Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: IRa7uCVo8ogB8TajcfSCQx8AJv9mkE8nCHrDsWMF+6I=
Subject key identifier: FF:33:7A:08:E9:63:65:25:B5:7E:3C:52:ED:DC:9B:8D:18:47:A8:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 261319276C2E32AFA94591CE705CCB116614BA6D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 25 May 2026 12:24:33 +0000
ROA not before: Mon 25 May 2026 12:19:33 +0000
ROA not after: Mon 24 May 2027 12:24:33 +0000
asID: 212238
IP address blocks: 95.214.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:13:19:27:6c:2e:32:af:a9:45:91:ce:70:5c:cb:11:66:14:ba:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 25 12:19:33 2026 GMT
Not After : May 24 12:24:33 2027 GMT
Subject: CN=FF337A08E9636525B57E3C52EDDC9B8D1847A880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:db:3e:e2:10:a1:4a:6e:0a:cc:65:fb:7f:
cd:ed:84:1c:20:6e:3d:9e:ee:41:41:e2:6a:33:a2:
45:d3:19:85:37:27:9d:29:2a:4d:a2:39:a9:56:c7:
bb:5d:86:40:3e:5b:66:66:db:0d:e2:3c:36:af:37:
da:ae:ee:cf:43:f1:df:b6:c0:7e:2c:b5:fa:73:c5:
c2:39:91:ad:dc:83:71:2e:c5:24:21:5b:b1:20:29:
39:58:a2:bf:b3:a4:bb:60:25:48:57:cf:95:ce:0d:
b2:35:86:b0:d2:9d:23:9e:19:33:64:0f:eb:b0:7e:
15:47:4f:b9:9f:52:01:10:c8:a1:f5:aa:78:da:4d:
ce:bf:3e:04:fe:ff:a5:8d:94:6b:75:04:95:0f:61:
d0:ed:b4:af:fc:ec:84:8e:cc:cc:61:7e:4b:79:a9:
5d:3c:47:6d:c5:57:36:26:c3:1b:c1:af:d3:79:d7:
41:63:e0:d1:f6:5e:2a:9f:2c:c2:c0:b5:5c:39:76:
d2:da:e9:67:65:fe:2e:59:f0:7b:41:f3:dd:dc:42:
ec:b6:4f:60:1c:9d:44:e9:84:c0:32:31:1c:66:95:
3e:80:90:c5:71:4c:4c:e1:16:51:37:f4:f8:63:38:
e8:65:9c:14:8c:64:c4:7b:ef:30:94:2f:b0:2f:6b:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:7A:08:E9:63:65:25:B5:7E:3C:52:ED:DC:9B:8D:18:47:A8:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.112.0/24
Signature Algorithm: sha256WithRSAEncryption
25:50:98:b6:df:8e:ec:f9:fa:6c:4f:a0:4b:a6:c6:ea:ea:58:
60:a8:52:13:ce:46:d6:df:1d:a8:5d:b3:ff:3c:3d:31:a8:d1:
61:a5:27:b0:92:09:0b:85:18:5e:99:fb:51:06:6d:39:fb:2f:
f8:0c:3c:78:8b:68:9a:ac:cb:07:7f:d4:c4:79:da:8a:0f:ca:
09:ef:8f:7a:65:49:d1:56:4d:cb:f1:cd:17:09:73:0f:07:4d:
f7:5d:9f:e5:a6:d1:e3:44:41:fe:e3:2d:14:e2:26:52:12:de:
38:04:1e:c0:d4:77:50:a7:5c:f0:58:5d:65:2c:86:e4:73:11:
63:36:ff:2e:45:13:85:56:35:a8:78:51:ee:15:c0:f4:6e:01:
cd:3a:f9:54:3f:7f:14:3f:6b:f7:67:ff:e0:bd:3b:12:17:cb:
fe:35:ce:21:11:d3:30:1d:1d:1b:95:c7:5b:e7:b4:67:43:76:
0c:c5:f8:00:5d:11:9d:ba:df:5e:80:fd:2b:b5:27:fe:6a:84:
fe:38:d8:03:ee:43:16:f7:c6:0a:86:c0:1e:3a:61:a5:a3:a0:
7e:47:ed:7e:a9:d8:c9:ee:47:9d:42:29:8f:5d:fa:db:46:6a:
ac:bf:67:9a:bd:10:2b:c8:c2:6e:da:a4:f1:7e:b2:16:d1:57:
d3:75:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:22:23 2026 by rpki-client