Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20333934323033.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20333934323033.roa (raw, json)
Hash identifier: RxpGUTNxKHiOdswo+tQMuJwebiZmqfKeoa1yBhaztGU=
Subject key identifier: 87:9A:8F:38:EE:FA:6A:2E:C1:C9:E0:50:6B:4C:C6:A1:8C:4B:D8:D5
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 08B7DB4FDE41D02A453B85CF1437B1B9C79CF95C
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20333934323033.roa
Signing time: Mon 14 Sep 2026 00:07:51 +0000
ROA not before: Mon 14 Sep 2026 00:02:51 +0000
ROA not after: Mon 13 Sep 2027 00:07:51 +0000
asID: 394203
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b7:db:4f:de:41:d0:2a:45:3b:85:cf:14:37:b1:b9:c7:9c:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Sep 14 00:02:51 2026 GMT
Not After : Sep 13 00:07:51 2027 GMT
Subject: CN=879A8F38EEFA6A2EC1C9E0506B4CC6A18C4BD8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:ea:24:4a:cd:01:00:be:60:d5:54:a9:01:
10:eb:b9:8d:a5:67:86:d0:f1:8b:b4:99:44:6c:2b:
6b:bb:e5:72:1d:18:8d:5f:25:7c:95:f1:00:d8:16:
49:c4:6f:b6:b4:7e:a9:1d:7e:06:cd:91:75:2f:96:
34:95:3b:66:d1:60:4b:c1:d9:ea:c1:3c:ad:d0:4a:
b4:9d:34:fc:de:fa:9b:9b:ce:18:a6:73:4c:a4:41:
bd:13:7f:d5:c9:01:98:a0:6c:2d:33:a9:79:44:41:
ba:4f:fe:5d:71:3a:8f:5a:c5:eb:f5:61:f4:98:44:
58:25:20:36:58:15:af:b0:99:4d:6d:2c:a1:87:6c:
39:5b:4d:2d:a3:39:7a:7a:f4:53:07:3d:05:3e:88:
75:02:bd:22:1e:17:ab:c4:be:b2:b3:6c:a5:b0:32:
d2:34:76:86:80:50:16:92:7f:9b:5d:c3:93:af:b6:
61:d4:b6:95:31:45:dc:cd:7c:8f:4a:af:79:da:e2:
27:4c:9d:43:d8:05:d3:6c:30:e7:98:2a:34:c1:b1:
23:a1:22:47:ab:54:01:14:bb:3a:f6:67:06:e3:d4:
db:e1:24:21:a2:ae:ff:b8:1b:c0:d8:36:51:ec:e4:
6f:14:e2:10:ac:5e:0c:3f:b4:c6:93:4d:0a:f5:60:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:8F:38:EE:FA:6A:2E:C1:C9:E0:50:6B:4C:C6:A1:8C:4B:D8:D5
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20333934323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
74:da:a0:34:83:4a:20:bc:28:f9:17:64:d9:2a:50:d3:ad:da:
b7:27:5d:19:41:e1:da:aa:25:75:d3:aa:d5:24:4e:e4:d4:80:
de:b7:0f:ea:cf:f3:2b:c8:22:34:ab:64:cd:1e:9f:0a:70:ec:
4a:3c:79:3b:d3:43:93:2a:0f:2d:67:cb:a5:90:7b:3a:b1:0f:
4c:3e:fb:0a:db:3f:5a:ad:34:ac:da:7f:ba:1f:ce:1e:92:54:
bc:d4:f0:c3:34:2f:cb:20:84:f6:16:e9:50:9a:e1:88:93:e8:
01:bc:74:55:18:d6:15:4a:4d:bb:a5:f8:d9:73:2d:07:0a:48:
6e:76:a4:6f:02:bb:01:38:48:22:97:ae:e4:ad:be:0c:52:b8:
79:c4:8f:4c:e6:31:dc:2b:5f:18:4c:00:e1:04:2c:c8:10:ed:
48:13:96:be:12:0e:f7:5f:22:da:c1:cd:43:bf:94:e3:ba:ea:
2b:16:67:27:ad:79:cf:18:4b:78:db:84:e9:1e:89:ed:2e:34:
56:72:59:16:16:82:e4:b2:cd:5a:c9:68:9b:ea:74:5c:2b:36:
cc:14:1a:46:b2:42:45:07:6c:bf:d4:82:1a:3e:2a:bb:de:5a:
04:31:9d:bd:c9:4a:3b:3c:1c:f8:43:c8:1f:df:ba:05:00:4f:
ce:98:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:10 2026 by rpki-client