Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: m7LsCsW4egvztMDoexWClEiCgPasYEgU0iCYuIdHtDE=
Subject key identifier: 02:F1:B9:F3:F1:DC:D6:7E:A5:1E:AA:E6:EC:F5:11:5F:5B:FB:DE:05
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 562669A5FC9AC54E2C18EB1D6B9BEDB8A6ACAB80
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:42 +0000
ROA not before: Fri 23 Oct 2026 16:25:42 +0000
ROA not after: Fri 22 Oct 2027 16:30:42 +0000
asID: 136787
IP address blocks: 95.214.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:26:69:a5:fc:9a:c5:4e:2c:18:eb:1d:6b:9b:ed:b8:a6:ac:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:42 2026 GMT
Not After : Oct 22 16:30:42 2027 GMT
Subject: CN=02F1B9F3F1DCD67EA51EAAE6ECF5115F5BFBDE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:2f:17:79:6d:a7:ca:f8:b1:fe:46:4a:7a:
e6:b7:47:05:e6:4d:d8:10:ea:a4:05:e3:52:b8:cb:
72:bd:21:32:aa:48:aa:96:85:20:1c:48:35:45:a3:
eb:83:ce:c0:4e:0e:a8:af:1e:ef:f4:4b:fe:b0:ac:
e5:9a:35:22:53:69:f9:16:df:a7:77:38:fe:49:60:
58:75:e1:f6:d3:a0:48:fd:c4:b2:b1:ea:6d:0c:81:
30:fc:be:35:89:3e:71:21:c5:f9:2a:4e:96:c5:54:
2d:e2:6e:07:3e:84:1c:33:bb:0c:1e:24:bb:98:8a:
17:c9:62:81:24:94:39:55:c4:f3:86:2d:83:a9:7b:
33:b2:56:68:98:c7:57:c7:f1:da:fa:35:90:83:cf:
ff:53:f6:8c:a0:fe:5a:3c:ef:77:5a:c2:52:22:f5:
6f:27:97:c1:33:f9:7d:e5:44:3c:4b:0a:d7:4e:48:
ec:d5:39:b2:f3:ef:a0:b0:57:8d:61:da:1d:f8:af:
4b:33:2c:c9:cd:8c:6c:1d:7d:b4:df:6b:23:84:d7:
0f:3b:d7:1f:74:41:f9:e7:75:c1:4c:d5:ce:df:98:
da:71:66:dd:a2:c2:6c:10:db:5c:8c:e3:a0:f1:ba:
a1:13:34:c8:1f:18:8f:20:7c:eb:a8:5f:b6:54:f5:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:B9:F3:F1:DC:D6:7E:A5:1E:AA:E6:EC:F5:11:5F:5B:FB:DE:05
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.217.0/24
Signature Algorithm: sha256WithRSAEncryption
57:37:02:2e:75:f6:57:16:52:be:5a:42:ea:e0:f5:9b:88:b5:
3a:a6:a3:50:28:ff:fe:50:1f:da:b6:95:82:ff:c4:c8:fe:ce:
18:c7:48:94:ff:c6:c9:a8:2e:91:5a:a9:81:dc:ba:32:e2:20:
d7:05:2f:2e:87:3c:03:62:12:b9:b0:a6:53:c1:b6:93:5a:54:
15:b5:5d:30:c5:24:d8:79:67:3b:03:4b:46:e2:e5:ef:19:1c:
c7:72:4f:2e:68:e8:ca:be:c0:ac:04:6e:9d:30:4c:39:d3:7f:
e1:b5:f9:86:2c:a2:57:ea:24:e2:fb:4a:ff:ec:6d:b6:bc:72:
25:f6:f1:45:c6:43:00:27:5f:1f:f1:0d:52:b6:b4:39:f5:17:
13:85:07:84:22:e6:42:a1:77:30:e7:72:a4:62:55:1d:e8:b0:
ff:a7:1e:56:40:0e:b0:c1:2b:3f:6e:d8:8f:10:bf:68:58:59:
a5:85:de:6c:49:5f:7f:d1:ec:47:76:91:5e:8c:4c:7d:1a:7a:
8c:aa:08:6a:5e:a9:b7:26:bb:ac:13:bc:b1:0d:0e:ba:ca:a6:
42:82:49:bb:a6:8c:5e:51:48:36:c3:87:29:f6:1f:87:2a:ba:
ae:be:1a:ff:6f:89:ea:cf:0b:a6:c7:c0:99:0e:e7:ed:44:3f:
a8:98:6e:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:29 2026 by rpki-client