Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20323139323137.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20323139323137.roa (raw, json)
Hash identifier: B1cfH5bq4sDER5wzIhs2gwIoY/0gYv6+GzGmz8llUso=
Subject key identifier: 07:8D:D1:AE:0F:BB:42:E2:7F:65:1F:1D:42:55:DA:E4:A7:D8:94:FB
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 1224B7D04E73A22C4BE0DB160D33A05BCD86DBB7
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20323139323137.roa
Signing time: Wed 05 Aug 2026 05:45:04 +0000
ROA not before: Wed 05 Aug 2026 05:40:04 +0000
ROA not after: Wed 04 Aug 2027 05:45:04 +0000
asID: 219217
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:24:b7:d0:4e:73:a2:2c:4b:e0:db:16:0d:33:a0:5b:cd:86:db:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Aug 5 05:40:04 2026 GMT
Not After : Aug 4 05:45:04 2027 GMT
Subject: CN=078DD1AE0FBB42E27F651F1D4255DAE4A7D894FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f2:78:08:b4:c0:70:ec:f7:a2:93:be:59:95:
87:2d:27:d7:a1:83:32:53:dd:03:38:e4:86:26:12:
c5:e8:7d:43:b2:25:48:d6:3f:0c:7b:53:56:4b:b6:
04:18:cd:3f:fe:37:50:2c:65:0a:01:d2:a8:ea:41:
14:35:59:be:fe:7f:bf:96:1f:15:1e:95:d9:f3:4a:
85:35:2c:b6:a5:b8:c2:4c:62:62:51:ce:5a:29:8d:
a1:ae:fe:2e:1e:e9:18:67:79:0f:7c:ca:16:7a:0a:
a2:e6:80:86:c6:f6:e8:b8:2d:dc:56:dc:d3:c8:b1:
96:2a:43:71:60:85:20:d6:b3:32:eb:67:9c:d3:b7:
15:67:f9:66:67:88:7d:72:c9:57:b2:29:e5:2b:2c:
cf:fa:a9:24:a9:fa:81:92:2a:c9:57:f2:14:23:2c:
58:30:00:c1:cd:16:65:11:cb:86:9e:62:c2:4e:ab:
5d:dd:31:d3:3f:df:59:78:7b:e8:f4:18:57:d2:8d:
94:1a:da:e4:b2:61:38:92:be:6f:0f:90:62:e3:2a:
9c:97:61:0a:62:d5:9e:88:a5:16:46:fd:a9:4c:a0:
98:99:94:01:50:d2:9d:62:52:6c:3e:5e:05:07:03:
e0:82:6c:1a:bf:dd:ce:5d:1a:3b:07:5d:5d:10:b5:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:D1:AE:0F:BB:42:E2:7F:65:1F:1D:42:55:DA:E4:A7:D8:94:FB
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20323139323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ec:f5:cb:61:17:c3:81:5c:61:55:24:07:70:d1:08:e2:c7:
2a:ac:5f:af:89:cb:09:30:04:74:2d:70:f4:bb:51:89:d4:73:
d0:e8:ab:3a:f6:3b:39:31:43:cd:05:30:1e:93:ce:dd:bf:9b:
fb:6d:a1:ef:6c:3d:af:7c:a0:65:08:26:2f:a1:8e:13:3b:70:
d8:d9:8b:b9:6d:f2:0e:99:28:30:e4:3d:2f:39:ad:e3:56:5e:
b9:43:cd:de:f6:e6:cf:0e:de:04:c7:f6:68:da:94:73:1e:31:
19:16:a8:90:df:c8:a8:c0:3d:a5:e5:12:f3:b9:dc:4b:99:a8:
e2:27:cb:c4:44:c1:2d:56:03:5d:9b:30:7d:51:45:d0:e1:8d:
00:1c:08:8e:06:bc:7f:26:ef:c4:f1:86:c7:94:d0:9f:df:09:
52:cb:13:a0:70:c5:d4:b0:bb:b8:c4:3b:17:35:65:81:73:7b:
54:a0:74:71:26:be:f6:f1:18:e7:6f:a8:1f:09:10:b8:94:c7:
8f:1b:5e:1a:e2:7d:d2:16:1d:ce:05:24:bb:e6:fc:9b:28:80:
bf:2a:54:34:d1:c0:93:35:38:80:0a:87:9c:c8:86:27:8c:3c:
7e:e9:5d:d1:d5:5f:54:94:c0:59:6a:b0:a5:92:b7:ad:18:c7:
92:ab:e2:bc
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEiS30E5zoixL4NsWDTOgW82G27cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjA4MDUwNTQwMDRaFw0yNzA4MDQwNTQ1MDRaMDMxMTAvBgNV
BAMTKDA3OEREMUFFMEZCQjQyRTI3RjY1MUYxRDQyNTVEQUU0QTdEODk0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE8ngItMBw7Peik75ZlYctJ9eh
gzJT3QM45IYmEsXofUOyJUjWPwx7U1ZLtgQYzT/+N1AsZQoB0qjqQRQ1Wb7+f7+W
HxUeldnzSoU1LLaluMJMYmJRzlopjaGu/i4e6RhneQ98yhZ6CqLmgIbG9ui4LdxW
3NPIsZYqQ3FghSDWszLrZ5zTtxVn+WZniH1yyVeyKeUrLM/6qSSp+oGSKslX8hQj
LFgwAMHNFmURy4aeYsJOq13dMdM/31l4e+j0GFfSjZQa2uSyYTiSvm8PkGLjKpyX
YQpi1Z6IpRZG/alMoJiZlAFQ0p1iUmw+XgUHA+CCbBq/3c5dGjsHXV0QtV4DAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUB43Rrg+7QuJ/ZR8dQlXa5KfYlPswHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzkzMjMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABf1rcwDQYJKoZIhvcNAQELBQADggEBAKTs9cthF8OBXGFVJAdw0QjixyqsX6+J
ywkwBHQtcPS7UYnUc9Doqzr2OzkxQ80FMB6Tzt2/m/ttoe9sPa98oGUIJi+hjhM7
cNjZi7lt8g6ZKDDkPS85reNWXrlDzd725s8O3gTH9mjalHMeMRkWqJDfyKjAPaXl
EvO53EuZqOIny8REwS1WA12bMH1RRdDhjQAcCI4GvH8m78TxhseU0J/fCVLLE6Bw
xdSwu7jEOxc1ZYFze1SgdHEmvvbxGOdvqB8JELiUx48bXhrifdIWHc4FJLvm/Jso
gL8qVDTRwJM1OIAKh5zIhieMPH7pXdHVX1SUwFlqsKWSt60Yx5Kr4rw=
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:44:05 2026 by rpki-client