Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa
File: 39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: 1iyat0fCdqYqz0B+sbVbY9Nv6eOzh9gIak3C2Q4L6Hc=
Subject key identifier: AA:59:79:F8:64:B9:BF:F3:1D:7B:FC:D5:21:33:71:85:79:A1:19:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40D720A998633B8D0204041F2F3863E6A41E75E7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa
Signing time: Wed 27 Aug 2025 21:47:28 +0000
ROA not before: Wed 27 Aug 2025 21:42:28 +0000
ROA not after: Wed 26 Aug 2026 21:47:28 +0000
asID: 214155
IP address blocks: 94.156.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d7:20:a9:98:63:3b:8d:02:04:04:1f:2f:38:63:e6:a4:1e:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 21:42:28 2025 GMT
Not After : Aug 26 21:47:28 2026 GMT
Subject: CN=AA5979F864B9BFF31D7BFCD52133718579A119C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:5e:64:bf:08:86:cd:8e:1e:89:63:86:03:
30:0d:31:6c:ef:b1:b5:0f:95:8f:e6:51:1e:3e:61:
c5:cc:89:e3:32:c9:ae:3c:e7:b6:1f:12:c4:a8:15:
f8:99:a2:7f:67:af:ff:d0:ab:7c:3e:b0:79:1f:6b:
41:21:9e:cb:b5:9f:07:21:c4:d3:40:96:79:b7:65:
75:6b:65:e4:ae:71:69:7f:98:e1:dc:05:43:18:62:
53:a9:19:ca:72:39:9e:f6:4b:c5:c3:cc:f3:54:44:
92:f5:54:42:f3:e7:3c:59:70:7f:f2:40:a4:35:33:
a8:b3:4e:d0:f9:be:6c:98:af:ef:29:fc:4e:d3:72:
a8:a9:ae:ee:00:93:ea:99:b0:64:f7:ec:8a:6e:36:
3f:3f:8d:96:f0:33:9f:74:f3:f4:5d:19:91:49:8c:
63:dd:74:91:fd:30:19:d4:70:42:ba:38:be:c4:5e:
c7:b7:11:7c:b7:d7:d4:26:04:81:10:db:7e:e5:92:
57:05:bf:46:fd:06:5c:70:26:8d:74:db:aa:20:85:
f2:21:89:a9:f1:88:9d:c5:c4:ab:36:1a:43:2f:07:
9e:dc:de:a2:2e:80:73:28:f7:b2:c3:c6:f8:d4:bc:
63:9c:3d:45:12:ca:6a:0a:b1:02:20:19:ab:49:89:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:79:F8:64:B9:BF:F3:1D:7B:FC:D5:21:33:71:85:79:A1:19:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3233302e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.230.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a4:1b:26:c9:49:a2:f1:a7:f3:17:b6:d1:9f:81:41:56:ab:
a0:c5:83:9a:44:8e:05:09:c9:cd:b0:d3:28:e2:52:dc:92:ee:
c7:b0:45:25:3c:dd:37:18:73:66:b8:95:41:10:c8:c1:ca:4f:
3f:05:2f:86:3f:f9:de:e4:24:30:06:04:f6:86:0f:0c:68:34:
6f:21:22:13:46:95:f1:f8:96:c0:89:0a:3e:d3:57:59:24:09:
2d:f9:e8:80:24:5c:f3:1d:54:a3:a7:0d:cb:93:2e:ec:a9:92:
78:ff:21:de:ee:6d:fd:2a:a3:19:54:9f:ed:59:3f:56:d2:a7:
9d:b9:d6:c9:5c:bc:87:0e:d2:65:84:a4:12:e9:85:33:56:66:
99:59:16:d5:73:1f:d9:1f:97:c6:2f:b6:ce:91:cb:92:54:04:
ae:0b:12:84:dc:31:fd:6f:47:1d:c7:37:5e:da:e8:db:3e:6d:
65:56:44:dc:88:e8:2a:0f:80:de:da:ec:67:c6:01:05:9e:cf:
93:f6:4e:4e:ef:53:1b:52:05:8c:53:c6:1b:a3:d8:06:b4:de:
79:6a:8c:85:78:e9:ca:ea:b4:9d:88:a9:f6:c7:94:1f:94:9e:
d6:e7:dc:12:0b:2f:73:f7:58:8a:ae:3c:9c:f3:e8:3f:f8:27:
d7:8b:87:4d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQNcgqZhjO40CBAQfLzhj5qQedecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjcyMTQyMjhaFw0yNjA4MjYyMTQ3MjhaMDMxMTAvBgNV
BAMTKEFBNTk3OUY4NjRCOUJGRjMxRDdCRkNENTIxMzM3MTg1NzlBMTE5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqF5kvwiGzY4eiWOGAzANMWzv
sbUPlY/mUR4+YcXMieMyya4857YfEsSoFfiZon9nr//Qq3w+sHkfa0Ehnsu1nwch
xNNAlnm3ZXVrZeSucWl/mOHcBUMYYlOpGcpyOZ72S8XDzPNURJL1VELz5zxZcH/y
QKQ1M6izTtD5vmyYr+8p/E7Tcqipru4Ak+qZsGT37IpuNj8/jZbwM5908/RdGZFJ
jGPddJH9MBnUcEK6OL7EXse3EXy319QmBIEQ237lklcFv0b9BlxwJo1026oghfIh
ianxiJ3FxKs2GkMvB57c3qIugHMo97LDxvjUvGOcPUUSymoKsQIgGatJiWatAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUqll5+GS5v/Mde/zVITNxhXmhGcgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMjMz
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMTM1MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABenOYwDQYJKoZIhvcNAQELBQADggEBAIikGybJSaLxp/MXttGfgUFWq6DFg5pE
jgUJyc2w0yjiUtyS7sewRSU83TcYc2a4lUEQyMHKTz8FL4Y/+d7kJDAGBPaGDwxo
NG8hIhNGlfH4lsCJCj7TV1kkCS356IAkXPMdVKOnDcuTLuypknj/Id7ubf0qoxlU
n+1ZP1bSp5251slcvIcO0mWEpBLphTNWZplZFtVzH9kfl8Yvts6Ry5JUBK4LEoTc
Mf1vRx3HN17a6Ns+bWVWRNyI6CoPgN7a7GfGAQWez5P2Tk7vUxtSBYxTxhuj2Aa0
3nlqjIV46crqtJ2IqfbHlB+Untbn3BILL3P3WIquPJzz6D/4J9eLh00=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:52 2025 by rpki-client