Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=
Subject key identifier: 4B:40:66:51:8E:31:6C:BC:C7:49:B1:BA:10:91:AB:18:39:B9:04:07
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 77427BC0CF357B8F78B846B09E9105239963ABA5
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 09 Jul 2025 14:02:49 +0000
ROA not before: Wed 09 Jul 2025 13:57:49 +0000
ROA not after: Wed 08 Jul 2026 14:02:49 +0000
asID: 212238
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:42:7b:c0:cf:35:7b:8f:78:b8:46:b0:9e:91:05:23:99:63:ab:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jul 9 13:57:49 2025 GMT
Not After : Jul 8 14:02:49 2026 GMT
Subject: CN=4B4066518E316CBCC749B1BA1091AB1839B90407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:c5:2a:71:9f:b5:5b:8f:9e:d1:1e:ba:b0:
c8:ed:ca:d5:b6:d0:6f:a7:eb:30:df:92:85:31:3f:
40:32:4c:08:2a:36:67:72:bb:d3:73:d9:56:54:af:
d2:0f:9c:2c:2e:34:90:7e:16:b2:a1:4e:06:42:0c:
38:b5:30:34:9a:50:9a:03:e2:98:dd:2d:53:73:95:
c8:33:03:6c:68:63:e4:e1:93:0c:2d:f9:a4:cc:cb:
71:ce:2f:49:2f:01:f5:8d:f1:72:7e:c1:09:9c:ee:
82:0b:f5:68:25:70:8b:d4:a2:78:92:fe:9c:89:20:
87:ee:e3:e5:63:e5:d0:d8:2b:b7:78:9b:05:c0:15:
34:96:96:46:0e:e1:8d:5d:8a:19:bb:d2:62:1f:a7:
42:e3:b5:cf:24:9c:70:40:67:05:6b:fd:76:b0:a2:
df:67:5d:dd:8c:b0:70:da:a5:d1:ef:5d:f9:46:35:
54:47:d2:6c:d6:6c:9a:24:70:28:65:d7:36:46:7a:
5a:e9:56:41:d7:5a:e9:3f:bb:f5:2d:3b:89:6b:2f:
79:af:17:7f:0a:0a:ee:a8:13:20:e6:26:bf:54:a3:
47:2d:74:ee:12:03:c2:5c:80:fc:e9:af:4a:0f:0b:
12:e1:d5:86:eb:02:f4:2d:a6:8f:ba:18:88:8e:7d:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:66:51:8E:31:6C:BC:C7:49:B1:BA:10:91:AB:18:39:B9:04:07
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
65:de:e0:00:e2:a8:9b:bb:38:d5:3b:02:e9:71:16:c7:43:8f:
d9:ee:90:a7:fb:d6:be:4f:16:f3:4b:d2:16:cd:ff:d4:a0:9d:
3d:ce:b3:eb:a2:6e:19:52:af:5b:dc:05:09:cc:c6:5d:86:70:
6c:12:90:4d:05:76:76:49:ad:d4:bc:1f:28:ee:77:c1:a3:9a:
71:fa:de:3d:00:a3:a0:51:de:a6:f7:de:8d:51:d0:f4:21:a7:
1e:71:83:ee:d0:6a:dd:91:03:c5:02:39:32:dc:bb:3d:58:a2:
de:40:2c:07:37:4d:37:99:bf:9c:b5:15:ad:fe:9a:4b:9e:15:
d4:4b:1f:46:8e:a8:5f:14:87:e9:c1:8d:e9:73:4e:a0:de:ee:
60:70:66:ea:43:c2:d6:ce:53:95:4d:0b:17:8a:c6:33:53:bf:
93:4d:f5:8e:cc:59:42:bd:f0:12:51:c2:e5:e0:39:2f:e1:59:
5c:4a:a6:c0:7d:1f:3c:76:31:57:4b:4d:b7:61:e9:86:9d:58:
32:07:25:4a:23:cc:77:1e:b5:b4:30:77:fc:04:b8:64:fc:56:
1e:e0:09:21:36:b2:b8:4d:69:c7:df:4a:1c:c9:be:72:df:ae:
1d:e2:4e:c1:f7:d6:e5:b0:f3:91:5c:0f:3c:ed:ef:55:22:4f:
0e:e7:a8:f0
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUd0J7wM81e494uEawnpEFI5ljq6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNTA3MDkxMzU3NDlaFw0yNjA3MDgxNDAyNDlaMDMxMTAvBgNV
BAMTKDRCNDA2NjUxOEUzMTZDQkNDNzQ5QjFCQTEwOTFBQjE4MzlCOTA0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXcUqcZ+1W4+e0R66sMjtytW2
0G+n6zDfkoUxP0AyTAgqNmdyu9Nz2VZUr9IPnCwuNJB+FrKhTgZCDDi1MDSaUJoD
4pjdLVNzlcgzA2xoY+Thkwwt+aTMy3HOL0kvAfWN8XJ+wQmc7oIL9WglcIvUoniS
/pyJIIfu4+Vj5dDYK7d4mwXAFTSWlkYO4Y1dihm70mIfp0Ljtc8knHBAZwVr/Xaw
ot9nXd2MsHDapdHvXflGNVRH0mzWbJokcChl1zZGelrpVkHXWuk/u/UtO4lrL3mv
F38KCu6oEyDmJr9Uo0ctdO4SA8JcgPzpr0oPCxLh1YbrAvQtpo+6GIiOfQrJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUS0BmUY4xbLzHSbG6EJGrGDm5BAcwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM4
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABf1rUwDQYJKoZIhvcNAQELBQADggEBAGXe4ADiqJu7ONU7AulxFsdDj9nukKf7
1r5PFvNL0hbN/9SgnT3Os+uibhlSr1vcBQnMxl2GcGwSkE0FdnZJrdS8Hyjud8Gj
mnH63j0Ao6BR3qb33o1R0PQhpx5xg+7Qat2RA8UCOTLcuz1Yot5ALAc3TTeZv5y1
Fa3+mkueFdRLH0aOqF8Uh+nBjelzTqDe7mBwZupDwtbOU5VNCxeKxjNTv5NN9Y7M
WUK98BJRwuXgOS/hWVxKpsB9Hzx2MVdLTbdh6YadWDIHJUojzHcetbQwd/wEuGT8
Vh7gCSE2srhNacffShzJvnLfrh3iTsH31uWw85FcDzzt71UiTw7nqPA=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:31:55 2025 by rpki-client