Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32382e302f32342d3234203d3e20323033333830.roa
File: 39342e3135362e32382e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: brWN5I6R9yB5XjMkJYL8UTxOGNvngUsVglMnrbgNPeM=
Subject key identifier: E4:4F:60:D1:D1:37:0E:B0:6B:92:1C:28:AF:A4:CA:5E:9E:A3:AB:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2702FBAE8FE6E2F95200A8110121DE70E0D929A1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32382e302f32342d3234203d3e20323033333830.roa
Signing time: Mon 01 Sep 2025 21:47:29 +0000
ROA not before: Mon 01 Sep 2025 21:42:29 +0000
ROA not after: Mon 31 Aug 2026 21:47:29 +0000
asID: 203380
IP address blocks: 94.156.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:02:fb:ae:8f:e6:e2:f9:52:00:a8:11:01:21:de:70:e0:d9:29:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 1 21:42:29 2025 GMT
Not After : Aug 31 21:47:29 2026 GMT
Subject: CN=E44F60D1D1370EB06B921C28AFA4CA5E9EA3AB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:1f:c1:20:16:84:01:05:92:81:63:f0:8a:
64:93:f4:34:4a:b0:31:e9:60:a6:da:a8:23:7e:76:
22:56:73:b6:34:bc:ac:47:42:89:1c:fd:05:fd:a6:
65:ba:00:2f:2a:df:5b:16:25:19:4b:3a:51:2d:e6:
cc:00:91:6f:71:5c:55:f1:66:bd:e2:d4:89:56:9a:
e5:98:19:53:16:e5:3b:dd:59:5b:ea:47:b2:28:5e:
67:c5:8d:d9:46:04:30:b1:41:05:7e:d3:ec:76:26:
08:5d:87:dd:ca:38:4b:b4:4c:d6:0d:b6:39:c2:59:
97:26:7c:86:e6:a9:86:30:0f:bf:b2:bf:c9:23:64:
aa:f5:d3:6e:3d:fd:58:0f:39:a1:ff:fa:f1:41:52:
f8:ee:b0:35:a7:fa:f5:01:c7:47:15:13:df:a2:17:
62:2b:63:71:a1:ae:2a:87:b9:1d:cc:0f:ca:49:63:
ee:c8:3b:e0:fe:a5:e8:8a:84:6a:90:f5:04:8b:a0:
63:b8:de:62:4d:f3:57:d7:a5:de:f6:85:f2:71:3a:
c1:5c:52:30:2f:43:80:7a:6e:84:71:af:f6:3a:51:
dc:c7:f5:54:99:ba:f8:29:d3:b3:83:ef:41:0d:6f:
9b:c1:68:35:d3:06:17:7c:48:4c:3d:9a:43:b1:25:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4F:60:D1:D1:37:0E:B0:6B:92:1C:28:AF:A4:CA:5E:9E:A3:AB:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32382e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.28.0/24
Signature Algorithm: sha256WithRSAEncryption
38:19:4a:d2:6b:df:2c:7b:6f:24:47:59:e0:9e:b2:79:87:57:
36:4f:03:39:42:9c:89:90:77:b9:e3:cb:52:5e:35:5e:76:83:
48:69:75:24:91:0d:f0:ca:d1:b9:de:d6:f3:93:7a:61:a1:8a:
6f:bb:37:90:17:d6:3f:65:97:de:c1:d1:0d:3e:00:88:92:a6:
99:10:2a:30:ed:0b:10:d1:d3:6d:cb:c5:78:f6:c8:21:f2:45:
fd:8a:eb:f5:ff:c6:70:e7:48:9a:5b:10:f1:de:33:e4:e5:af:
0c:d5:f9:0b:61:ba:38:80:a3:25:d7:f3:f5:a2:5c:2d:90:5c:
f4:1f:84:5c:f7:86:4a:ba:65:ed:14:10:dd:34:4c:c2:f5:28:
d6:c4:f0:9c:67:e1:40:c0:c3:c6:43:b6:ab:60:3d:11:6e:3b:
0e:b5:8c:94:2b:e5:a0:d0:66:07:a7:44:97:26:8b:26:a1:11:
76:f5:b8:73:c2:c3:5b:d7:e3:d8:64:bf:b2:64:af:d5:d0:31:
a2:c2:25:af:83:f5:74:9c:76:e4:a9:a0:cb:86:d2:38:5e:fd:
e0:b1:dd:9b:c4:d9:2f:86:8b:ad:ea:eb:1e:f8:37:4b:ec:7c:
f1:4c:30:40:e3:c9:80:10:79:6f:b6:6d:50:3b:4e:7a:4e:b2:
56:d5:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:26 2025 by rpki-client