Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: o9VRvOB0+doQTr0fN860QsVaF48ReRiVRQV48Xt8HXE=
Subject key identifier: BF:17:65:8B:5F:1B:F7:13:9C:85:00:8E:DF:CB:4D:B9:F1:19:85:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D8D4528039F346435EC48DA06BB4A4C524FB0A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 21 Oct 2025 13:22:46 +0000
ROA not before: Tue 21 Oct 2025 13:17:46 +0000
ROA not after: Tue 20 Oct 2026 13:22:46 +0000
asID: 212238
IP address blocks: 95.214.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:8d:45:28:03:9f:34:64:35:ec:48:da:06:bb:4a:4c:52:4f:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 13:17:46 2025 GMT
Not After : Oct 20 13:22:46 2026 GMT
Subject: CN=BF17658B5F1BF7139C85008EDFCB4DB9F1198503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:1d:d8:e3:4f:3a:39:1a:42:32:3d:03:6f:
b1:53:c1:11:38:82:94:87:0c:0b:54:36:71:26:ea:
2a:a3:f9:4e:28:cc:85:ce:6e:d8:c2:8c:00:1d:ad:
d0:78:35:80:9f:9a:fd:3a:78:b1:12:2a:f8:2e:81:
5e:60:72:7a:69:f0:22:66:83:be:68:bd:8c:73:af:
08:e4:90:10:80:e7:15:a9:04:b5:3f:a8:26:f3:42:
98:7b:c6:b5:9f:c0:b0:17:75:58:0b:0b:26:6b:a3:
24:55:16:42:b8:a0:e7:8a:eb:59:72:4c:77:a7:42:
44:93:b2:6e:fb:6b:6a:5b:ff:b3:f3:9b:6e:41:82:
b2:e6:80:ba:61:fa:ec:60:45:d6:27:b4:87:1a:b8:
c5:1d:5e:5f:51:87:91:53:a5:50:f0:1f:13:c7:e3:
68:fd:5c:1b:2a:2e:38:f8:b0:0d:ad:72:81:3e:f8:
4f:96:df:f0:21:7a:29:f6:a9:15:f0:dc:30:d1:c2:
ba:62:c8:d1:f9:2e:0a:fb:6f:e8:c5:75:97:e1:ac:
14:55:3f:c9:f1:71:7b:9f:87:1a:56:85:8f:b7:f3:
53:45:78:b4:7c:34:09:6a:d9:f4:98:89:5b:e8:d7:
49:d0:c7:95:b8:10:52:32:eb:82:c1:aa:2c:76:19:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:65:8B:5F:1B:F7:13:9C:85:00:8E:DF:CB:4D:B9:F1:19:85:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2d:6f:d5:a2:8f:9d:8e:2b:5e:d7:0f:bb:47:64:2b:c5:e0:
fb:c7:0f:24:87:46:fa:f2:5f:08:d8:3f:b7:f4:ff:6e:fe:89:
74:7e:2f:42:06:f4:a2:01:d9:8e:24:12:22:45:08:ed:fd:90:
be:07:e5:e9:d9:08:2a:64:1c:79:e2:9d:ae:0e:84:16:9c:78:
06:d1:85:83:f7:30:f8:9a:86:87:52:95:76:c9:f4:61:25:cb:
dd:d3:ed:79:11:0e:bd:cd:93:a2:68:56:aa:eb:db:5a:ce:3d:
5c:fc:cc:a8:97:b8:7a:c4:b0:f0:4b:10:50:d4:dd:89:cf:7f:
c7:e1:f8:0d:18:0c:a5:76:2b:07:21:b5:d5:c5:66:c8:38:a7:
26:88:5a:b3:e2:5c:e5:83:e9:68:cb:bf:5c:66:d7:f4:94:21:
0c:9f:0e:f9:8e:52:93:f7:eb:f9:68:ba:55:77:6d:cc:92:be:
24:8c:12:a4:e6:50:5e:a2:43:2e:6a:34:e6:95:15:fd:11:93:
60:28:37:30:fc:ac:46:7d:63:3d:9d:a2:de:b4:35:e1:88:f8:
eb:b0:5b:73:d1:24:2a:b4:97:a1:d3:31:90:2c:fb:59:02:e7:
b8:06:98:72:8f:86:c8:af:3f:93:a0:16:2e:65:b2:df:7f:dd:
7b:a4:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:20 2025 by rpki-client