Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20313532313739.roa
File: 39352e3231342e33382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: RdtmG2qcH5sCksjnGmLB8UlrTmDxby/hheOurt3bIl8=
Subject key identifier: A5:F2:C8:08:90:A7:86:85:92:01:45:08:E0:B4:03:28:57:E7:1A:9E
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 5E15E051D9011DD99435BDBC367109A8E5F71FF4
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20313532313739.roa
Signing time: Thu 22 Oct 2026 06:23:31 +0000
ROA not before: Thu 22 Oct 2026 06:18:31 +0000
ROA not after: Thu 21 Oct 2027 06:23:31 +0000
asID: 152179
IP address blocks: 95.214.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:15:e0:51:d9:01:1d:d9:94:35:bd:bc:36:71:09:a8:e5:f7:1f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Oct 22 06:18:31 2026 GMT
Not After : Oct 21 06:23:31 2027 GMT
Subject: CN=A5F2C80890A7868592014508E0B4032857E71A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:b0:d3:25:c4:da:70:14:3c:67:93:8a:56:
11:45:eb:75:e7:49:20:61:e7:3a:74:d8:34:82:32:
2b:41:35:38:41:8c:25:08:5d:d4:a5:0d:fa:a1:42:
4b:10:eb:34:50:4e:97:9a:9b:ca:c0:dd:bf:a2:81:
29:cb:ce:ab:c0:e4:f3:b9:63:48:0f:c6:db:85:70:
d8:14:1d:8e:2f:8d:d5:89:db:da:99:1e:0d:7e:40:
27:73:2d:cf:52:44:f3:1b:c9:1f:8d:31:1e:87:7f:
46:e4:8d:8b:19:75:28:06:94:cc:9c:40:f0:a9:b0:
aa:7b:08:d3:72:83:b2:55:20:d1:12:b8:38:2a:b9:
3a:30:af:a2:bb:6a:dd:6c:b1:15:02:ed:d2:1a:c5:
e4:44:93:6c:e6:c5:b8:15:ad:be:9f:3b:d4:ca:0a:
c6:60:e1:90:9c:6e:bf:45:6e:b8:6b:c8:97:fb:0f:
70:04:f7:e2:52:67:0f:95:94:8d:82:4f:1f:f7:bf:
e5:55:04:11:3b:7f:68:07:55:f8:a1:57:69:58:76:
80:17:1e:78:4e:79:56:30:a3:a7:48:61:0e:7f:b1:
f3:b0:ac:b4:7d:0b:47:07:56:df:76:a8:43:ca:f2:
ca:b6:98:87:4e:a3:56:82:b2:89:5a:be:e3:50:6a:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:C8:08:90:A7:86:85:92:01:45:08:E0:B4:03:28:57:E7:1A:9E
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:a2:89:f5:c3:0f:35:d2:42:0d:e5:7e:d0:0d:7e:2f:8d:b1:
07:43:41:20:dc:80:91:30:d5:5d:33:91:be:52:03:80:4c:34:
26:9c:1a:d3:fb:ef:27:16:cd:06:16:02:20:3e:b4:0c:62:eb:
ac:e8:18:a4:d1:7c:13:43:ba:43:43:8a:05:50:6e:d3:ec:6e:
0d:8e:a1:57:1a:99:8a:7d:95:8e:16:8f:d1:b6:22:ec:22:99:
9c:fa:51:9f:ec:49:13:d5:f4:e5:9a:98:f6:01:76:cb:42:b0:
fc:97:b4:40:6f:75:b8:47:51:4c:2f:e5:68:ae:ce:1f:72:7b:
b0:30:3b:2f:d7:8e:9b:ce:ca:d0:29:4f:ca:99:78:34:fb:99:
ab:88:6a:0a:b8:b9:b6:d7:73:21:18:88:0e:d0:f2:4e:64:da:
b0:93:45:f7:90:21:09:8a:fd:33:9a:1d:a4:05:38:67:14:25:
e5:40:d9:c1:2e:75:23:3f:b4:3d:81:f6:b9:48:b3:13:30:70:
94:4e:25:6b:00:6d:2f:d8:fe:37:c1:39:6a:d4:89:6e:8f:01:
bb:91:e5:6b:3b:75:07:00:19:36:97:9d:af:a8:c4:90:be:e0:
7f:82:9c:1c:a1:be:9a:4c:f8:8a:0b:b9:9f:c3:53:7e:81:5d:
79:dd:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:31 2026 by rpki-client