Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa (raw, json)
Hash identifier: ppvL8ONO4VguHbFDU1oqqBQJIOG4rM+WNvZk8GO+7nk=
Subject key identifier: C5:DD:19:A8:74:18:04:9D:49:8E:2A:4E:9B:49:10:EF:52:FA:5C:0D
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 64090521A7316C5141A5D69221666B2C0B0273A5
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa
Signing time: Tue 03 Feb 2026 06:18:32 +0000
ROA not before: Tue 03 Feb 2026 06:13:32 +0000
ROA not after: Tue 02 Feb 2027 06:18:32 +0000
asID: 393942
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:09:05:21:a7:31:6c:51:41:a5:d6:92:21:66:6b:2c:0b:02:73:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Feb 3 06:13:32 2026 GMT
Not After : Feb 2 06:18:32 2027 GMT
Subject: CN=C5DD19A87418049D498E2A4E9B4910EF52FA5C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:98:04:75:15:74:bb:93:84:cd:8e:17:9e:
3d:21:40:a3:b1:5e:9d:f2:f8:07:e8:dd:4c:8d:38:
68:76:9b:aa:08:4c:32:35:04:58:92:42:d9:60:ca:
de:a4:c5:ac:d5:d1:2a:9b:6a:64:af:bb:8d:1e:61:
02:1f:e3:6b:25:ab:b1:85:c0:ea:c9:14:b4:ca:da:
23:7f:af:90:17:39:46:21:38:38:30:82:33:ab:36:
af:67:4e:70:c2:65:a9:12:08:c0:61:2a:fc:0a:d4:
18:52:97:f9:36:23:65:08:61:50:07:a8:2e:53:d8:
9e:ab:f9:15:18:a1:47:14:c1:73:70:53:c8:c0:da:
9d:c8:93:04:17:70:99:89:a1:84:c8:58:47:3b:ac:
8f:a7:29:a9:18:7a:54:66:d9:21:46:70:0a:41:76:
d8:65:3a:83:e9:8e:64:f8:e0:7e:7e:32:cf:f5:47:
45:8c:b7:8e:bb:92:e5:6d:37:c4:a4:4c:ce:54:2f:
83:99:c0:7a:c9:3a:b5:a7:88:d1:06:7d:c2:87:d5:
90:a1:39:0e:5d:4c:12:35:4c:fb:c5:11:d2:fd:d3:
48:fb:ab:38:70:1e:b9:4d:af:cc:40:7d:17:54:36:
f7:56:9d:68:82:5b:1a:e4:5c:0e:d4:75:5a:fd:ac:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:19:A8:74:18:04:9D:49:8E:2A:4E:9B:49:10:EF:52:FA:5C:0D
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20333933393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8f:c6:21:6d:ed:e6:74:83:6d:23:00:1c:af:cb:56:4a:2e:
76:c7:ee:6a:0c:3a:19:8d:6c:3b:63:ac:f6:1a:64:c3:ab:29:
0d:52:24:2b:f1:ff:07:a7:dc:66:57:6d:5a:bc:c2:86:55:fd:
2e:55:ec:dd:8c:60:37:f5:8e:21:90:d0:ef:ba:7a:52:86:dd:
51:45:ba:12:d6:22:05:c5:93:73:00:4b:86:49:5a:3e:12:9e:
fe:1a:cb:da:8d:ec:19:23:ab:f5:d5:9d:d8:6d:d8:db:13:7f:
20:68:bc:52:cc:ba:bf:1c:bc:e7:5c:14:63:5b:52:b6:9e:bf:
2c:e3:6c:c7:c3:20:c4:94:a0:0c:63:08:ff:f0:38:ed:0c:50:
2d:09:10:52:b3:b5:17:51:69:70:09:07:a0:53:6a:1f:2f:50:
1e:34:05:1a:73:d2:a9:1a:9b:f0:b1:25:d7:97:90:00:65:37:
58:73:b6:c2:80:3e:86:55:b9:3f:60:8e:ec:28:43:e1:1d:03:
9f:0e:08:8e:0b:1f:c7:d4:e6:1d:96:b4:18:52:4a:af:2b:59:
9a:81:bb:6f:c2:92:1f:2c:2a:a5:95:35:6a:0b:7c:a5:83:c4:
2c:51:00:2e:76:b1:35:8d:cb:31:ff:72:59:58:d7:f8:d9:4a:
c8:01:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:27:08 2026 by rpki-client