Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa
File: 39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: Ql9CRdsrs5UyctlvNvpvUGFKE5InNiTZiybhhrHHEb0=
Subject key identifier: 43:3D:10:63:F9:1F:9E:B1:2D:5C:1C:AE:46:42:06:0A:1C:75:15:F7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 61423599A9818C7816D3F6EFFD8F7E3336C38BD6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 23 Oct 2026 16:30:16 +0000
ROA not before: Fri 23 Oct 2026 16:25:16 +0000
ROA not after: Fri 22 Oct 2027 16:30:16 +0000
asID: 204170
IP address blocks: 95.214.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:42:35:99:a9:81:8c:78:16:d3:f6:ef:fd:8f:7e:33:36:c3:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:16 2026 GMT
Not After : Oct 22 16:30:16 2027 GMT
Subject: CN=433D1063F91F9EB12D5C1CAE4642060A1C7515F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:dc:75:3e:4c:ea:e9:c1:a6:07:52:d3:54:
75:f4:43:4e:77:a2:a0:3a:6f:c0:98:22:30:b4:a7:
b9:59:27:3c:cf:62:52:46:52:10:4f:53:3a:23:84:
6c:e4:40:ad:34:a8:b1:99:d5:db:57:e5:4e:18:43:
c6:47:2e:7a:3c:a0:dc:d7:e2:40:a9:5f:9c:eb:3b:
6c:ce:d8:b9:f5:27:f4:45:55:5c:54:21:b2:d5:7c:
23:55:3d:46:ef:1e:ea:92:d5:fa:5a:ca:13:01:61:
a5:1c:23:7c:53:b1:f1:55:1b:8a:7e:88:01:9e:35:
ef:68:db:d0:63:5f:1a:3b:13:2d:58:63:22:6c:eb:
3c:61:1c:9f:cc:52:c5:d4:78:78:76:ba:8d:32:46:
0c:64:f7:04:ff:f4:85:6f:9d:c5:58:17:24:59:79:
29:b8:d2:e9:e8:65:74:75:3c:4f:f0:3d:ad:73:d9:
bb:9e:a8:9a:f4:06:09:75:55:c0:0f:7c:74:a0:f6:
b8:10:23:3c:6d:07:27:26:b1:00:12:6c:8a:12:01:
0c:48:9e:05:bf:62:ce:23:85:df:73:2d:38:cf:eb:
86:5b:f3:31:55:91:f1:dc:36:f5:b7:ee:cd:27:64:
49:c2:52:8b:2e:46:f8:14:cc:7c:c0:df:e4:95:f1:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3D:10:63:F9:1F:9E:B1:2D:5C:1C:AE:46:42:06:0A:1C:75:15:F7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.219.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c2:9b:6d:87:2a:ff:a7:78:85:7b:98:6a:dc:f5:76:be:59:
1b:36:d1:86:40:00:67:1b:15:d7:fd:98:a9:fd:83:0a:88:56:
cd:16:d0:48:ef:0f:8b:44:6e:e4:b0:22:6e:70:ab:fc:dc:da:
63:8d:f5:42:97:91:a6:bd:3c:98:7f:2d:b1:35:bd:22:87:d4:
f7:2b:18:84:46:98:ed:d2:d1:4b:1b:7d:a3:07:bb:8b:fa:b4:
7a:91:c4:bf:03:eb:28:06:df:f7:b2:38:81:93:22:f1:58:15:
8a:1a:11:e4:ef:f9:62:31:af:c3:ad:7b:2d:83:f1:20:ae:5b:
15:d2:f2:a9:15:5a:47:d8:a9:7f:b0:24:39:16:33:9e:8b:09:
5e:32:82:96:a7:7c:aa:d9:cf:ec:9f:13:57:66:a4:1e:5b:ee:
77:40:04:9d:06:d4:f9:b1:78:fe:0f:a2:c9:a1:04:f8:2a:31:
58:59:b5:68:52:51:3b:72:b6:e1:d4:d7:b2:19:7b:f2:e1:45:
f1:16:e5:ce:62:2e:5f:0c:f0:ef:e0:9a:af:4b:03:f3:5c:a2:
49:98:51:f3:a8:7a:64:b9:55:15:da:5f:78:1e:93:52:9e:7b:
a1:94:dc:53:bf:e2:3d:6b:a7:cf:43:93:ff:d8:a0:4d:41:ba:
21:50:fe:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:14:58 2026 by rpki-client