Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e20343032323135.roa
File: 39352e3231342e33392e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: fD74Krj4bcckvxep1m1XOdGDkF+DiHThGnzzNLdzPzw=
Subject key identifier: 77:DC:BA:10:03:AB:38:4B:3C:16:EE:F9:26:33:D5:29:15:E3:47:3B
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 3CBFF84A10A676EA6130038C918785B1B21E52D4
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e20343032323135.roa
Signing time: Mon 27 Jul 2026 08:16:20 +0000
ROA not before: Mon 27 Jul 2026 08:11:20 +0000
ROA not after: Mon 26 Jul 2027 08:16:20 +0000
asID: 402215
IP address blocks: 95.214.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 02:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bf:f8:4a:10:a6:76:ea:61:30:03:8c:91:87:85:b1:b2:1e:52:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jul 27 08:11:20 2026 GMT
Not After : Jul 26 08:16:20 2027 GMT
Subject: CN=77DCBA1003AB384B3C16EEF92633D52915E3473B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:99:e9:42:2a:98:ff:6b:a5:86:48:90:55:
08:4d:69:75:bb:eb:dd:b3:3a:bd:d5:8e:86:84:e6:
d6:45:c0:35:fa:52:a0:bd:e2:b9:93:2d:5a:a8:89:
51:8a:2a:7f:2a:d4:b0:0b:ed:dc:21:7c:e2:6e:6f:
a8:e0:fc:50:d0:9a:d3:58:29:90:1f:e3:2a:10:00:
81:e9:3d:43:0d:a6:0b:00:c6:77:83:5d:74:f2:83:
e8:9c:cc:01:bd:18:72:f2:aa:30:7a:fa:7d:75:f0:
26:20:43:41:cd:1c:3b:59:23:2a:b9:fa:a2:f0:b5:
79:62:da:0c:4f:03:72:20:31:7f:41:7f:81:d2:57:
99:d0:c2:61:72:d0:52:32:86:8c:3f:c6:59:9b:ce:
77:0a:43:06:31:53:b9:26:94:cc:de:8a:cf:af:a2:
9b:fb:f0:7f:84:02:9d:15:32:06:a6:8c:29:f0:4f:
73:e2:4a:68:06:7a:dd:c9:cf:e8:39:ac:4a:d3:f7:
8a:67:20:a0:2a:b9:e0:75:3e:81:e0:5e:e6:b0:f3:
05:df:a8:0c:5b:d5:95:13:b0:d4:dc:77:f4:a1:6e:
93:cc:e0:8f:84:0d:69:4b:a8:bb:44:6f:d4:66:bf:
18:eb:42:17:36:1e:cf:ec:ec:d9:f2:49:5c:97:79:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:BA:10:03:AB:38:4B:3C:16:EE:F9:26:33:D5:29:15:E3:47:3B
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.39.0/24
Signature Algorithm: sha256WithRSAEncryption
47:70:68:c0:7a:ad:a7:d2:8b:2e:be:9e:a5:8d:5b:6f:f1:7c:
07:6e:81:37:3c:10:5e:84:15:11:b9:0f:5e:7c:7a:ee:c6:6e:
87:02:f7:74:ad:0d:f1:9d:2d:fd:fb:70:8f:b1:28:b9:f3:b1:
93:c2:97:27:83:a9:81:92:4d:b2:c6:c9:dd:60:c9:c7:6b:9f:
1d:0d:ae:0e:7a:59:e4:2b:1e:0d:ad:87:be:81:ef:c1:27:60:
b2:55:79:e9:1c:79:71:08:e7:e2:55:e0:8c:cf:24:79:81:17:
d9:4a:c3:a5:d5:82:46:2d:e9:0c:54:35:9c:0a:7e:2a:db:7b:
9e:bd:f5:34:a3:45:c6:84:c0:80:16:8f:a2:a5:03:db:d2:37:
f5:16:45:3b:97:e8:f1:a1:78:5c:cf:65:8d:82:c7:41:d3:49:
0f:0b:b9:16:f2:b0:9c:00:07:d5:d1:2a:ba:3b:31:1c:72:30:
56:3f:74:00:07:b8:bb:b5:9d:3c:0b:d3:1d:cb:31:f2:e3:08:
32:bd:9a:f2:e7:c5:50:be:04:32:2a:a1:0b:44:fe:c1:94:5f:
38:b2:4c:99:ce:ee:ab:e0:9b:98:a5:f8:e7:b2:87:25:db:9f:
36:e3:cd:1c:52:3d:23:35:32:10:44:68:75:25:ae:26:61:0d:
20:50:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:05 2026 by rpki-client