Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: l3hAHwRYWqIwrMXccu+sRie4mG1lsmguHZRte2Fqwac=
Subject key identifier: 1B:10:AB:A0:4D:B5:A8:A1:B2:D1:77:B6:A3:1B:31:0E:CE:67:5D:5F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6425A13EED6128F29FBB153BF3BC95D2EAD1F276
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:39 +0000
ROA not before: Fri 23 Oct 2026 16:25:39 +0000
ROA not after: Fri 22 Oct 2027 16:30:39 +0000
asID: 136787
IP address blocks: 95.214.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:25:a1:3e:ed:61:28:f2:9f:bb:15:3b:f3:bc:95:d2:ea:d1:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:39 2026 GMT
Not After : Oct 22 16:30:39 2027 GMT
Subject: CN=1B10ABA04DB5A8A1B2D177B6A31B310ECE675D5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:76:f5:4e:3e:ef:84:36:31:17:ae:63:74:
a7:8e:6c:88:e1:2b:25:71:ce:d2:df:97:ae:d7:40:
0b:3e:41:ec:7e:ec:eb:9d:e6:29:78:8d:8a:ee:e4:
8b:29:d3:0c:8b:f8:82:90:a7:d6:db:1c:2b:fd:79:
db:85:98:03:0e:bc:4a:12:1e:6e:ed:b8:c5:8a:d8:
74:85:f0:dc:f6:00:51:ce:29:b6:c9:fa:f0:ac:aa:
b5:16:93:80:49:b4:b4:b7:ab:f0:3a:71:40:9a:aa:
16:78:24:a8:9b:7c:4a:43:0d:84:c2:12:9c:24:3e:
88:d0:dc:e0:0c:28:76:22:94:56:0c:c7:40:e6:e8:
ea:99:d6:b1:c5:a1:1c:cf:78:2a:e1:2d:46:e8:77:
8e:ff:2f:8a:17:2a:30:f8:17:8d:30:43:1e:b3:a1:
b0:a9:a8:21:3d:5c:58:a1:c6:a6:ff:7e:7b:56:bd:
c8:67:05:87:47:e6:a8:f3:e5:fd:35:e5:57:71:52:
62:e2:a3:f1:b5:10:a4:2f:8b:56:7b:4d:35:e4:df:
7e:f5:4f:05:66:fc:6e:f5:3d:28:30:25:13:61:e2:
04:ed:ab:d9:7c:ca:07:32:66:2e:5d:d4:79:71:15:
44:d2:01:25:86:a0:4a:fb:8b:56:32:4c:21:8c:ed:
53:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:10:AB:A0:4D:B5:A8:A1:B2:D1:77:B6:A3:1B:31:0E:CE:67:5D:5F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.218.0/24
Signature Algorithm: sha256WithRSAEncryption
da:7b:76:15:a0:d4:50:79:0e:b7:c9:29:ad:64:d8:7d:8e:b4:
bd:f7:a8:49:72:51:3c:c3:05:d4:1b:25:23:30:f1:70:0a:7e:
b6:f7:fe:40:22:96:7c:89:16:ac:99:5e:ae:77:51:4f:2a:c1:
29:ec:2c:bf:7b:eb:73:7f:9a:1e:39:20:8d:a0:e8:ab:52:0b:
9c:cf:45:40:6e:5c:36:6c:ea:41:d5:6b:11:9a:de:42:8d:3a:
ea:20:ca:a6:7e:00:05:17:49:d2:15:df:a8:87:20:aa:59:4c:
20:1b:15:2c:e3:fe:ef:b9:de:1a:bb:37:6c:13:63:57:c6:04:
3c:87:e3:7b:ed:98:23:bc:00:b3:f7:be:41:f7:92:2d:96:c8:
8e:67:b1:89:51:2a:80:2e:9d:5b:47:47:7d:bb:d2:21:e9:51:
04:db:74:c9:d1:ff:6e:0c:63:ea:a0:c8:d5:72:e7:03:41:42:
58:94:1a:b1:08:8e:96:b0:28:6c:47:ba:ac:57:a5:d2:a8:9b:
82:d0:1c:cf:f8:00:08:10:79:41:74:9b:7f:62:76:85:eb:4a:
ae:07:4e:ab:54:99:53:7f:9f:b0:ee:77:45:b9:f9:63:ab:ac:
3a:e1:ce:6b:39:19:8d:e7:22:c7:82:c8:15:12:f8:8a:cd:a9:
93:ce:c8:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:45:44 2026 by rpki-client