Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32392e302f32342d3234203d3e20323732303936.roa
File: 39342e3135362e32392e302f32342d3234203d3e20323732303936.roa (raw, json)
Hash identifier: pa7B2uHyudyFLl2b2OuoGzvggLPKw7NFCPmFDd+Mdbc=
Subject key identifier: 83:8A:31:C2:7D:DD:B3:D7:2D:01:04:9A:5A:10:21:07:AF:E9:E3:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 299778350FD157AE084B2E8A5F6854B84B70AB90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32392e302f32342d3234203d3e20323732303936.roa
Signing time: Fri 29 Aug 2025 12:47:29 +0000
ROA not before: Fri 29 Aug 2025 12:42:29 +0000
ROA not after: Fri 28 Aug 2026 12:47:29 +0000
asID: 272096
IP address blocks: 94.156.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:97:78:35:0f:d1:57:ae:08:4b:2e:8a:5f:68:54:b8:4b:70:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 29 12:42:29 2025 GMT
Not After : Aug 28 12:47:29 2026 GMT
Subject: CN=838A31C27DDDB3D72D01049A5A102107AFE9E3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:d0:70:0e:8e:59:dc:da:64:c3:5a:61:01:
f8:d2:ce:22:39:53:a5:ff:76:8c:7e:c6:27:8c:05:
3d:6a:a3:67:50:47:06:c2:f7:08:38:65:18:ed:d6:
23:a7:b6:f6:e9:5b:a0:a6:79:eb:3d:05:51:24:91:
14:44:6b:aa:59:19:e8:32:3c:54:a4:28:15:ec:fb:
79:7d:8d:c9:1d:08:63:70:56:fb:37:9a:9e:60:12:
31:95:ce:28:50:b3:17:c2:8f:71:df:3d:ff:86:8f:
f7:c0:5f:75:5e:dc:0b:34:77:48:dc:30:dd:d8:29:
df:21:0a:55:f8:c2:5f:90:f3:4e:79:6d:2b:c1:03:
21:ee:92:1f:4a:c7:c0:fe:d9:c3:2e:c7:e2:66:ea:
fc:37:3f:ff:17:f0:8d:59:7d:98:bf:32:4d:af:21:
19:9a:00:15:db:71:43:d7:90:ca:ce:04:73:3c:78:
8d:af:26:66:da:0a:8b:84:7c:27:2e:bf:e9:d6:97:
36:86:e3:80:94:1b:c5:2b:6b:c5:fe:4d:94:70:35:
3d:09:8f:9a:41:f6:20:cc:de:f5:5e:ae:88:39:2e:
6f:dc:63:f0:43:08:7c:cd:07:cf:e2:77:08:48:80:
59:21:41:cf:10:27:31:31:20:25:ce:5b:76:66:a5:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:31:C2:7D:DD:B3:D7:2D:01:04:9A:5A:10:21:07:AF:E9:E3:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e32392e302f32342d3234203d3e20323732303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.29.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d4:8c:3d:db:e1:03:1e:f6:96:48:02:b3:72:60:4f:33:8e:
ab:27:63:82:1b:8e:e2:c0:58:f9:ad:0d:31:ab:13:43:44:86:
7a:58:d7:5c:23:6d:ab:e5:c2:fc:a3:bb:e7:c0:86:61:df:80:
b9:8d:29:79:ff:ed:a3:03:c9:ee:00:25:80:19:2b:fd:a0:fd:
82:8f:78:04:17:d2:4f:ab:01:bf:f1:4d:dd:1c:8f:7d:5e:ea:
1f:a3:75:f5:9f:d6:61:07:72:98:94:7e:20:e8:08:7d:b6:12:
d6:14:ca:d1:4f:67:58:d6:c7:20:93:da:d2:03:49:8b:4c:b6:
36:18:86:b2:a7:30:bc:5a:6c:1f:b0:01:82:e1:17:69:eb:9a:
81:cd:99:c6:51:69:2b:c4:1f:b4:46:36:fd:c8:12:c4:d9:62:
42:92:3f:d2:a5:23:d7:fc:68:f1:08:45:88:a6:07:64:ea:1c:
30:d7:1c:4d:c0:01:45:b6:f6:76:3b:29:b5:3b:38:ed:87:07:
24:fd:bb:93:9e:fe:65:49:62:54:01:2a:9b:d9:5b:52:20:ac:
d7:e7:5d:5c:40:de:84:f8:2b:f5:50:b9:c5:f9:b7:e4:5a:48:
ab:71:44:9d:a3:20:b2:8e:ac:a1:aa:e0:04:d6:e8:80:ce:9c:
76:6d:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:56 2025 by rpki-client