Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20323134363534.roa
File: 39352e3231342e3137332e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier: mFOzhyAh9tCioAD9KNfnMzhX/ZruiFJExBt3hGxBMhs=
Subject key identifier: FB:0A:C3:16:26:8D:BF:83:AD:22:D6:B1:11:76:D1:6A:52:09:17:73
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 7FAADDECF70DE886542F358FC008E6CF03A0DCA7
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20323134363534.roa
Signing time: Sat 16 Aug 2025 14:46:01 +0000
ROA not before: Sat 16 Aug 2025 14:41:01 +0000
ROA not after: Sat 15 Aug 2026 14:46:01 +0000
asID: 214654
IP address blocks: 95.214.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:aa:dd:ec:f7:0d:e8:86:54:2f:35:8f:c0:08:e6:cf:03:a0:dc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Aug 16 14:41:01 2025 GMT
Not After : Aug 15 14:46:01 2026 GMT
Subject: CN=FB0AC316268DBF83AD22D6B11176D16A52091773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:07:93:0f:d8:7c:88:c1:28:d9:27:b9:6a:
44:67:25:c6:21:da:bf:f4:c1:19:69:24:69:fe:0a:
8f:f5:7e:b0:2a:90:7c:92:19:b7:c1:af:f8:a2:59:
ce:c5:95:03:92:cf:15:a2:5d:7d:04:69:ac:5e:2a:
7a:fd:ce:65:79:a1:19:41:03:e6:4c:88:cf:77:af:
90:73:9b:07:a0:f1:1f:b2:61:b5:e0:60:ec:87:33:
d2:b5:20:70:63:ae:4d:5c:99:4b:0d:f9:c9:ee:ec:
41:af:6e:61:18:3a:23:fb:2d:27:b6:fa:48:64:d4:
db:3a:c4:d7:67:38:a4:ee:b1:47:66:84:23:1c:46:
e5:37:88:f3:a2:bc:ec:fb:9c:00:cb:bd:69:99:c6:
a7:91:de:b2:12:a6:07:a9:ca:59:44:d5:d7:0b:28:
0c:f4:a4:77:80:76:fb:ad:1a:e7:2e:35:9c:6b:c9:
5b:9a:b9:aa:6b:32:af:1b:27:10:7c:d7:4b:26:3d:
13:fd:b1:4a:90:c7:6f:0c:c8:bc:13:41:84:b0:67:
12:f3:20:5d:89:4b:a3:ea:d2:bb:0f:10:09:55:7d:
35:b8:58:5a:01:50:79:c2:80:67:18:dd:c6:9d:97:
87:03:7e:35:82:d9:7d:7b:3b:78:81:c2:9d:f1:c1:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:C3:16:26:8D:BF:83:AD:22:D6:B1:11:76:D1:6A:52:09:17:73
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e20323134363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9a:ad:5d:57:a0:6c:4e:3b:80:f6:45:f4:37:bc:0e:99:eb:
46:5a:0d:51:b4:84:43:b4:7d:e0:f5:a2:f2:34:20:71:f2:ab:
f6:24:ee:00:a3:a2:0a:5e:7a:48:03:45:36:eb:3d:ce:7d:dd:
2b:e6:03:35:bd:fa:56:20:3b:56:f8:a4:fd:f9:97:56:a1:6d:
de:5c:68:e8:1b:63:90:9d:09:fe:06:d4:49:0c:d1:79:e8:2b:
4e:43:bd:e8:b6:d4:d3:e2:fc:59:99:6f:33:4d:94:e7:bb:b0:
53:93:05:ad:c9:c2:bf:24:c3:22:54:45:01:5a:4a:65:36:ab:
4a:1a:0c:5a:6d:01:33:92:71:09:04:a8:84:29:0f:c7:f7:5a:
9f:3e:e9:d6:e6:3b:63:c4:79:4b:ec:d5:68:11:7f:16:2a:63:
8a:44:0a:90:be:0d:b2:79:2c:6a:1a:f6:e2:aa:d0:61:15:0c:
e5:96:f7:7a:59:8d:02:52:fb:12:01:26:e9:87:f9:b3:65:4a:
6c:49:06:ab:48:44:e2:19:62:84:3b:0d:78:7d:37:5c:61:4a:
59:3e:36:f7:b2:dc:09:9a:c3:c3:ed:1f:99:a1:9f:3d:27:56:
64:bf:d7:f7:22:30:ee:32:24:2a:6a:28:b2:5b:63:42:44:d3:
b7:6a:78:21
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUf6rd7PcN6IZULzWPwAjmzwOg3KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNTA4MTYxNDQxMDFaFw0yNjA4MTUxNDQ2MDFaMDMxMTAvBgNV
BAMTKEZCMEFDMzE2MjY4REJGODNBRDIyRDZCMTExNzZEMTZBNTIwOTE3NzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoQeTD9h8iMEo2Se5akRnJcYh
2r/0wRlpJGn+Co/1frAqkHySGbfBr/iiWc7FlQOSzxWiXX0EaaxeKnr9zmV5oRlB
A+ZMiM93r5Bzmweg8R+yYbXgYOyHM9K1IHBjrk1cmUsN+cnu7EGvbmEYOiP7LSe2
+khk1Ns6xNdnOKTusUdmhCMcRuU3iPOivOz7nADLvWmZxqeR3rISpgepyllE1dcL
KAz0pHeAdvutGucuNZxryVuauaprMq8bJxB810smPRP9sUqQx28MyLwTQYSwZxLz
IF2JS6Pq0rsPEAlVfTW4WFoBUHnCgGcY3cadl4cDfjWC2X17O3iBwp3xwYlFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU+wrDFiaNv4OtItaxEXbRalIJF3MwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM3
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNjM1MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABf1q0wDQYJKoZIhvcNAQELBQADggEBAAKarV1XoGxOO4D2RfQ3vA6Z60ZaDVG0
hEO0feD1ovI0IHHyq/Yk7gCjogpeekgDRTbrPc593SvmAzW9+lYgO1b4pP35l1ah
bd5caOgbY5CdCf4G1EkM0XnoK05Dvei21NPi/FmZbzNNlOe7sFOTBa3Jwr8kwyJU
RQFaSmU2q0oaDFptATOScQkEqIQpD8f3Wp8+6dbmO2PEeUvs1WgRfxYqY4pECpC+
DbJ5LGoa9uKq0GEVDOWW93pZjQJS+xIBJumH+bNlSmxJBqtIROIZYoQ7DXh9N1xh
Slk+Nvey3Amaw8PtH5mhnz0nVmS/1/ciMO4yJCpqKLJbY0JE07dqeCE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:44 2025 by rpki-client