Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa
File: 39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: hlOWlwYDh27EwXxqncP4qruI2Plo8gnGCk/gZpUDCgY=
Subject key identifier: A2:95:F8:0D:27:A6:55:3F:50:26:0A:EB:E8:30:DA:8A:44:13:57:DA
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 2907B4201FC4DD78288A1F8B14122F1A64B83B68
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa
Signing time: Tue 30 Sep 2025 10:01:03 +0000
ROA not before: Tue 30 Sep 2025 09:56:03 +0000
ROA not after: Tue 29 Sep 2026 10:01:03 +0000
asID: 205886
IP address blocks: 95.214.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:07:b4:20:1f:c4:dd:78:28:8a:1f:8b:14:12:2f:1a:64:b8:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Sep 30 09:56:03 2025 GMT
Not After : Sep 29 10:01:03 2026 GMT
Subject: CN=A295F80D27A6553F50260AEBE830DA8A441357DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:2d:fe:09:fe:00:ac:de:71:73:e1:f8:b5:
30:72:5a:05:21:1d:8e:f9:da:88:e6:aa:b1:27:f3:
6a:25:a5:71:54:0b:75:04:62:f8:62:e8:69:99:cd:
fb:fa:fa:7c:cd:6f:65:2d:cc:48:d9:c2:94:05:3e:
d3:9f:09:9f:0a:3e:08:3d:28:d7:f5:a3:ec:5a:1a:
fe:03:ff:92:89:d6:b7:46:64:88:83:d5:8d:f2:63:
63:54:f4:11:33:a1:03:56:67:97:c8:66:b2:07:49:
b2:52:4c:84:84:29:7f:e5:6a:74:e9:ed:5f:32:df:
37:36:aa:11:55:0f:92:61:49:3b:bb:ad:6a:14:d9:
52:05:19:d5:64:c1:ac:b8:f5:86:91:34:f1:f9:5c:
82:9e:ef:82:39:be:67:cc:f4:d4:55:ff:8e:89:85:
8d:f2:2f:49:69:c6:be:9c:86:68:8a:a9:e2:78:1f:
b8:2d:ae:db:25:86:e6:e9:4e:d3:3e:26:70:b2:dc:
2b:57:b4:5a:d4:c8:46:0d:f8:c8:e9:4e:70:a2:47:
64:f5:10:74:87:a1:38:ef:76:21:c9:fc:af:90:dc:
96:51:a1:bd:17:b1:ba:b6:2d:2b:12:50:56:cb:16:
50:dc:bc:82:56:db:e4:8a:77:e0:76:90:e5:52:2e:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:95:F8:0D:27:A6:55:3F:50:26:0A:EB:E8:30:DA:8A:44:13:57:DA
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:59:c4:c8:95:53:f0:9a:a0:7f:08:a5:a8:a6:49:2b:aa:02:
f6:c0:a5:50:da:a0:3a:0b:52:a9:e9:d3:9d:e9:67:19:06:73:
a5:1e:05:58:2d:2a:98:93:54:ba:1c:87:12:5a:f9:c4:17:be:
77:1a:75:63:2a:08:59:8f:3c:0b:e8:58:cf:0e:12:74:57:cd:
70:85:f4:03:7f:85:bd:f7:b2:33:54:35:05:c3:a8:77:2b:d9:
35:55:c8:77:4b:56:fe:88:b9:82:cd:15:98:88:23:d8:64:19:
c7:98:87:39:ae:91:63:fb:40:77:21:d1:a8:07:89:07:b9:cc:
15:48:e9:97:fa:15:64:8f:fa:03:81:f1:e3:7f:72:8c:00:5c:
33:1a:97:f8:02:c6:0c:4c:35:49:3f:e2:03:2a:d4:89:be:c7:
b6:32:05:25:1f:22:b0:3e:2c:6d:8c:0b:10:a7:ab:ad:74:db:
9f:3e:8e:7e:fd:32:ca:44:29:b7:c5:19:3f:f0:85:68:75:46:
7c:ba:c1:10:17:08:52:a1:63:f9:e3:09:da:52:ad:84:20:50:
92:34:ff:f1:b4:f7:f9:03:e1:5c:0f:cb:23:b7:c6:31:8f:ba:
0f:e4:2b:3c:09:21:3e:81:d3:37:15:6a:91:d7:b1:85:aa:09:
f4:43:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:10 2025 by rpki-client