Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e203233343730.roa
File: 39352e3231342e3138332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: EN/M4s8FY+gwA1HuxWW6BKWqWHyuj78kNp5gRwNPSyE=
Subject key identifier: 9E:FE:80:A7:0C:B6:FB:9E:80:5C:D3:BA:2C:5D:10:FA:28:B9:E7:08
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 01CE500F940950C7E51DA5C6EE2220DFF7C47030
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e203233343730.roa
Signing time: Sat 05 Sep 2026 13:07:41 +0000
ROA not before: Sat 05 Sep 2026 13:02:41 +0000
ROA not after: Sat 04 Sep 2027 13:07:41 +0000
asID: 23470
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ce:50:0f:94:09:50:c7:e5:1d:a5:c6:ee:22:20:df:f7:c4:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Sep 5 13:02:41 2026 GMT
Not After : Sep 4 13:07:41 2027 GMT
Subject: CN=9EFE80A70CB6FB9E805CD3BA2C5D10FA28B9E708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:d9:d5:97:79:f8:72:89:3b:f5:bb:fa:ae:
3b:84:e9:90:b3:37:62:12:80:bd:55:9f:db:50:a3:
87:b1:6a:93:9e:55:da:09:4b:76:9a:5d:7a:e4:57:
8d:dc:81:6e:f4:91:74:6a:18:6d:64:b5:91:59:dd:
15:76:e4:86:7a:28:d0:97:c8:e2:2b:24:1f:4e:a3:
7f:c9:d9:08:83:e6:87:a6:aa:92:30:3c:b9:55:c8:
71:b1:8b:62:68:fe:ae:b2:42:5c:51:d2:47:88:2c:
07:2a:0d:51:3e:67:e1:0e:8b:e1:ab:58:83:23:6b:
ed:64:ba:91:5c:73:1e:89:7c:d5:e8:a8:6a:0d:8d:
05:bf:58:8a:d2:3b:a6:82:59:a2:58:9e:9c:91:3c:
22:5b:bd:df:65:5a:8d:54:f2:b5:0f:d5:d9:6f:c7:
43:fe:ef:06:d0:e6:ae:5c:6e:31:7a:3a:3b:6e:7d:
e5:25:ba:7b:3c:66:10:ab:87:a6:9d:6c:2e:ad:6e:
24:d9:67:98:e9:f8:33:d7:53:fe:b2:ba:b9:ef:ca:
6b:33:de:46:bb:1a:c6:b1:35:bb:05:11:03:51:a7:
ce:8d:42:63:da:24:93:dd:39:16:ae:ab:53:79:c0:
62:28:db:be:e0:a8:3c:7e:8c:08:ba:4e:7e:19:9f:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:80:A7:0C:B6:FB:9E:80:5C:D3:BA:2C:5D:10:FA:28:B9:E7:08
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a6:33:29:f1:45:0f:59:95:a8:c8:da:71:b1:73:fd:5f:56:
f0:69:77:c9:ea:9c:6d:d3:ce:4c:62:a3:2a:1d:6c:53:23:57:
8f:9e:08:15:be:e8:90:35:f1:8d:3a:d5:b1:ab:e4:af:42:8c:
6d:f8:07:f8:ef:aa:80:a5:df:fb:a2:e6:f1:f3:d9:c8:38:35:
81:63:1f:8c:d1:5d:37:7d:72:84:f0:f4:23:21:a1:76:c0:ff:
35:2b:fd:33:5b:93:db:21:21:8f:99:20:42:77:d4:fd:f7:4d:
57:07:a7:02:1d:59:bf:a7:c0:4d:6c:4a:fe:c9:65:48:e4:81:
f4:54:c1:42:33:c1:bc:48:15:d8:c4:a4:5d:a2:0b:08:2f:5d:
ea:ea:36:a0:4f:bd:5a:93:d8:83:b1:7a:58:68:6e:e9:fc:11:
29:7f:a5:c0:e9:65:81:b9:3c:1e:e7:65:aa:28:fa:0d:9b:40:
38:6d:19:7e:85:1c:81:c2:ba:e4:5c:9e:ae:c8:c9:2c:f0:bf:
d5:45:04:46:e2:51:20:a1:c8:57:51:50:9a:53:b3:2c:91:d9:
80:f5:6a:de:20:6c:47:ac:8b:b0:b8:14:0f:61:af:e0:85:61:
70:cd:2c:d1:90:de:30:d9:07:d6:14:74:16:e3:6f:7a:03:45:
55:0d:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:45:37 2026 by rpki-client