Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: g3/zVmqPyizs1Hu8jOZilCaq7Y1v2XiToMSVT0f9y38=
Subject key identifier: 4C:52:B8:DA:FD:E5:12:7D:79:32:EA:2D:78:D7:96:BE:92:6A:86:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 53501899F22FFC3BED9D2075AB5DFCFB3938132A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 27 Aug 2025 21:47:28 +0000
ROA not before: Wed 27 Aug 2025 21:42:28 +0000
ROA not after: Wed 26 Aug 2026 21:47:28 +0000
asID: 214155
IP address blocks: 94.156.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:50:18:99:f2:2f:fc:3b:ed:9d:20:75:ab:5d:fc:fb:39:38:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 21:42:28 2025 GMT
Not After : Aug 26 21:47:28 2026 GMT
Subject: CN=4C52B8DAFDE5127D7932EA2D78D796BE926A863E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:34:3f:05:c1:a7:8a:9a:22:75:d7:7a:74:17:
46:a9:f2:1d:4a:d7:7b:d1:64:f7:7a:70:0e:f5:18:
26:a9:57:b5:7e:0f:40:b6:a5:69:58:53:75:28:6e:
3a:d6:f6:22:21:24:c4:75:a0:26:df:d7:2f:fd:21:
2c:e8:e8:95:80:22:43:54:e0:d4:b8:28:68:75:1e:
61:d9:89:a9:45:ad:e4:07:9d:25:56:1d:6e:30:f8:
c8:2a:1a:fa:d2:68:81:6c:6a:92:a6:e5:89:4c:b8:
08:c7:86:20:8b:d0:df:87:54:a7:d9:62:ea:49:80:
00:c6:51:84:48:3d:d6:85:0d:77:8e:48:14:57:3c:
06:34:8c:fb:d0:0c:7e:83:a6:0a:66:43:04:be:04:
f4:0c:22:e4:61:91:39:3f:a5:a1:d2:01:a1:ea:8f:
80:19:cd:6d:62:9c:7d:53:54:56:c3:15:1c:f2:42:
7a:ba:73:22:58:1b:bb:b8:d1:e0:a7:cc:cd:cd:46:
3e:9d:15:1d:a6:8e:f9:7d:5d:a0:fe:25:86:6c:9f:
64:77:aa:e8:a8:8b:d5:d3:5a:e0:c2:6e:73:81:91:
03:f4:40:3f:1d:95:fc:89:a2:d7:f6:bc:dd:ae:de:
b9:7e:6b:97:9a:61:ac:cc:a9:d2:4d:57:18:9e:6a:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:B8:DA:FD:E5:12:7D:79:32:EA:2D:78:D7:96:BE:92:6A:86:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3232382e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.228.0/24
Signature Algorithm: sha256WithRSAEncryption
78:17:63:0f:b4:c2:51:4d:1b:34:e6:4b:b1:32:93:fe:f3:c5:
8e:27:67:ec:5f:5f:e9:59:0c:8c:9e:ee:9d:58:55:f4:05:12:
77:a8:3f:99:7c:5f:84:12:f5:fd:92:56:13:d8:0d:51:a6:a8:
15:f2:2e:21:69:65:43:88:01:9d:e9:64:54:9c:f7:c3:80:c8:
0e:b0:fd:c4:92:9c:34:bd:5d:c6:5e:ac:c7:90:a7:fa:df:5d:
cb:2a:ec:23:5a:e8:5f:c7:9d:50:06:11:7f:8d:2f:3c:82:1e:
20:5c:24:9d:fd:13:5c:a2:4b:16:d5:50:01:83:fc:fb:10:d7:
82:9e:ff:fa:bc:a5:ad:d7:c7:71:31:2c:3d:bc:5f:50:80:37:
39:f6:7f:d6:59:50:6f:5b:3c:5c:47:1d:0f:93:0a:22:16:bf:
d9:3b:fa:74:0e:10:d5:f9:73:65:54:63:3b:19:e7:b6:87:39:
a8:cb:d3:e2:82:f7:47:83:62:c5:5e:ad:b1:85:d7:44:46:1f:
0d:eb:4a:cb:e6:17:27:a1:e6:52:bd:9c:3f:2d:43:85:95:b9:
46:2b:98:00:da:a5:35:95:2c:ea:c0:90:b4:ab:3b:c6:37:13:
5f:14:df:d6:42:32:b3:86:fc:06:d6:45:8f:e7:28:57:6a:0f:
42:b2:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:09 2025 by rpki-client