Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137342e302f32342d3234203d3e20323030303130.roa
File: 39352e3231342e3137342e302f32342d3234203d3e20323030303130.roa (raw, json)
Hash identifier: T0OtdsqlQEiNjULyM+WmMqg5vGhlYWfEx8XbFjGbBxE=
Subject key identifier: 68:90:C8:96:16:2A:1D:4B:19:81:06:27:BE:FC:F8:93:29:66:02:DE
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 5FA52B6126B8553889AC111A17C5F2EF53A39C28
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137342e302f32342d3234203d3e20323030303130.roa
Signing time: Wed 14 Oct 2026 18:31:38 +0000
ROA not before: Wed 14 Oct 2026 18:26:38 +0000
ROA not after: Wed 13 Oct 2027 18:31:38 +0000
asID: 200010
IP address blocks: 95.214.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a5:2b:61:26:b8:55:38:89:ac:11:1a:17:c5:f2:ef:53:a3:9c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Oct 14 18:26:38 2026 GMT
Not After : Oct 13 18:31:38 2027 GMT
Subject: CN=6890C896162A1D4B19810627BEFCF893296602DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:d0:89:70:4d:e3:13:63:e5:97:e4:56:ad:
af:c2:13:50:6b:64:d2:25:e6:06:0e:81:fd:95:4d:
90:5d:50:3d:76:75:63:a3:9c:1e:84:86:7a:51:d0:
e2:63:6d:25:05:46:a6:f9:ec:e2:c2:c7:5a:11:1d:
08:f0:0b:c7:69:08:2d:aa:e0:2a:5a:9d:58:a6:df:
03:a2:9e:da:26:18:dc:3c:96:28:20:64:b0:5a:55:
c5:9c:8c:75:c2:06:49:92:13:71:04:47:4b:9e:2a:
53:4c:a1:26:0d:70:d2:b8:68:17:57:9a:4f:6a:ea:
63:db:77:60:19:69:e4:31:12:37:75:0e:a9:6c:04:
6e:d5:54:28:38:a9:19:b2:db:37:0b:dc:87:bb:82:
69:81:77:e4:c2:7a:ca:ba:74:e8:c5:96:36:e3:d1:
60:7f:95:ba:b3:96:72:65:f5:59:72:7e:0e:5f:85:
e6:60:29:69:e4:72:7a:1c:81:ba:a1:ee:e2:61:30:
ec:ae:91:c3:91:36:da:b1:66:1d:d1:57:99:c1:a7:
50:8e:d7:cb:ef:a4:1b:f8:fd:2a:d4:44:14:c4:6e:
9e:ec:c9:0e:7f:72:0f:4e:63:10:71:c7:8e:0a:fe:
01:03:19:22:0b:ef:5e:d9:47:53:c3:37:d1:6f:6e:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:C8:96:16:2A:1D:4B:19:81:06:27:BE:FC:F8:93:29:66:02:DE
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137342e302f32342d3234203d3e20323030303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.174.0/24
Signature Algorithm: sha256WithRSAEncryption
66:41:30:cf:e8:f0:35:90:48:61:1c:31:0c:f1:42:70:80:89:
7c:92:4f:26:86:27:02:1e:7f:38:2d:ec:f8:a9:2c:7f:1f:4b:
b4:92:73:1f:0f:27:4d:f4:51:9b:8b:75:1f:ba:f7:12:df:53:
f6:60:78:e4:ae:ed:6b:97:bd:98:23:5b:8f:6d:ba:07:8a:5a:
51:00:d4:48:8c:2f:f3:da:14:15:de:72:50:93:c9:8a:eb:a7:
3e:64:15:fc:0d:a4:98:d4:05:ba:87:1a:a4:46:a3:6e:67:84:
9d:a8:7e:b4:a3:c2:06:86:0e:2a:5c:e7:d8:36:3c:c6:8d:1c:
74:32:0e:0b:67:f2:ee:2e:9b:e3:4f:2c:73:62:40:e7:c1:5c:
e0:d9:73:1b:54:41:1d:66:10:b3:c5:78:f7:0a:de:f4:86:e5:
48:9e:52:f3:9d:e3:f6:08:41:ae:59:1b:0d:dd:27:17:d9:39:
20:f4:21:ed:02:81:25:00:6a:d5:3c:5f:fa:48:ef:1a:dc:f4:
59:fb:36:3d:c9:31:77:e2:34:ad:26:1c:ab:f2:4a:1c:3d:c1:
f1:32:4d:b9:24:85:f7:41:59:61:26:25:74:f5:6e:42:3c:69:
6e:60:6f:49:91:67:d7:5e:47:7c:8e:76:f1:d6:7e:16:67:cb:
ce:ed:cf:e5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUX6UrYSa4VTiJrBEaF8Xy71OjnCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjEwMTQxODI2MzhaFw0yNzEwMTMxODMxMzhaMDMxMTAvBgNV
BAMTKDY4OTBDODk2MTYyQTFENEIxOTgxMDYyN0JFRkNGODkzMjk2NjAyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02tCJcE3jE2Pll+RWra/CE1Br
ZNIl5gYOgf2VTZBdUD12dWOjnB6EhnpR0OJjbSUFRqb57OLCx1oRHQjwC8dpCC2q
4CpanVim3wOintomGNw8liggZLBaVcWcjHXCBkmSE3EER0ueKlNMoSYNcNK4aBdX
mk9q6mPbd2AZaeQxEjd1DqlsBG7VVCg4qRmy2zcL3Ie7gmmBd+TCesq6dOjFljbj
0WB/lbqzlnJl9Vlyfg5fheZgKWnkcnocgbqh7uJhMOyukcORNtqxZh3RV5nBp1CO
18vvpBv4/SrURBTEbp7syQ5/cg9OYxBxx44K/gEDGSIL717ZR1PDN9FvbuchAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUaJDIlhYqHUsZgQYnvvz4kylmAt4wHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM3
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDMxMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABf1q4wDQYJKoZIhvcNAQELBQADggEBAGZBMM/o8DWQSGEcMQzxQnCAiXySTyaG
JwIefzgt7PipLH8fS7SScx8PJ030UZuLdR+69xLfU/ZgeOSu7WuXvZgjW49tugeK
WlEA1EiML/PaFBXeclCTyYrrpz5kFfwNpJjUBbqHGqRGo25nhJ2ofrSjwgaGDipc
59g2PMaNHHQyDgtn8u4um+NPLHNiQOfBXODZcxtUQR1mELPFePcK3vSG5UieUvOd
4/YIQa5ZGw3dJxfZOSD0Ie0CgSUAatU8X/pI7xrc9Fn7Nj3JMXfiNK0mHKvyShw9
wfEyTbkkhfdBWWEmJXT1bkI8aW5gb0mRZ9deR3yOdvHWfhZny87tz+U=
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:48:38 2026 by rpki-client