Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rTiNUu94wqkQK97UBZUpcNmKchQNy3Jdhd2fhHZfFos=
Subject key identifier: DE:CA:70:89:9B:BA:0A:56:6F:1B:9C:1F:BD:04:66:4C:04:05:62:8E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3055B65D5F0156244679F42B835FC15A626A4290
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:30 +0000
ROA not before: Fri 30 Oct 2026 20:27:30 +0000
ROA not after: Fri 29 Oct 2027 20:32:30 +0000
asID: 136787
IP address blocks: 95.214.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:55:b6:5d:5f:01:56:24:46:79:f4:2b:83:5f:c1:5a:62:6a:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:30 2026 GMT
Not After : Oct 29 20:32:30 2027 GMT
Subject: CN=DECA70899BBA0A566F1B9C1FBD04664C0405628E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:81:08:d9:63:71:df:17:61:48:f5:3c:b6:
ec:a4:89:3e:57:a3:73:45:1c:13:8b:b2:34:31:e8:
69:98:4a:c2:c1:8c:4a:cd:0e:7f:f4:5c:3a:9e:6a:
ad:37:97:ab:7c:c5:c0:7b:e4:d5:29:35:ff:e3:4e:
d5:7b:b4:15:00:c4:31:3b:4e:b6:6d:29:ae:61:b5:
ea:30:82:40:1c:45:c5:89:33:12:09:11:bd:92:c6:
92:cc:f1:47:1c:42:a1:00:4f:83:ea:ec:c1:cc:f3:
00:e7:76:21:4e:a6:13:e4:97:17:dc:66:84:e5:3d:
51:8d:00:6d:fd:1d:56:c8:71:ab:c6:de:aa:39:34:
ee:21:53:50:1d:85:51:44:e0:3e:ff:79:f3:e4:02:
f7:c9:e0:15:fe:28:98:77:32:f9:71:6d:02:94:f7:
1b:d3:86:56:35:bf:7a:79:43:93:bf:c8:d6:16:9e:
92:78:ee:81:89:6b:c5:8a:20:e6:0c:09:d1:bc:a7:
88:60:32:95:e8:8a:bb:98:ec:c0:a5:15:9c:c2:14:
37:73:b8:93:10:9d:f3:2b:da:c3:66:86:45:b9:cb:
8f:e5:6b:ff:7c:37:56:54:02:5e:86:5a:f8:0c:60:
e4:a1:ec:d2:57:cc:d1:ba:d5:fa:81:39:62:1f:1c:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CA:70:89:9B:BA:0A:56:6F:1B:9C:1F:BD:04:66:4C:04:05:62:8E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d0:39:f4:8f:f0:cc:80:78:d3:06:51:83:cb:14:f7:37:51:
8d:37:2a:6c:18:0f:59:a2:3f:a5:8a:75:9b:73:0c:ee:9f:58:
6d:2b:ec:ca:30:ae:54:80:9a:2f:61:9e:e0:1a:11:08:c6:32:
54:cc:8e:b1:10:c2:80:06:ae:93:6c:10:2c:ee:92:43:6b:fa:
2c:08:fd:d8:10:35:56:33:f5:af:00:f9:f8:fd:0e:4e:e7:78:
43:46:1c:f2:6c:ff:e7:d3:fc:a3:d1:f3:51:66:3c:95:b8:61:
21:37:9e:44:34:5c:75:c2:ed:cc:bf:ef:bf:20:fc:d9:26:e1:
9a:bf:15:84:23:71:11:1b:48:0f:b9:65:ea:e5:e7:ce:71:9c:
ce:51:32:f8:0d:3f:88:21:8e:2a:45:53:05:4b:6d:60:aa:38:
27:01:f4:83:8b:b0:ec:6a:cb:4d:d9:73:90:a4:f5:34:b6:37:
ba:64:22:ab:1d:d3:5f:bf:2e:ef:01:67:75:33:7e:b4:ca:cd:
08:4c:d1:92:9d:40:3e:ad:0b:dc:a8:50:b5:a3:01:88:b9:56:
23:7c:2e:3c:2c:50:84:da:01:51:d0:6a:a7:51:75:6e:f8:d7:
d8:d8:ea:df:25:a2:9b:df:7c:28:62:1c:91:14:f7:06:66:df:
ec:0f:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:34:13 2026 by rpki-client