Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137352e302f32342d3234203d3e20313937313733.roa
File: 39352e3231342e3137352e302f32342d3234203d3e20313937313733.roa (raw, json)
Hash identifier: lo0JSN5aKazPTiqbMrJgwOp03+OAip9xtK0I/OTfi/M=
Subject key identifier: F5:BB:F0:08:67:6B:9B:15:BE:1F:CD:5C:AD:5B:AE:A9:10:0F:FD:0F
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 7FBE3615A322804208C5D8622E00BCEF17DBF5CD
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137352e302f32342d3234203d3e20313937313733.roa
Signing time: Thu 09 Jul 2026 10:01:52 +0000
ROA not before: Thu 09 Jul 2026 09:56:52 +0000
ROA not after: Thu 08 Jul 2027 10:01:52 +0000
asID: 197173
IP address blocks: 95.214.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:be:36:15:a3:22:80:42:08:c5:d8:62:2e:00:bc:ef:17:db:f5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jul 9 09:56:52 2026 GMT
Not After : Jul 8 10:01:52 2027 GMT
Subject: CN=F5BBF008676B9B15BE1FCD5CAD5BAEA9100FFD0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:de:0a:4c:26:51:2a:14:84:f2:7e:10:1a:
d6:78:5a:86:99:84:9b:d7:37:b0:d8:db:94:d7:e3:
4a:9a:fe:17:68:19:3f:98:36:27:2c:4f:c8:ce:08:
ac:f4:ac:6f:f1:ae:40:75:8e:80:c5:82:65:fa:ff:
23:7f:0c:af:46:59:6b:b9:fe:8e:91:98:05:09:d7:
47:90:f6:8c:7d:29:f2:a9:fe:5f:23:e3:38:96:d3:
bd:fc:03:78:fa:f6:fb:9f:b4:32:5c:97:19:54:88:
05:48:e7:16:6c:71:d5:58:c5:d8:02:d3:2b:68:86:
d7:3a:a8:14:48:ea:ff:b9:ad:f4:09:48:d4:98:13:
76:df:36:9f:ae:98:be:f7:17:1c:5a:a8:f7:ae:6f:
91:70:2f:d3:1a:ae:22:d2:2b:9d:ef:80:a8:11:b6:
34:b6:79:bf:9a:76:00:93:e4:94:08:e2:53:87:67:
53:5e:ff:00:04:66:5e:76:83:99:1d:fc:82:d5:c7:
8d:0b:12:5b:72:ad:32:bf:02:06:bc:4e:0d:6d:99:
2e:91:50:17:f3:97:10:95:1b:f9:93:a1:30:6e:74:
85:74:ce:9e:92:e4:33:e6:7e:6e:ef:85:08:a7:dd:
3d:a4:da:09:86:56:cf:63:61:6d:73:7f:3c:1b:13:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:F0:08:67:6B:9B:15:BE:1F:CD:5C:AD:5B:AE:A9:10:0F:FD:0F
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137352e302f32342d3234203d3e20313937313733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1b:75:f3:72:35:03:64:08:d2:87:5b:b9:29:58:76:d5:80:
cf:11:82:df:f1:76:65:cc:71:46:47:6c:98:7a:b4:17:95:38:
58:9e:d9:ec:e4:a0:c9:f8:84:d6:9d:ac:eb:f2:a7:70:06:20:
d1:16:21:a4:69:dd:74:46:32:c4:4f:43:6f:e8:6e:67:52:ce:
69:6d:73:27:99:eb:64:1f:75:51:2b:ff:52:8e:8c:38:e9:f2:
ae:cc:8d:ea:5c:98:13:ad:f4:8b:12:26:8d:11:48:a7:86:36:
fd:47:5b:7f:e3:80:12:05:aa:f5:00:13:63:7a:cb:bc:7d:bc:
d7:22:47:c2:ad:1c:2a:5c:49:a8:e1:06:f7:4e:47:20:96:e8:
28:05:19:a4:65:ec:4b:ad:f7:56:f9:c4:5e:66:6d:94:6a:99:
85:5e:ef:71:db:7e:8d:34:6f:1b:b5:01:22:d6:be:3d:82:67:
85:d2:44:35:13:2c:72:f3:78:f6:1e:54:54:d2:b9:1e:c7:fa:
38:6d:37:6d:5b:21:6d:19:a4:b9:e7:b6:3a:7d:4c:cc:19:47:
64:07:15:71:26:4b:c5:ac:45:bf:4e:7c:ee:e6:e6:97:17:08:
77:f2:72:b1:2b:c5:f9:a3:b9:da:20:04:4b:98:96:07:eb:5d:
64:d8:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:30:10 2026 by rpki-client