Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: a6RV0XilpqBpI/iXofiRgfyNpmG014+OCJmbhrdV+PE=
Subject key identifier: A2:F6:6F:06:2E:4F:80:B2:20:AA:68:0A:7E:3D:26:7D:32:AD:0C:B4
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 0C44E6530EB789331F741EE373EA8AFA36CBB9F4
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
Signing time: Mon 05 Oct 2026 13:02:22 +0000
ROA not before: Mon 05 Oct 2026 12:57:22 +0000
ROA not after: Mon 04 Oct 2027 13:02:22 +0000
asID: 834
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:44:e6:53:0e:b7:89:33:1f:74:1e:e3:73:ea:8a:fa:36:cb:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Oct 5 12:57:22 2026 GMT
Not After : Oct 4 13:02:22 2027 GMT
Subject: CN=A2F66F062E4F80B220AA680A7E3D267D32AD0CB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:b2:06:79:fe:aa:fa:47:b3:de:d2:cf:75:
31:20:ea:e0:f4:c4:63:9a:50:25:68:bf:7a:35:11:
66:b0:b0:04:f2:29:3e:52:65:de:94:9b:c4:cc:5b:
7f:3d:ec:33:ee:7d:fc:74:8f:be:63:9e:61:b2:52:
79:60:7f:cf:d5:f9:67:7c:23:e5:8f:6f:c9:95:ed:
41:f8:d0:ea:36:2e:a2:90:1d:c9:31:f9:41:9e:14:
58:4d:18:ec:7c:d0:5a:c9:9d:b8:ec:12:b8:21:0f:
42:4b:a8:e8:b2:2f:c3:d1:c7:cb:71:44:58:22:a8:
ad:9f:f5:8d:07:4b:93:79:0b:31:ca:77:53:51:15:
d6:aa:60:c2:d6:05:9b:ad:d3:cb:87:ba:4f:d8:9d:
92:e1:38:c5:89:75:77:ea:d8:9c:37:eb:8c:8b:84:
d0:aa:b7:55:9c:8d:82:c8:ac:22:82:d8:16:c9:d8:
11:98:38:b9:5a:7d:0b:88:e5:2f:f1:87:55:74:f6:
36:44:9d:8f:0a:84:b6:82:0f:5a:57:ec:6f:0a:28:
26:64:6f:b2:3b:8a:21:11:46:ed:c6:9f:a2:c7:17:
e1:22:aa:b7:e1:75:43:cb:94:68:ca:37:ef:c3:b4:
5c:d7:31:28:cc:71:41:e6:21:df:fa:64:49:af:bc:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:6F:06:2E:4F:80:B2:20:AA:68:0A:7E:3D:26:7D:32:AD:0C:B4
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:64:44:ad:b1:f3:9c:12:96:3a:ff:b1:0d:0b:b0:2c:e7:a9:
22:61:c3:d2:ad:0b:e4:06:b7:05:b1:5c:59:3e:91:ce:b6:07:
b7:95:a7:2e:d7:e7:24:fc:11:35:7a:cf:22:c4:cb:80:dc:94:
b7:d5:0f:87:4b:f0:a4:e7:1e:72:74:c9:52:35:f6:06:a5:71:
75:4f:0b:bc:94:e8:f1:a8:99:aa:3d:a4:36:7e:c4:79:01:60:
f8:76:17:80:61:38:fe:07:74:31:7f:61:b8:b0:c4:59:40:0d:
09:05:10:41:d2:9e:e4:90:f2:5f:f7:57:24:86:aa:40:fe:04:
31:ab:bd:9b:99:ae:39:a0:b5:18:9b:08:d6:79:6f:86:b9:b1:
18:eb:95:c9:25:92:40:8c:ce:40:bf:2b:ba:0a:9a:d0:14:bc:
7c:ce:8e:9c:7b:cd:f1:5d:e8:d7:bc:e4:68:57:29:14:78:f8:
53:6f:57:76:69:f8:ab:c6:f6:fa:96:64:53:30:81:34:5a:52:
36:25:4d:3f:c3:bd:40:ac:44:84:56:74:17:d4:25:7a:81:f4:
ff:e5:82:4b:cf:c8:fb:93:fc:88:b6:af:03:69:7b:ce:70:7c:
e8:77:40:51:ec:49:24:4a:a2:8b:3f:91:b5:73:0f:cd:f4:51:
a2:ef:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:10:10 2026 by rpki-client