Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 38E+g2E8TjLcDFYU8/8RtTE4CXbzCtz7HK200aFMT9w=
Subject key identifier: 28:34:EC:A3:FC:02:EA:F1:2C:28:BA:4C:9C:35:29:F4:E9:D9:51:3C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 26326F51738975ADB681323463D8A33773FCC66F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:34 +0000
ROA not before: Fri 23 Oct 2026 16:25:34 +0000
ROA not after: Fri 22 Oct 2027 16:30:34 +0000
asID: 136787
IP address blocks: 95.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:32:6f:51:73:89:75:ad:b6:81:32:34:63:d8:a3:37:73:fc:c6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:34 2026 GMT
Not After : Oct 22 16:30:34 2027 GMT
Subject: CN=2834ECA3FC02EAF12C28BA4C9C3529F4E9D9513C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:06:dd:af:86:b2:d7:ce:19:d5:b2:08:23:
d1:07:e4:f2:88:68:ca:a3:a2:77:00:43:01:63:fc:
e1:f6:23:b2:e5:18:42:81:d6:d7:f0:d9:cf:5f:15:
e3:1d:87:8c:fc:b5:c6:c5:c1:40:93:26:7c:1f:b5:
c6:71:97:03:31:c9:d1:c8:37:00:c3:99:30:a0:e8:
9f:8c:fd:1f:e8:54:be:ff:dd:1a:ba:9f:70:3f:a7:
72:8f:7f:72:fc:8c:58:be:76:61:7d:b0:28:0d:26:
37:79:e5:c6:0e:11:e2:c6:cf:be:0e:1a:b8:cc:3c:
1e:fd:5b:b9:08:ba:57:20:cb:c8:3c:8a:f2:49:75:
d2:a3:f6:6e:16:be:be:bb:09:36:b0:ab:b3:30:ea:
26:2d:4d:83:50:6d:c5:21:b0:f1:01:70:6c:08:94:
70:37:7c:9c:22:f6:40:bd:ea:06:6d:62:b2:6a:17:
a8:e0:d4:8a:90:c3:f9:19:1b:a8:e2:cd:ef:12:90:
8d:6c:06:5e:5d:a0:c6:d9:cc:26:89:c7:9c:a0:2e:
36:fe:d0:ac:70:65:20:5c:66:5f:5c:e7:c4:47:18:
d8:55:91:9a:0c:d8:d3:d4:df:db:7a:61:68:4d:bd:
a9:b8:79:cb:61:48:6a:75:eb:e6:90:ce:9a:34:50:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:EC:A3:FC:02:EA:F1:2C:28:BA:4C:9C:35:29:F4:E9:D9:51:3C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a6:06:ba:f6:94:ea:f7:41:19:2f:d1:d2:9e:6e:96:31:9e:
2e:5d:b8:ff:fb:3e:d1:ac:e7:75:8e:48:65:37:c6:26:2c:e9:
da:d8:ec:e6:cb:03:fd:e7:1b:5f:ac:4b:0f:26:e1:05:fc:7e:
de:06:df:73:cf:bd:5a:10:38:69:72:38:85:ef:17:38:2b:ce:
66:46:da:d7:46:ea:28:17:87:ac:47:34:fb:8a:5a:50:ce:b4:
1f:68:3a:2a:f1:b0:7e:ca:dc:82:ad:c3:6a:57:1f:dd:ff:72:
6f:98:09:a3:0b:58:58:ae:bf:5a:31:a7:44:bd:d4:24:d5:c8:
b5:d4:4c:41:c3:60:1f:12:91:23:1e:f2:60:e6:77:ea:6c:9d:
66:55:2e:40:68:20:52:71:86:76:ae:ef:6f:05:3f:30:a9:0f:
64:87:a2:cf:f9:ff:26:2d:16:35:f2:d2:0f:7b:43:31:2e:53:
ee:f9:1a:67:1a:3a:fa:10:d4:cb:e2:e6:4e:4c:05:0c:31:bb:
76:da:3b:57:bd:47:e4:1b:92:11:f9:89:08:36:2c:bf:8a:bc:
92:ad:e6:85:1c:44:f9:81:d9:e4:6c:79:4d:1c:48:1b:9c:6e:
0f:a1:ac:80:de:bc:5f:8c:56:93:b3:2a:55:32:46:11:12:9e:
c8:22:50:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:11 2026 by rpki-client