Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
File: 39342e3135362e33302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qPF9IF5bvplQatgPgFb1UQIOCeHlxndhUIbNBzUIcHY=
Subject key identifier: 6C:B3:F0:95:3A:28:1D:8A:91:9C:E3:65:70:0B:C1:81:40:83:B1:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 732FEA1EDF6F753DA11BE4C8BEE30C6981742BA7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 27 Aug 2025 21:47:28 +0000
ROA not before: Wed 27 Aug 2025 21:42:28 +0000
ROA not after: Wed 26 Aug 2026 21:47:28 +0000
asID: 136787
IP address blocks: 94.156.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:2f:ea:1e:df:6f:75:3d:a1:1b:e4:c8:be:e3:0c:69:81:74:2b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 21:42:28 2025 GMT
Not After : Aug 26 21:47:28 2026 GMT
Subject: CN=6CB3F0953A281D8A919CE365700BC1814083B154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:f5:c5:69:a9:9b:35:f2:ef:a3:31:f8:ea:
50:2f:ff:20:5b:2a:df:4b:02:02:49:35:76:69:4c:
4c:81:d0:10:bf:aa:e4:e6:cc:6a:1e:5b:34:04:a2:
f8:55:84:a6:1b:e3:2b:a0:1b:fe:b5:6b:ce:3a:ba:
39:a9:05:75:f5:86:86:c7:00:20:f5:8f:66:51:61:
48:c7:3d:af:e7:75:c9:06:0e:09:b9:0b:f1:74:7e:
79:df:40:c1:c6:84:a4:2d:41:12:42:be:39:a6:b5:
8e:46:9c:64:87:09:05:ec:6d:47:78:5a:82:db:71:
c7:74:4e:27:ab:d1:f3:25:76:e9:33:f2:71:b5:e9:
95:65:5a:e4:f4:da:40:83:5b:46:8f:d4:06:67:9a:
d4:2a:00:ea:33:c4:22:74:37:a6:e5:86:70:bd:c8:
e6:be:de:2d:b5:21:4d:e8:b6:13:a2:97:05:64:be:
61:0b:a6:81:e4:1a:50:d1:9f:d1:9a:a8:e2:db:8f:
bc:46:28:5c:5a:fd:f2:fe:4b:d8:3e:b5:b2:36:20:
47:26:59:62:d7:23:f0:9a:18:3e:92:a4:43:49:4d:
9f:66:27:0b:98:94:17:ef:9e:01:0f:a4:26:75:b4:
70:61:69:93:05:b6:89:ca:c6:e7:da:a7:2d:52:1e:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B3:F0:95:3A:28:1D:8A:91:9C:E3:65:70:0B:C1:81:40:83:B1:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e33302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.30.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ee:70:71:e3:51:95:70:48:03:4b:7b:55:79:91:60:e7:20:
05:a4:bb:b3:11:ad:5a:b1:04:9c:f8:61:fc:59:b4:a8:e9:6c:
d8:18:99:1c:f2:38:b1:1d:54:97:ea:a4:83:4b:f8:67:0e:d5:
39:c1:a4:a4:24:08:05:04:32:91:ee:f7:d4:02:09:6f:fa:33:
bd:b0:ba:07:59:f9:df:78:b6:1c:e1:f8:46:0c:0d:b7:6f:42:
47:17:89:67:4f:83:c7:aa:a7:a6:5b:30:5b:46:6e:3e:c4:7f:
b8:83:49:8e:36:82:30:22:dd:63:c8:4c:c7:22:07:1b:1c:b7:
f4:7f:9e:d9:eb:25:93:03:ed:65:69:d9:de:21:eb:ad:11:04:
5d:c3:ea:87:aa:cf:dd:f9:23:db:64:e1:33:9e:a7:5a:32:f7:
fe:31:00:f2:c8:d3:09:f2:be:a9:c0:dd:28:ee:54:96:0b:6b:
e3:65:96:07:62:1f:42:04:e8:aa:e3:cc:c9:6f:a6:95:68:70:
0e:fd:83:9b:91:5e:00:6d:c4:ec:1b:9a:71:09:03:9d:c2:c9:
d2:58:b1:ef:b4:4f:6a:f2:b9:ea:7b:70:6a:6c:d2:57:9a:76:
2f:07:8e:25:05:9e:21:0c:7c:cf:41:35:85:b1:81:00:ec:00:
26:f4:38:50
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcy/qHt9vdT2hG+TIvuMMaYF0K6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjcyMTQyMjhaFw0yNjA4MjYyMTQ3MjhaMDMxMTAvBgNV
BAMTKDZDQjNGMDk1M0EyODFEOEE5MTlDRTM2NTcwMEJDMTgxNDA4M0IxNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJPXFaambNfLvozH46lAv/yBb
Kt9LAgJJNXZpTEyB0BC/quTmzGoeWzQEovhVhKYb4yugG/61a846ujmpBXX1hobH
ACD1j2ZRYUjHPa/ndckGDgm5C/F0fnnfQMHGhKQtQRJCvjmmtY5GnGSHCQXsbUd4
WoLbccd0Tier0fMldukz8nG16ZVlWuT02kCDW0aP1AZnmtQqAOozxCJ0N6blhnC9
yOa+3i21IU3othOilwVkvmELpoHkGlDRn9GaqOLbj7xGKFxa/fL+S9g+tbI2IEcm
WWLXI/CaGD6SpENJTZ9mJwuYlBfvngEPpCZ1tHBhaZMFtonKxufapy1SHkyhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbLPwlTooHYqRnONlcAvBgUCDsVQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMzMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XpweMA0GCSqGSIb3DQEBCwUAA4IBAQBo7nBx41GVcEgDS3tVeZFg5yAFpLuzEa1a
sQSc+GH8WbSo6WzYGJkc8jixHVSX6qSDS/hnDtU5waSkJAgFBDKR7vfUAglv+jO9
sLoHWfnfeLYc4fhGDA23b0JHF4lnT4PHqqemWzBbRm4+xH+4g0mONoIwIt1jyEzH
IgcbHLf0f57Z6yWTA+1ladneIeutEQRdw+qHqs/d+SPbZOEznqdaMvf+MQDyyNMJ
8r6pwN0o7lSWC2vjZZYHYh9CBOiq48zJb6aVaHAO/YObkV4AbcTsG5pxCQOdwsnS
WLHvtE9q8rnqe3BqbNJXmnYvB44lBZ4hDHzPQTWFsYEA7AAm9DhQ
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:58 2025 by rpki-client