Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137352e302f32342d3234203d3e20313532363036.roa
File: 39352e3231342e3137352e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier: 944eMC9c9fMURHXArqdHMfoZU2uyeWY3TE4sq0d0yoU=
Subject key identifier: 7F:81:AF:32:62:AC:BD:3A:27:E0:74:8A:DB:32:C2:A0:0B:CE:66:0B
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 1C02F716C38E105CB1E4C605E35DD802A7781B1D
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137352e302f32342d3234203d3e20313532363036.roa
Signing time: Wed 21 Oct 2026 13:41:41 +0000
ROA not before: Wed 21 Oct 2026 13:36:41 +0000
ROA not after: Wed 20 Oct 2027 13:41:41 +0000
asID: 152606
IP address blocks: 95.214.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:02:f7:16:c3:8e:10:5c:b1:e4:c6:05:e3:5d:d8:02:a7:78:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Oct 21 13:36:41 2026 GMT
Not After : Oct 20 13:41:41 2027 GMT
Subject: CN=7F81AF3262ACBD3A27E0748ADB32C2A00BCE660B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:4a:8a:2d:f2:3e:15:8b:e6:7e:51:2d:18:
3a:d8:7c:80:3d:24:3c:d3:45:31:4a:a2:d3:bf:b2:
b3:55:ea:a7:ce:31:33:c9:89:83:90:5d:d7:ca:fb:
64:dc:9e:1e:34:53:4d:44:07:b6:93:fd:cd:ad:4b:
29:ff:8e:c3:9f:a1:bf:1b:db:7d:57:4e:21:c1:88:
73:20:42:e1:7a:de:f3:94:1a:21:ac:b7:66:02:e8:
4a:42:b5:07:ec:17:8f:20:85:ef:fe:5b:07:1d:2c:
47:2d:87:cc:83:3f:08:a6:12:4e:bc:bd:30:90:d0:
76:68:11:9b:bd:e6:14:ae:0b:44:03:ef:cb:fb:2d:
b1:09:14:23:c9:38:f9:ad:ff:4e:12:ae:06:a5:72:
3c:b8:69:5f:b8:12:9f:26:ae:2a:01:11:02:28:a1:
92:c1:69:78:2c:85:b5:f1:90:e7:36:c0:be:0c:5e:
53:d2:82:d1:a1:2f:37:32:1d:7f:79:8c:d2:e4:f1:
28:d5:3b:2e:14:f9:ae:ca:03:84:9d:9f:e7:6c:20:
15:d5:d3:f9:c9:3a:aa:71:c3:c8:cb:3d:20:3b:62:
69:27:f3:81:66:3a:b5:8e:4a:71:17:e2:65:0e:45:
57:f7:cd:8d:d9:07:ab:27:02:a5:b9:7b:a1:94:28:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:81:AF:32:62:AC:BD:3A:27:E0:74:8A:DB:32:C2:A0:0B:CE:66:0B
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137352e302f32342d3234203d3e20313532363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.175.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a4:3a:03:12:2a:93:ff:c2:3c:db:cd:82:b1:b7:2c:db:be:
e4:84:ed:f0:9b:81:b5:22:a2:9f:97:c9:bc:d1:4d:88:c0:8b:
57:7b:51:42:9a:bb:43:48:99:6f:b7:8b:81:bf:cc:b7:a1:ff:
17:c3:13:f2:dc:b2:ba:4a:40:ad:00:e5:9c:db:83:d4:71:5a:
25:2c:32:0a:74:73:c8:97:8c:6a:89:3c:e7:4c:d7:24:f4:2a:
1f:32:c4:d1:41:b9:f8:f6:48:08:52:c6:74:aa:c8:80:0c:30:
94:9f:47:b0:26:55:1e:41:32:73:0e:5c:87:b8:09:65:b4:c6:
c4:c9:e3:5b:ff:d7:80:1b:b6:41:bf:0f:74:28:8c:bc:07:67:
ad:a8:a2:06:cf:2f:c5:1d:7d:d0:b3:e9:9c:bf:9c:a8:68:c3:
b3:ed:5f:ff:67:07:4b:58:f8:f8:00:9f:06:9f:75:3b:cb:4e:
b0:fb:fb:48:8d:c5:7d:fe:0e:6b:58:bb:9a:74:69:26:d6:bb:
34:44:b3:86:f1:27:37:f7:68:8d:93:a1:ef:6c:86:c4:df:33:
32:97:3b:1b:62:d6:7c:ce:d2:eb:57:f4:ca:87:1b:7a:67:61:
e9:11:e8:40:18:b3:4b:7e:e7:d3:f0:1e:8f:e6:06:2c:50:81:
f4:4b:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:23 2026 by rpki-client