Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa
File: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: C+IiqKHGmzZ58JHjaNtEJdYdKIdFEFVABeMiNZrxF6o=
Subject key identifier: 28:FB:77:29:DE:90:C0:69:68:1B:06:ED:35:5A:3F:B5:6A:8C:C7:06
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 2F8874164AEF9774C578881CF635FBC644964B27
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa
Signing time: Wed 07 Oct 2026 15:49:36 +0000
ROA not before: Wed 07 Oct 2026 15:44:36 +0000
ROA not after: Wed 06 Oct 2027 15:49:36 +0000
asID: 212609
IP address blocks: 95.214.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:88:74:16:4a:ef:97:74:c5:78:88:1c:f6:35:fb:c6:44:96:4b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Oct 7 15:44:36 2026 GMT
Not After : Oct 6 15:49:36 2027 GMT
Subject: CN=28FB7729DE90C069681B06ED355A3FB56A8CC706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:70:8d:2f:50:6b:0a:3a:c2:2f:89:d3:71:
d0:8c:54:86:65:f9:cd:9f:1b:79:2f:1e:73:09:af:
e6:55:1a:99:fb:d8:9e:af:42:36:3c:d8:d9:4a:a7:
f0:d8:e1:2f:7d:7f:aa:8d:4e:d5:c5:34:96:65:6f:
51:6e:df:24:a9:cf:2b:12:04:3e:dd:3e:5a:3c:bc:
74:18:28:61:f2:d9:e4:5f:bd:57:ce:30:54:f8:c9:
31:2e:e8:13:36:62:84:6e:5f:14:0e:94:17:8a:d1:
90:1a:88:c2:60:eb:70:ec:e1:74:7a:1d:9d:5f:93:
d4:12:ea:e6:d3:ac:9d:12:32:38:f5:bc:e7:00:32:
c4:cd:72:48:cf:68:87:d3:b7:5f:88:f1:1c:e9:6c:
8e:f8:72:56:46:26:2e:99:4e:b5:a9:01:12:40:29:
30:5c:50:80:fa:0f:ea:38:f6:df:2c:db:ad:f1:f7:
7d:8c:1b:d3:16:d1:23:9b:50:3d:9c:09:91:25:28:
2e:9a:7c:27:9d:5f:60:e8:5a:87:5c:ec:36:9e:58:
74:bb:48:ef:ec:06:84:59:87:a8:65:4a:d2:c7:c6:
d3:77:e7:85:cd:dd:2f:f6:b2:c3:85:4d:30:f6:8c:
73:1b:64:06:2f:88:13:81:9a:b0:ac:1f:07:5a:62:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:77:29:DE:90:C0:69:68:1B:06:ED:35:5A:3F:B5:6A:8C:C7:06
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.182.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a2:b2:62:f5:29:d5:f6:41:25:da:68:62:2c:ba:3a:b5:14:
02:42:af:94:3e:99:01:69:78:4e:32:0f:4f:76:c0:c2:d1:6a:
31:e6:fe:8b:2c:94:69:20:5e:cc:92:7e:cd:10:de:e7:9c:a8:
45:17:dc:0b:4e:0d:0d:7a:c6:20:c1:b8:48:f1:b5:ad:bc:d7:
0f:51:df:28:c3:ce:9a:d2:a9:78:6c:49:88:cc:30:25:6d:80:
18:eb:a3:e7:13:46:74:4c:45:6b:3b:a6:da:15:21:d7:ca:9f:
1a:6a:f7:c6:c4:2e:e2:96:dc:11:44:d8:eb:91:f7:25:74:23:
7e:f6:a3:b7:f9:8a:6b:27:f7:28:e4:d0:2c:29:cf:2d:0f:2e:
ba:88:ec:df:66:50:c7:63:19:a8:35:88:ae:3b:ce:cd:9e:3a:
59:95:59:5d:89:4e:0b:62:44:16:53:23:d2:18:06:6b:ea:10:
76:4c:94:d0:4e:18:9d:e1:82:30:45:55:e6:da:37:e9:06:d4:
d3:2f:16:f4:93:e2:a6:8b:4f:b2:bd:38:d6:72:6c:7d:39:9f:
a3:63:12:55:15:de:d0:0e:3a:35:35:6a:71:4c:ff:ed:31:3e:
70:ae:05:99:89:eb:b7:a9:c7:35:45:9f:cb:22:38:89:96:e1:
ba:b1:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:56:37 2026 by rpki-client