Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203336353330.roa
File: 39352e3231342e3137332e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: ZX0rYuyfoePX3zdEt8vwc7JgQs5NsAAOyIzAnAQ42ko=
Subject key identifier: 85:30:CF:83:BF:FD:48:5E:A7:F9:35:4D:17:06:E5:C3:5E:55:22:BA
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 51EBC31D5DE57A3FC3EBDF6F2C3CC06A1FB2E8F6
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203336353330.roa
Signing time: Sat 16 Aug 2025 14:46:01 +0000
ROA not before: Sat 16 Aug 2025 14:41:01 +0000
ROA not after: Sat 15 Aug 2026 14:46:01 +0000
asID: 36530
IP address blocks: 95.214.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:eb:c3:1d:5d:e5:7a:3f:c3:eb:df:6f:2c:3c:c0:6a:1f:b2:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Aug 16 14:41:01 2025 GMT
Not After : Aug 15 14:46:01 2026 GMT
Subject: CN=8530CF83BFFD485EA7F9354D1706E5C35E5522BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:2a:0f:6e:93:1c:b7:b3:1e:93:00:d6:fa:
7f:9b:9a:78:b6:63:b5:cc:ab:33:08:94:98:6e:80:
6f:68:77:eb:84:75:ac:fe:a5:5c:b3:6c:6f:b7:f7:
5e:31:fb:03:c2:52:74:cc:be:77:48:72:c5:f1:8a:
69:08:33:12:4e:ae:06:9c:4c:64:af:63:b3:d8:a0:
e3:60:5d:96:e3:15:5c:7b:ea:dd:a9:78:5c:2d:12:
28:a6:f1:8b:43:d9:48:72:9c:dc:98:f3:da:a1:2f:
e0:25:dd:6d:58:66:bb:1e:33:85:2a:45:4a:8f:e7:
60:ca:0b:38:57:25:3d:9f:38:24:af:81:82:e6:ed:
e7:33:93:c0:14:fb:01:5b:a8:e0:45:a9:5c:e2:e8:
88:f6:ad:2e:2c:43:da:fa:03:48:bd:ec:c1:58:d0:
2f:34:cd:a5:81:32:2a:ac:1d:b3:cf:96:14:3c:42:
0c:7f:11:21:19:4e:0d:43:68:7f:0f:e2:41:82:22:
91:61:59:23:d6:28:d0:bc:e1:61:60:27:e4:e3:a7:
4d:01:b2:a5:e9:46:42:75:90:88:4f:98:be:bb:80:
d8:7b:c4:1b:ef:e2:08:af:e4:d5:72:0b:4f:b5:7e:
1e:0f:88:22:f9:b0:c6:16:e5:b9:30:b9:2a:13:ff:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:CF:83:BF:FD:48:5E:A7:F9:35:4D:17:06:E5:C3:5E:55:22:BA
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f4:66:5a:76:c3:2d:f6:4e:8b:54:d4:89:9e:0c:5b:d6:c8:
bb:72:b4:06:3a:61:7f:7c:ec:50:43:ed:bb:54:dd:6a:70:3a:
51:02:ca:36:12:9f:5c:38:1c:79:45:38:e7:2a:99:9d:de:6d:
31:10:d3:61:5e:0c:01:3c:1b:c9:d9:88:1c:3d:7c:9d:ad:82:
94:0c:47:35:65:83:66:c1:53:48:d1:90:fe:50:ab:bd:15:9d:
13:2f:91:e4:72:44:67:d2:b5:46:c8:93:84:d2:ca:a5:05:0d:
34:ff:cb:95:fd:e9:12:d6:88:67:3b:3b:55:0b:84:96:0a:d7:
8a:ac:ee:0d:dd:99:6c:fa:7c:05:72:02:29:6c:9c:c5:8f:50:
c4:77:98:40:d5:85:21:4c:aa:48:9a:4c:5f:4d:24:92:57:07:
ff:ab:59:d4:d0:4c:04:71:86:2b:ce:0c:c4:7c:e3:6d:1b:07:
58:49:61:fa:6c:db:ce:8f:08:47:73:dc:06:56:14:fe:5e:e9:
9e:a4:9c:3d:5f:63:52:93:55:1e:66:85:0a:3b:dd:fe:d6:a3:
ea:94:3d:a2:9b:cb:d7:12:57:7b:85:ad:c3:b4:1e:b6:ef:28:
10:15:7b:5c:3b:be:2e:67:9f:93:5a:f3:3a:cd:2c:eb:7e:cf:
e0:7e:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:15 2025 by rpki-client