Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e203235313938.roa
File: 39352e3231342e33382e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 2Trzj3QG6OgDj7xiq3Z/LCFD9cVGO6FJEzwvOtK3KY8=
Subject key identifier: FC:5E:0D:83:6D:A9:22:82:4C:F5:1E:96:3D:F1:F4:65:CE:45:FF:93
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 05D20BE161A2AA361CD3E6FBC1C8B1ECB7F29885
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e203235313938.roa
Signing time: Sat 25 Jul 2026 12:51:35 +0000
ROA not before: Sat 25 Jul 2026 12:46:35 +0000
ROA not after: Sat 24 Jul 2027 12:51:35 +0000
asID: 25198
IP address blocks: 95.214.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 02:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d2:0b:e1:61:a2:aa:36:1c:d3:e6:fb:c1:c8:b1:ec:b7:f2:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jul 25 12:46:35 2026 GMT
Not After : Jul 24 12:51:35 2027 GMT
Subject: CN=FC5E0D836DA922824CF51E963DF1F465CE45FF93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:d2:b8:86:71:be:8f:4e:c9:5e:90:68:b9:
b1:d6:15:13:11:ad:7e:46:ec:50:48:48:16:cb:0d:
1f:ab:af:46:e5:ff:e6:7f:6c:82:50:5a:4f:4a:6e:
eb:c3:03:d8:3d:98:5a:74:1b:af:9b:a4:ad:89:7e:
62:a6:8e:ec:0a:9b:92:2f:b9:47:f9:25:54:14:0b:
92:e1:90:ea:4b:21:dc:30:64:04:d1:d7:06:e9:77:
fd:ab:59:77:f8:65:82:f5:f8:73:c4:1a:a7:9d:9e:
b9:ad:71:9d:2d:36:15:3e:f4:18:80:89:5e:11:4c:
33:8b:fa:d2:c6:ac:ef:bc:40:6a:31:8d:09:85:3c:
7c:12:0a:40:71:71:10:49:39:38:06:c1:9b:a2:13:
5a:3b:a0:db:ad:94:50:c6:d1:87:1c:d8:5a:88:0b:
36:95:a9:b5:d8:4b:6f:fa:5b:42:ca:25:80:63:ab:
4e:8f:64:f6:ea:63:da:18:88:a5:f8:f7:4e:dd:e1:
bd:36:2f:a4:61:28:92:37:64:42:6e:bf:71:a8:7d:
33:a8:22:8c:d6:00:b2:7b:9c:c7:90:a8:84:35:b7:
be:a3:9b:66:cf:69:36:7f:6a:a0:5e:73:28:49:3e:
e0:e8:3a:69:d3:11:a5:97:22:34:cb:f9:0c:78:d6:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:0D:83:6D:A9:22:82:4C:F5:1E:96:3D:F1:F4:65:CE:45:FF:93
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.38.0/24
Signature Algorithm: sha256WithRSAEncryption
67:65:66:30:2f:79:c3:fd:cf:ff:06:61:4a:78:cb:4b:ba:7d:
8a:92:23:0b:1f:36:8f:44:7c:ab:61:9c:49:23:51:e1:4b:aa:
3c:6b:47:e2:43:29:37:b3:dd:94:a7:34:13:68:40:a8:6f:f6:
0d:eb:51:8b:ae:f5:09:a5:3a:7c:de:c4:03:58:a1:fb:5f:10:
8f:43:a6:99:8f:47:48:43:78:06:0b:1d:64:12:a2:d0:a1:3a:
cb:fc:ba:08:cf:ed:19:db:77:d8:3a:13:f6:c9:82:03:85:c5:
3b:a4:86:c7:d8:19:ae:a5:8a:2f:c7:f8:0e:7f:f5:8b:03:25:
b7:11:a7:2a:6e:8f:fe:63:94:e2:93:66:fd:2a:dc:02:08:8a:
bd:f7:e7:b6:8e:fe:63:49:6a:8a:27:32:0b:c8:16:59:22:e7:
e7:0b:a6:f2:b5:e6:09:fc:9b:7a:23:f4:48:d2:62:77:65:f3:
22:0b:9d:44:89:a4:1c:58:ea:5f:f7:72:e2:f9:4f:29:a5:fb:
96:6e:47:b3:be:8f:41:4f:db:61:f2:5c:6c:87:20:37:46:78:
6a:da:86:ea:e0:32:56:64:39:c9:7d:fb:4f:c9:0e:dc:03:dd:
a0:ed:23:fc:c3:5b:e1:1a:21:f6:ae:b5:52:a7:4d:eb:60:57:
3b:93:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:11 2026 by rpki-client