Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230372e302f32342d3234203d3e203330393637.roa
File: 39342e3135362e3230372e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: /Mj1Xzp+jrllZFx+vJQwbyy9qWIKGhuraehLGBG5wTg=
Subject key identifier: BF:09:F1:7C:39:8A:25:3B:65:1A:60:3C:5A:62:4C:68:76:B0:9B:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B84DAE1F4726FFB397DD1372CE69BD49C36E789
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230372e302f32342d3234203d3e203330393637.roa
Signing time: Fri 22 Aug 2025 10:47:08 +0000
ROA not before: Fri 22 Aug 2025 10:42:08 +0000
ROA not after: Fri 21 Aug 2026 10:47:08 +0000
asID: 30967
IP address blocks: 94.156.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:84:da:e1:f4:72:6f:fb:39:7d:d1:37:2c:e6:9b:d4:9c:36:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 10:42:08 2025 GMT
Not After : Aug 21 10:47:08 2026 GMT
Subject: CN=BF09F17C398A253B651A603C5A624C6876B09B97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:ef:e4:92:3f:f5:a7:c6:71:c1:f1:c5:ff:
e3:ad:5d:4f:df:41:ca:d0:b6:92:3e:92:40:0e:0b:
fc:53:4b:a4:77:ed:6d:e9:26:8b:14:e5:86:b5:cc:
86:93:56:ab:f4:da:0c:66:dc:9f:79:e7:78:ca:c6:
4c:1c:66:da:3a:94:30:cc:49:f5:76:36:39:6e:4c:
09:b6:2d:c3:ae:bd:46:fe:02:e8:0a:4f:fb:64:fd:
a7:7b:3a:1a:4e:f1:b6:04:7f:e4:8f:2b:2e:6e:06:
d1:6e:41:4f:16:be:64:c7:63:8a:7b:fb:26:6c:bf:
f0:e8:97:74:aa:38:10:38:1a:45:11:f9:6b:2e:9e:
43:3d:6e:d9:8e:22:1f:11:1f:9e:da:a6:5a:c1:7f:
8e:50:ad:c3:07:28:dc:16:d1:6b:06:98:78:a8:a2:
7d:d3:61:6d:94:81:18:68:7c:b7:6d:bb:a0:c3:da:
46:60:77:0e:05:73:a2:33:8a:35:b7:50:d0:e8:e4:
4b:20:e6:ae:ef:cd:87:c2:6f:6a:2f:91:c2:f3:c9:
5d:3c:53:d0:09:9d:ec:6f:ae:af:33:1e:43:23:5c:
75:cf:6d:39:02:3a:99:41:3c:47:51:cd:43:34:67:
12:8c:f6:b7:db:1c:61:96:53:1f:f5:8b:c1:ee:7c:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:F1:7C:39:8A:25:3B:65:1A:60:3C:5A:62:4C:68:76:B0:9B:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230372e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ea:05:88:10:82:c7:91:ba:f2:7c:03:2e:8a:64:39:06:88:
cd:24:d2:3e:12:00:8c:1b:4c:d1:3e:ba:03:4b:60:83:6c:2b:
bc:ef:af:ad:c1:f0:74:ad:04:71:13:af:df:c1:12:0e:7e:b5:
76:32:2d:bc:5a:c6:2f:2a:b8:e3:9c:66:ef:e3:96:fb:f8:27:
40:97:d8:c4:13:ba:fe:9e:e9:b4:4a:00:69:bf:3e:ca:db:60:
cb:30:14:6e:fb:94:cb:53:8e:1a:f6:c7:f4:66:e0:14:77:f8:
9a:54:83:01:ea:41:19:75:e0:ed:7d:6a:2e:48:93:1c:90:89:
18:1b:1d:1f:d0:95:2e:3e:ca:97:33:15:bf:76:27:f6:c6:10:
f8:eb:16:e5:18:0f:23:68:1e:a9:09:50:8b:7d:c9:08:e2:50:
5c:b8:9a:aa:93:c1:48:f3:bf:f1:d3:a6:83:f8:4b:c2:76:60:
18:8a:33:ea:8d:eb:92:f2:80:66:55:b5:4b:00:d2:c3:f7:95:
a3:0d:96:20:32:41:cc:2b:18:67:3a:aa:09:ff:4d:47:33:94:
93:9e:a1:c8:09:6f:33:9d:b4:19:cc:07:6f:f4:b7:b5:19:44:
09:e9:92:c7:a9:20:45:9a:2d:64:ea:44:42:8a:c2:dd:9d:7c:
37:6c:96:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:07 2025 by rpki-client