Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e2039333034.roa
File: 39352e3231342e33392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: fR0mEZWqKIH1SJdQ1/ayW8gRDcgKfW4Ci620wdbV8us=
Subject key identifier: 1B:C8:58:4F:23:CE:A2:19:4E:E5:2D:67:9A:72:C7:EA:7C:2B:5E:04
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 4651B7BA51DE25438932C922344C7F16FF59E07E
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e2039333034.roa
Signing time: Tue 08 Sep 2026 06:25:15 +0000
ROA not before: Tue 08 Sep 2026 06:20:15 +0000
ROA not after: Tue 07 Sep 2027 06:25:15 +0000
asID: 9304
IP address blocks: 95.214.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:51:b7:ba:51:de:25:43:89:32:c9:22:34:4c:7f:16:ff:59:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 8 06:20:15 2026 GMT
Not After : Sep 7 06:25:15 2027 GMT
Subject: CN=1BC8584F23CEA2194EE52D679A72C7EA7C2B5E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:ea:86:52:95:26:8a:01:9f:44:ab:d4:92:
df:20:bb:81:04:95:e8:e9:fb:87:2e:88:48:9c:5b:
aa:d5:80:36:b3:7a:ae:c2:4d:b2:d6:54:ae:58:de:
b1:95:04:b1:de:ff:88:4f:90:53:e2:ac:4e:8e:b8:
64:e8:23:c3:07:0f:d5:a8:8c:ac:5c:b7:20:6d:d5:
48:39:1c:8b:5b:2d:b0:9e:0b:5b:e2:8c:e8:a7:79:
02:c8:84:a4:7b:ed:5e:a5:c2:f4:65:42:fa:15:ba:
92:42:25:23:43:3f:d7:0f:c4:79:52:1a:62:c8:6c:
7b:bf:ff:f7:15:13:46:cb:a8:f7:52:5e:40:17:8c:
e2:fb:ca:72:e4:bb:26:6d:f4:c9:c0:ec:a7:ae:36:
96:13:3d:53:91:ae:13:b3:fa:91:00:bd:0a:ce:2d:
99:78:29:cf:49:8a:6f:3f:85:e2:ad:1e:6e:1d:2b:
fa:2d:ac:7f:c6:a6:f0:9d:4e:ce:de:6c:db:89:be:
c8:a1:bb:82:53:35:b9:80:e5:79:71:fe:ca:3c:fa:
bc:7d:55:21:14:5f:7e:cb:49:9c:45:19:4d:46:7f:
74:bd:db:79:f8:95:a1:96:94:53:ee:1b:f7:cb:41:
2c:c1:83:7f:3c:5f:f6:8c:9d:fb:0f:5a:8d:8e:8d:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:58:4F:23:CE:A2:19:4E:E5:2D:67:9A:72:C7:EA:7C:2B:5E:04
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33392e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.39.0/24
Signature Algorithm: sha256WithRSAEncryption
90:dd:70:ae:ee:26:5a:4d:31:86:e3:cc:55:37:74:19:15:2c:
6f:6b:48:db:d8:9a:d5:a5:ca:99:97:90:01:7c:e7:bb:fa:f2:
fc:f1:e5:c9:9e:07:3d:53:75:45:91:a7:b2:c2:5a:f5:c4:f7:
bb:33:c9:79:06:73:bd:29:a3:6a:19:c1:2a:12:b0:15:23:2b:
3a:dd:c4:0e:ca:f1:9c:75:85:56:32:e5:f1:5a:2f:28:d1:28:
9d:35:dd:3c:51:6a:0a:8f:b3:45:7e:70:64:41:6e:d3:0f:38:
fc:c0:e3:14:70:2c:93:06:50:37:c8:bd:3a:e8:b4:b0:9e:ac:
a4:62:e9:3d:14:35:91:4b:bb:d6:67:20:e9:c8:b8:ac:7c:97:
ad:4c:ca:de:d7:e5:be:d8:4f:d5:70:1e:0e:f1:a2:4b:52:6f:
3c:00:fd:42:2e:15:71:a2:ab:6f:d3:e0:7c:db:81:a9:43:38:
83:a8:40:89:5e:da:52:41:66:8f:54:da:d5:42:4c:51:0b:a1:
35:7b:10:e5:77:92:25:51:f9:05:91:53:0d:7a:61:f7:23:0a:
14:c0:38:57:06:08:12:9f:12:dc:e0:c2:e1:33:5f:44:00:0a:
ad:2b:d0:a0:f0:36:c0:cc:6b:96:86:f4:22:12:b1:f7:bc:1d:
13:3a:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:35 2026 by rpki-client