76:ce:04:08:a3:d0:4e:50:cb:44:51:4c:0b:53:df:33:46:bb:
ea:51:61:2f:b6:04:99:ad:a5:9f:94:4e:7c:91:37:34:04:e1:
f4:04:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:15 2025 by rpki-client