Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa
File: 39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Dicg1OV+o6grKnRFxNI1twudnQcZ6fyTHk40Kp4utq4=
Subject key identifier: 4F:D2:27:94:9E:69:D0:F1:6F:AA:FB:33:16:A2:D5:BC:7E:93:00:67
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 38338236B6F27941C282E5BB315722BE275DC84C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 10:47:08 +0000
ROA not before: Fri 22 Aug 2025 10:42:08 +0000
ROA not after: Fri 21 Aug 2026 10:47:08 +0000
asID: 136787
IP address blocks: 94.156.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:33:82:36:b6:f2:79:41:c2:82:e5:bb:31:57:22:be:27:5d:c8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 10:42:08 2025 GMT
Not After : Aug 21 10:47:08 2026 GMT
Subject: CN=4FD227949E69D0F16FAAFB3316A2D5BC7E930067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:c2:5a:6b:23:43:47:e2:b7:2b:e4:6a:36:
1b:99:68:d1:f7:8c:55:6c:7f:bd:91:46:f7:97:3d:
e4:cb:09:db:b9:84:65:f5:80:d8:11:ad:4b:f3:9c:
38:ce:24:57:e7:f1:33:52:23:ca:f8:84:2f:6d:9b:
87:ea:f3:59:f3:18:3a:58:86:81:0a:ec:c3:cf:59:
fb:13:48:a6:45:6e:b8:6e:78:fe:98:0e:d7:87:72:
4f:ca:e5:12:6c:5d:32:84:2a:7f:53:be:2d:0c:34:
76:24:f0:88:71:5f:05:d3:f9:f3:f2:84:a3:36:fa:
c7:e8:e1:aa:38:c5:c6:53:07:46:76:5b:83:f1:26:
84:e7:12:23:51:c5:b1:29:06:51:6f:0d:3b:b1:33:
86:4c:4c:4c:5b:65:8d:a3:5e:85:8f:f6:f4:f4:ba:
12:41:b8:c3:33:5b:37:2b:75:05:a9:5a:c6:d9:7e:
bd:30:88:75:a5:2c:f2:cb:7b:00:31:53:c6:eb:1c:
af:ef:76:db:b5:02:e8:bb:03:05:57:99:12:78:50:
cd:2f:9c:89:76:23:8f:1c:a5:c3:87:ea:40:e9:9b:
f5:06:50:08:d4:5b:9b:88:57:c9:29:e4:dc:1d:d4:
8a:4d:d5:df:67:35:72:a1:2c:10:2a:2e:97:26:6a:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:27:94:9E:69:D0:F1:6F:AA:FB:33:16:A2:D5:BC:7E:93:00:67
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.206.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2c:ca:d6:34:3b:09:82:7f:d6:15:e0:7f:66:a6:85:dc:b5:
da:07:0e:f1:26:aa:21:9d:d6:6e:f5:47:01:9e:90:6a:b1:6c:
ad:d7:02:40:59:70:91:33:ef:cf:0e:21:ab:e4:a2:52:8d:63:
37:a5:99:bd:2c:74:e7:96:11:0a:d6:14:60:9b:e7:7e:f3:e2:
2d:2d:ec:0f:9e:e4:4c:41:82:c7:74:4b:09:ad:1c:03:a7:28:
d8:94:bf:7c:a7:59:66:27:38:31:e3:b4:fe:0d:3c:8b:2a:ec:
b2:5b:dc:42:d6:77:ce:62:33:45:7d:1d:80:71:2c:3f:de:27:
c4:82:13:ae:26:45:47:ab:2b:03:9b:37:a3:95:39:0f:99:eb:
c9:9c:89:d3:66:1a:6e:fc:8c:78:96:79:6f:96:ab:cf:95:ca:
22:3e:fc:dd:31:2a:d8:32:f1:fb:cf:fe:3a:1c:1d:5f:02:1e:
13:e6:a9:1a:d0:d8:e3:d7:af:50:94:b2:82:f2:3a:cd:e0:71:
d7:15:aa:ea:2f:03:96:cc:35:ce:87:fc:1f:55:2b:96:2e:1d:
33:1a:58:56:67:09:0f:71:ad:d1:52:33:a0:b9:2f:e9:4a:4f:
c0:c3:fe:cb:88:a2:fd:84:37:a6:ff:61:a4:01:a7:94:75:60:
a9:33:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:35 2025 by rpki-client