Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: nRRoZUWievWeNIXlZwxB1AkzSXo51mCvnM+Ty+v6bqw=
Subject key identifier: DE:D4:FB:F7:E2:C9:22:C9:A7:6C:03:E2:16:DA:75:05:E4:44:09:59
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 544B9F7B847CEF11C4DF507A453FCA6A8DBA5F4D
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 10 Jun 2026 14:47:32 +0000
ROA not before: Wed 10 Jun 2026 14:42:32 +0000
ROA not after: Wed 09 Jun 2027 14:47:32 +0000
asID: 212238
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4b:9f:7b:84:7c:ef:11:c4:df:50:7a:45:3f:ca:6a:8d:ba:5f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jun 10 14:42:32 2026 GMT
Not After : Jun 9 14:47:32 2027 GMT
Subject: CN=DED4FBF7E2C922C9A76C03E216DA7505E4440959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:07:9a:27:5a:4f:52:c5:c5:82:74:e1:69:
59:83:84:b7:dd:18:7d:8d:97:30:04:cf:25:ea:fc:
e9:e7:ed:85:a7:4c:3e:3b:b4:40:d7:51:d0:3e:54:
68:a4:17:dc:ca:d8:7c:f6:8d:75:3f:b6:f0:d7:d6:
95:9e:b0:af:d0:1f:37:ec:7d:67:2e:ed:07:4b:40:
1f:01:c7:c6:21:36:06:5e:91:89:61:2b:cc:57:55:
06:f9:2c:4f:66:e5:ae:cb:cc:a3:0f:eb:5a:e1:76:
e4:d2:a1:2f:3a:14:40:be:7d:9d:83:ba:c4:cc:91:
78:27:fa:74:6a:2f:63:b9:e6:b3:77:0e:8c:8f:00:
b7:a9:7d:de:46:97:d7:d5:7c:04:c2:52:92:b0:92:
c4:af:82:69:56:2e:f6:2d:da:65:42:ea:e1:c1:4a:
2c:ac:c6:f7:36:6f:88:1b:46:19:83:66:d2:3f:13:
1a:7a:91:ff:1f:7b:19:ed:14:a9:21:09:31:6d:2b:
db:70:49:1a:4e:a3:d8:0c:31:74:8a:ed:33:43:51:
94:6a:8d:05:27:49:7d:87:5f:70:c9:81:e6:61:c2:
3d:27:f1:93:34:ed:1e:8e:91:12:62:97:0b:20:f3:
b1:81:23:61:43:da:25:5a:a8:51:cd:96:7d:5b:9d:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D4:FB:F7:E2:C9:22:C9:A7:6C:03:E2:16:DA:75:05:E4:44:09:59
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
63:15:5c:67:35:64:2a:5f:72:72:a2:20:f4:a6:12:60:bc:08:
42:f9:7d:8d:7c:56:d7:a0:41:4d:f8:bd:55:b7:d4:e1:66:ef:
1e:50:81:5d:59:b8:c1:b6:b1:a2:dc:93:e7:f8:ee:36:c6:e9:
33:7b:cf:00:5d:25:20:a2:86:23:36:2e:68:8e:7f:4c:c3:d1:
ab:a8:fb:d1:a0:3b:47:92:0b:09:b1:c2:b4:f5:e1:12:75:68:
0b:77:9f:05:e0:f8:6e:b0:c0:44:ff:44:c7:34:2c:cd:ea:bb:
a2:87:74:b5:51:3d:cc:06:75:8e:80:87:ff:0a:2b:2a:68:10:
0b:1e:62:ce:c8:8e:5a:09:fa:ee:95:a8:f8:99:d7:75:ef:b0:
24:f1:f6:e9:f3:1c:33:4b:7c:d9:18:54:53:c5:82:74:77:b2:
b0:d2:a2:b5:ca:cf:3d:da:42:cc:88:0d:ee:de:72:97:80:2c:
f3:b4:a0:b3:c9:08:c9:87:fe:cd:de:82:c3:8f:ec:fc:98:96:
18:de:df:18:fb:b3:8e:6f:f7:0f:3e:cd:ed:bc:b3:91:02:2e:
62:ed:c7:10:a6:02:56:fa:89:e1:f5:fe:f7:95:8a:33:e5:e0:
cf:59:8c:bc:f8:f2:8f:39:41:5f:59:5c:04:25:bd:7f:f6:94:
61:07:04:12
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVEufe4R87xHE31B6RT/Kao26X00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjA2MTAxNDQyMzJaFw0yNzA2MDkxNDQ3MzJaMDMxMTAvBgNV
BAMTKERFRDRGQkY3RTJDOTIyQzlBNzZDMDNFMjE2REE3NTA1RTQ0NDA5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnweaJ1pPUsXFgnThaVmDhLfd
GH2NlzAEzyXq/Onn7YWnTD47tEDXUdA+VGikF9zK2Hz2jXU/tvDX1pWesK/QHzfs
fWcu7QdLQB8Bx8YhNgZekYlhK8xXVQb5LE9m5a7LzKMP61rhduTSoS86FEC+fZ2D
usTMkXgn+nRqL2O55rN3DoyPALepfd5Gl9fVfATCUpKwksSvgmlWLvYt2mVC6uHB
Siysxvc2b4gbRhmDZtI/Exp6kf8fexntFKkhCTFtK9twSRpOo9gMMXSK7TNDUZRq
jQUnSX2HX3DJgeZhwj0n8ZM07R6OkRJilwsg87GBI2FD2iVaqFHNln1bnUhPAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU3tT79+LJIsmnbAPiFtp1BeRECVkwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM4
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABf1rUwDQYJKoZIhvcNAQELBQADggEBAGMVXGc1ZCpfcnKiIPSmEmC8CEL5fY18
VtegQU34vVW31OFm7x5QgV1ZuMG2saLck+f47jbG6TN7zwBdJSCihiM2LmiOf0zD
0auo+9GgO0eSCwmxwrT14RJ1aAt3nwXg+G6wwET/RMc0LM3qu6KHdLVRPcwGdY6A
h/8KKypoEAseYs7IjloJ+u6VqPiZ13XvsCTx9unzHDNLfNkYVFPFgnR3srDSorXK
zz3aQsyIDe7ecpeALPO0oLPJCMmH/s3egsOP7PyYlhje3xj7s45v9w8+ze28s5EC
LmLtxxCmAlb6ieH1/veVijPl4M9ZjLz48o85QV9ZXAQlvX/2lGEHBBI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:52 2026 by rpki-client