Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: XD2ZyttBhFjgfG73yu4s+OJawJ7EiOCgvndwC1uH4BU=
Subject key identifier: D8:D1:25:29:81:52:5C:A5:90:24:3C:E8:45:67:31:82:40:D1:A7:B9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7EA5BBEA8DA20AB1C58E5B9208E70DEAF1AFC5E5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 21 Oct 2025 13:22:50 +0000
ROA not before: Tue 21 Oct 2025 13:17:50 +0000
ROA not after: Tue 20 Oct 2026 13:22:50 +0000
asID: 212238
IP address blocks: 95.214.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a5:bb:ea:8d:a2:0a:b1:c5:8e:5b:92:08:e7:0d:ea:f1:af:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 13:17:50 2025 GMT
Not After : Oct 20 13:22:50 2026 GMT
Subject: CN=D8D1252981525CA590243CE84567318240D1A7B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:94:72:c4:42:94:39:ae:12:d0:50:9d:9a:1e:
89:53:2d:ca:e7:d6:76:ef:2a:f3:cc:75:51:37:a7:
d5:28:5c:12:65:1e:a7:8d:b8:f1:d3:24:c1:8c:fa:
5a:90:5c:78:9e:60:3a:1c:05:c0:2e:4c:03:65:a9:
51:9b:1f:1c:48:8a:a0:f8:a5:df:61:75:db:d6:08:
5e:55:e4:cb:51:68:9c:f8:d1:89:a2:4d:8c:96:c4:
2f:95:b2:17:a7:29:b4:cd:ad:cd:67:08:32:56:59:
d6:f9:a4:8c:b3:76:72:70:f9:a0:16:dd:1b:6b:c4:
91:ba:e4:d5:dc:0e:03:30:90:8f:04:aa:fd:10:79:
c1:f7:b8:c3:c3:d9:d3:56:cd:b2:cf:12:03:ab:b7:
8d:a2:8c:02:f3:4c:0b:c7:f8:60:ef:5b:de:cd:2a:
63:eb:dd:40:3d:47:9e:d0:d0:8d:23:aa:84:49:3d:
79:c3:ff:d0:4b:9c:1c:c7:1c:d8:7b:8c:fe:3f:1b:
f6:ff:2c:6c:ff:9c:4d:44:d3:d9:42:8c:4a:a9:18:
b1:9f:0e:4d:bc:49:53:e8:bd:b0:4b:90:e2:78:4a:
8e:c5:86:84:d9:1a:52:79:f5:5a:a7:d9:23:e0:03:
fa:1e:ef:a4:90:48:75:f4:8e:a2:77:ed:0c:75:7b:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D1:25:29:81:52:5C:A5:90:24:3C:E8:45:67:31:82:40:D1:A7:B9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:10:88:49:00:96:28:1b:17:3f:04:a1:61:c3:77:ee:3e:43:
9a:b6:12:ba:71:bc:9d:11:b9:0c:a0:5c:91:b3:d1:47:2e:f1:
4c:e0:a0:8c:ae:25:d7:8d:d0:ac:dc:78:f9:50:09:93:44:89:
79:ee:c0:f3:44:e4:71:3d:51:03:5c:8a:43:7e:2f:ef:6a:14:
f8:f8:bd:e9:ff:d0:28:b2:3f:50:94:a5:9d:44:90:c0:c9:9d:
41:7e:bc:3d:14:29:6f:d2:16:35:cf:cb:51:e6:27:66:5d:f0:
99:18:ca:70:23:10:d8:8f:5d:7f:78:e5:fc:89:a9:d1:57:c7:
b1:74:e9:8d:18:79:aa:43:ee:53:79:1f:37:0d:59:98:83:1b:
c8:ae:c0:28:4a:69:83:62:37:07:a2:f8:8d:66:11:d5:92:cd:
f8:cf:30:1e:db:2a:d5:21:17:07:1a:80:62:4e:41:95:de:25:
0f:cc:7b:c3:3a:94:b2:25:1c:a0:4f:7a:14:75:28:d9:23:82:
1b:c2:fe:a4:34:2b:d9:ce:23:39:74:78:0f:db:27:64:ff:51:
1d:ae:ef:f5:1d:ad:e8:63:6b:b7:9b:74:27:e3:87:50:52:11:
09:73:26:64:74:c2:10:bd:0b:cc:a5:71:ac:a0:94:05:8c:be:
f6:58:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:20 2025 by rpki-client