Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OBB2a7c4o4aVsVV2JeSAtkNwT9+U023DeMsZggSyUv8=
Subject key identifier: 92:3C:17:67:17:52:6D:EB:E7:56:7C:4F:21:29:77:CF:6B:E7:7A:33
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 355F7B478E78D66E95A0FAD3E516B2DC784C9111
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 11:21:44 +0000
ROA not before: Wed 23 Sep 2026 11:16:44 +0000
ROA not after: Wed 22 Sep 2027 11:21:44 +0000
asID: 834
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5f:7b:47:8e:78:d6:6e:95:a0:fa:d3:e5:16:b2:dc:78:4c:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Sep 23 11:16:44 2026 GMT
Not After : Sep 22 11:21:44 2027 GMT
Subject: CN=923C176717526DEBE7567C4F212977CF6BE77A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:77:a3:24:ed:e6:14:e3:24:9c:2b:ee:57:
be:0c:e0:0f:14:d5:6e:65:47:2d:2f:10:bc:cc:c8:
f7:e1:6b:4a:65:72:76:9a:34:35:4a:8e:38:7f:4d:
7c:9a:34:40:2e:53:b6:47:1c:6b:a7:4d:20:b4:bb:
3f:cd:93:8b:59:53:4e:bd:76:22:47:63:bf:16:e5:
3d:07:c0:ce:b9:6a:83:da:00:92:cb:df:f6:aa:d8:
50:2f:9e:ae:8a:bb:5b:d2:be:23:42:ba:62:ab:7d:
06:c2:c0:cc:62:7f:aa:7e:48:d6:a5:1e:da:57:3a:
14:c0:a3:9c:1d:d0:7f:02:25:84:b8:12:ca:c2:3c:
3e:b9:60:60:e4:24:b5:3d:47:00:df:38:c4:84:d3:
76:04:2e:b1:9a:54:5e:9f:c0:6f:05:f6:b9:7d:cb:
f7:22:50:24:42:cb:69:98:e4:ba:7c:fa:48:a2:28:
3c:40:0d:5c:3f:aa:37:ad:85:48:e8:70:04:71:0d:
13:55:d2:a4:c9:81:ec:32:71:7d:c2:25:cf:fa:c2:
fa:02:9d:3e:3c:08:eb:c9:ec:50:c0:57:5d:e9:d6:
f3:0c:0f:8b:7b:b3:64:99:17:4a:1d:78:f1:02:44:
dd:96:a8:82:f2:18:c1:23:e4:30:ce:5b:99:71:92:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3C:17:67:17:52:6D:EB:E7:56:7C:4F:21:29:77:CF:6B:E7:7A:33
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:de:e1:72:89:94:83:92:53:03:79:78:36:3b:0f:4b:d0:66:
e0:e0:ae:01:17:03:69:a7:e7:63:40:36:89:fa:fa:9b:e7:59:
2f:e6:f1:75:02:a8:ed:73:19:e3:c8:87:cc:46:e8:dc:36:5a:
3b:e3:f9:41:2c:7f:85:38:5b:2d:2f:ad:da:ba:a0:50:2f:64:
6f:dc:3b:c3:da:9e:4c:8b:38:89:df:0c:43:7a:6d:0b:c4:34:
ea:39:47:93:a6:ef:0c:71:5d:f3:68:14:6a:d7:e1:b5:fa:64:
51:f4:19:2a:18:5e:2a:b4:72:67:21:17:28:86:cf:d6:71:ff:
ad:47:53:5a:02:4f:5f:91:36:35:ba:cb:b3:53:c3:d8:c4:1c:
f0:df:08:4c:49:a1:db:c2:c6:bb:65:cd:a5:b1:b2:0a:b8:44:
cf:4f:b4:c5:3c:08:03:a1:61:68:e4:82:5d:5e:8e:13:f5:ea:
85:2c:52:aa:20:1e:ff:f8:5b:ba:e0:fe:ef:ae:c7:69:8c:66:
c2:33:93:fd:2a:50:49:0d:35:95:3a:83:d4:43:c4:a9:0b:39:
3a:1c:07:84:96:b6:21:8b:cf:17:67:ba:38:31:f1:b3:e6:69:
db:09:a8:95:c7:f2:87:5b:61:14:46:65:de:5b:04:3c:97:70:
04:37:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:35:51 2026 by rpki-client