Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z1Q4kx6vq2YLO0ENZ87r0ADZn0l74mnh92bq+MVy+80=
Subject key identifier: 69:8F:A8:E2:65:0F:30:39:BB:72:2D:B4:76:84:81:6E:70:28:08:82
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 50C45C8800F57A7DC6592E2638F2EE925161BBFE
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
Signing time: Tue 12 May 2026 06:03:15 +0000
ROA not before: Tue 12 May 2026 05:58:15 +0000
ROA not after: Tue 11 May 2027 06:03:15 +0000
asID: 834
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:5c:88:00:f5:7a:7d:c6:59:2e:26:38:f2:ee:92:51:61:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: May 12 05:58:15 2026 GMT
Not After : May 11 06:03:15 2027 GMT
Subject: CN=698FA8E2650F3039BB722DB47684816E70280882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:13:72:5e:93:92:fb:f8:10:d9:0b:d9:4a:cc:
f9:9b:be:93:4b:91:e5:0b:71:eb:a0:e4:f7:66:fe:
72:c4:64:1b:62:8c:9d:b0:ee:49:ec:4e:93:a5:f8:
bf:fd:63:89:76:56:b7:34:01:f1:20:dd:3c:39:ec:
8f:75:0e:e3:32:3e:3c:c3:5c:64:c3:20:92:c9:dd:
61:1d:05:9a:2f:0c:d0:6d:e5:97:0b:d1:40:17:e2:
b5:cb:4f:a3:51:97:63:00:30:51:ef:25:70:c2:1f:
43:e4:77:0b:7f:af:ce:de:af:f6:6b:71:d5:1c:e1:
0d:f5:18:b5:ec:b8:df:ae:48:ed:49:41:dc:19:07:
31:84:27:87:a3:79:1b:36:f5:f4:fe:da:f4:53:ab:
97:dc:e6:9f:31:3d:d6:0b:be:ed:b8:f3:73:d1:5c:
82:ef:89:43:0f:c7:e7:66:27:56:b3:64:17:00:5f:
68:8b:fd:cb:f3:19:28:1e:e0:41:95:49:44:76:90:
01:61:ce:8d:24:6d:84:6a:6d:8d:ea:74:3d:47:d9:
83:8d:40:3e:31:fd:66:d3:0c:27:ec:3c:3c:37:be:
1e:5c:c5:d0:96:ef:93:98:26:1f:c4:28:c6:fc:b9:
8f:1b:4a:63:26:94:e3:e1:77:9c:64:af:d6:ce:a8:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8F:A8:E2:65:0F:30:39:BB:72:2D:B4:76:84:81:6E:70:28:08:82
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1c:25:75:6a:30:a1:1b:ec:37:0f:c1:d5:f5:b2:0d:2d:00:
2c:90:cf:ab:22:f0:8e:96:18:ff:a3:fc:f4:66:b5:70:39:1d:
5f:73:a4:06:3c:5f:e9:d2:4f:5a:fa:ed:7f:78:25:5f:95:74:
c4:f4:3e:aa:04:38:69:53:73:d4:55:71:6c:1d:76:74:27:43:
e0:f7:c5:d9:5d:0f:af:16:00:c0:b7:b6:15:7d:2e:43:bd:ac:
35:b0:19:89:94:d7:12:93:a0:53:c7:9d:ef:5b:a4:c5:de:5c:
d5:8c:24:8b:39:79:fd:bf:f2:76:eb:0a:ca:22:d4:82:31:7f:
5e:d9:e5:54:45:e4:7d:09:41:87:71:db:4c:42:b1:3a:b9:8c:
ff:10:5e:5f:06:0e:89:f7:03:88:27:45:90:8e:e6:aa:d2:64:
f7:c7:1f:2f:46:ba:66:4d:7a:16:af:a1:2c:7e:d2:47:bf:c2:
ce:c9:3f:a4:2e:4c:32:54:e5:79:85:6c:e7:f3:66:71:d6:ef:
2a:1a:66:e2:45:9a:01:ca:12:36:c2:47:c4:cc:15:c9:7e:26:
1f:0e:0a:b0:f9:8c:43:4a:e5:0f:47:b3:23:c9:59:89:71:a3:
90:d9:d2:04:75:01:86:c0:f1:aa:26:34:c3:14:e7:47:98:e8:
08:9c:29:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:45 2026 by rpki-client