Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20313430363831.roa
File: 39352e3231342e33382e302f32342d3234203d3e20313430363831.roa (raw, json)
Hash identifier: ZEvhryksFoFh7URAoemuvry6LTM/fVCpBYf2ezOo6ao=
Subject key identifier: 18:78:80:DB:10:26:8B:8E:C2:3C:E2:5C:C6:90:56:CF:14:EE:EB:C8
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 238A586D3B2B52CF0D1B1E07224CC0EB13E5C2AA
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20313430363831.roa
Signing time: Tue 08 Sep 2026 08:59:11 +0000
ROA not before: Tue 08 Sep 2026 08:54:11 +0000
ROA not after: Tue 07 Sep 2027 08:59:11 +0000
asID: 140681
IP address blocks: 95.214.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:8a:58:6d:3b:2b:52:cf:0d:1b:1e:07:22:4c:c0:eb:13:e5:c2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 8 08:54:11 2026 GMT
Not After : Sep 7 08:59:11 2027 GMT
Subject: CN=187880DB10268B8EC23CE25CC69056CF14EEEBC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:16:65:9b:bd:7c:75:26:5d:f6:27:58:8a:
07:5c:c2:96:ab:e1:0e:bf:54:a6:bb:12:03:eb:bf:
41:00:bb:93:ab:4a:35:43:0b:77:11:b6:d8:e6:e8:
d0:cd:27:ad:3e:00:3c:6d:46:a6:87:39:2a:e2:fd:
f9:c9:2a:ba:8e:30:bf:d2:f8:f9:3b:b2:74:1c:7c:
1a:61:69:c1:95:4d:6b:ab:e7:17:fa:79:6a:38:0f:
94:d7:9b:e5:b4:24:26:a2:e2:43:68:03:74:2a:d5:
aa:a2:0e:58:f7:f8:e2:c4:71:51:aa:51:2c:67:63:
ad:29:01:10:59:31:de:21:f6:c0:36:e0:c2:5c:83:
23:2f:98:1e:8b:f3:1f:ca:b0:31:75:1c:34:56:f6:
4b:40:03:ef:39:74:64:9d:9e:70:3c:16:c4:00:07:
dc:f2:a7:6f:10:46:4e:ed:08:d6:00:5e:d8:25:18:
4e:0f:bf:f6:23:49:6b:bb:26:86:0f:56:35:fe:0f:
eb:63:9f:9a:3c:29:f4:98:ce:5c:df:d9:fb:28:9f:
dc:dc:68:01:76:56:0c:94:34:d6:29:d4:a1:cc:63:
be:be:d6:7c:70:72:55:88:66:f5:3b:24:25:76:dd:
c0:9d:f7:ec:9b:fc:6c:4f:c4:df:30:d7:d2:84:16:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:80:DB:10:26:8B:8E:C2:3C:E2:5C:C6:90:56:CF:14:EE:EB:C8
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/39352e3231342e33382e302f32342d3234203d3e20313430363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.38.0/24
Signature Algorithm: sha256WithRSAEncryption
db:e1:77:03:73:62:74:1a:ce:07:28:ca:d5:ac:6b:c7:6d:94:
dc:2a:c9:bb:e2:04:22:70:31:6d:f8:3b:26:73:93:7e:be:b6:
07:41:68:7d:28:68:f9:d0:d1:4a:d0:3e:c5:be:dd:4c:06:c0:
2a:3f:c9:43:15:50:e2:91:33:88:20:2e:50:e9:12:25:f5:f4:
15:a3:46:00:bb:93:54:7e:81:b8:ba:e0:07:7d:6d:d0:52:c5:
7c:95:0c:4e:4e:ff:79:c7:0b:6c:1c:19:88:fe:6b:74:72:6a:
30:f3:c6:b6:13:4f:9e:2e:90:d6:e3:3a:7c:25:58:bd:43:58:
b9:10:a0:69:e6:b7:d5:2b:52:b8:f6:cb:13:bf:02:fb:4c:9f:
4d:a2:6a:6b:c6:47:ac:c1:a1:a8:e2:74:ab:63:62:cc:2e:b8:
b9:72:bd:b5:0c:d0:96:ac:2d:c2:f5:3b:17:c6:c2:bf:69:c1:
92:e8:29:55:ae:03:02:2b:3f:e9:12:2c:e7:69:2c:92:1c:ff:
04:68:97:f0:80:4e:aa:bb:8d:d8:0c:9b:2b:ce:8a:87:c2:d4:
52:14:d4:69:e9:6a:77:c2:1a:8d:b0:a1:22:c4:c5:df:a3:d7:
6e:81:be:c2:46:6f:f3:65:c9:b6:82:3a:9f:48:f0:c2:03:0c:
1d:bd:eb:7e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUI4pYbTsrUs8NGx4HIkzA6xPlwqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0
MWFjZWJiODAeFw0yNjA5MDgwODU0MTFaFw0yNzA5MDcwODU5MTFaMDMxMTAvBgNV
BAMTKDE4Nzg4MERCMTAyNjhCOEVDMjNDRTI1Q0M2OTA1NkNGMTRFRUVCQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb3BZlm718dSZd9idYigdcwpar
4Q6/VKa7EgPrv0EAu5OrSjVDC3cRttjm6NDNJ60+ADxtRqaHOSri/fnJKrqOML/S
+Pk7snQcfBphacGVTWur5xf6eWo4D5TXm+W0JCai4kNoA3Qq1aqiDlj3+OLEcVGq
USxnY60pARBZMd4h9sA24MJcgyMvmB6L8x/KsDF1HDRW9ktAA+85dGSdnnA8FsQA
B9zyp28QRk7tCNYAXtglGE4Pv/YjSWu7JoYPVjX+D+tjn5o8KfSYzlzf2fson9zc
aAF2VgyUNNYp1KHMY76+1nxwclWIZvU7JCV23cCd9+yb/GxPxN8w19KEFs9TAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUGHiA2xAmi47CPOJcxpBWzxTu68gwHwYDVR0j
BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz
YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH
czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt
ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzkzNTJlMzIzMTM0MmUzMzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMwMzYzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
X9YmMA0GCSqGSIb3DQEBCwUAA4IBAQDb4XcDc2J0Gs4HKMrVrGvHbZTcKsm74gQi
cDFt+Dsmc5N+vrYHQWh9KGj50NFK0D7Fvt1MBsAqP8lDFVDikTOIIC5Q6RIl9fQV
o0YAu5NUfoG4uuAHfW3QUsV8lQxOTv95xwtsHBmI/mt0cmow88a2E0+eLpDW4zp8
JVi9Q1i5EKBp5rfVK1K49ssTvwL7TJ9NomprxkeswaGo4nSrY2LMLri5cr21DNCW
rC3C9TsXxsK/acGS6ClVrgMCKz/pEiznaSySHP8EaJfwgE6qu43YDJsrzoqHwtRS
FNRp6Wp3whqNsKEixMXfo9dugb7CRm/zZcm2gjqfSPDCAwwdvet+
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:42 2026 by rpki-client