Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
File: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: HQDEpyHc5r/FawZZCmNg/hl906n3C/tQL2ZPlj8o68A=
Subject key identifier: 32:8E:A8:8B:5A:AB:1A:40:5C:B1:E7:A1:F5:16:22:21:72:62:8D:E0
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 0FE1BA1F02A69DBA7153A33CE9BA345C2ECE8625
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
Signing time: Thu 02 Jul 2026 20:54:29 +0000
ROA not before: Thu 02 Jul 2026 20:49:29 +0000
ROA not after: Thu 01 Jul 2027 20:54:29 +0000
asID: 834
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e1:ba:1f:02:a6:9d:ba:71:53:a3:3c:e9:ba:34:5c:2e:ce:86:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Jul 2 20:49:29 2026 GMT
Not After : Jul 1 20:54:29 2027 GMT
Subject: CN=328EA88B5AAB1A405CB1E7A1F516222172628DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:32:45:e6:0f:5c:87:f5:ed:cb:8e:81:89:
86:9b:b3:65:1e:5a:69:f8:31:c0:86:96:71:b0:bd:
cd:fd:89:43:dc:2e:06:d0:12:36:5f:36:cc:40:49:
5d:dd:ec:b1:f3:5b:33:43:56:b8:90:92:2e:5b:5e:
f3:97:f4:f6:92:86:9d:f5:6b:eb:fb:36:d9:a7:dc:
ba:ed:6a:7a:c6:59:3d:b8:da:29:80:9a:11:7c:d3:
9e:06:22:d5:0e:9c:66:ab:80:ee:a3:8e:df:6a:55:
8f:62:b4:3e:6c:03:c2:57:58:be:76:8c:f1:dc:b5:
c1:7e:d8:d6:93:91:a7:70:39:31:ab:89:2d:a3:a8:
3d:2a:ed:cb:94:9f:6c:34:87:13:66:5f:c7:c6:66:
f7:cc:ae:bc:04:e8:97:86:95:f5:ba:9a:47:09:c4:
b2:8d:14:55:6c:aa:97:b4:83:36:c6:1b:9b:82:fc:
61:99:da:ec:b8:ab:99:d4:30:c0:ac:31:ac:c6:48:
7b:40:db:3a:31:5a:f0:78:17:36:18:46:c2:c2:df:
84:27:fb:90:45:c3:61:34:aa:b9:a7:37:1e:c8:fe:
9b:8b:ce:3d:c4:09:20:e8:b4:dc:12:6c:45:90:13:
99:73:03:af:9d:ef:61:74:12:81:60:c4:ed:e5:f3:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8E:A8:8B:5A:AB:1A:40:5C:B1:E7:A1:F5:16:22:21:72:62:8D:E0
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c3:7a:43:20:5e:1e:a0:36:51:0c:91:9e:ac:46:ae:4d:5b:
ec:78:e1:26:70:c5:8e:99:47:1a:63:ba:92:4a:8d:49:4d:fb:
30:28:33:b0:97:d3:3e:c5:73:f2:96:9a:27:dd:96:45:94:42:
a4:a5:b4:6f:70:15:40:0f:6a:a1:5a:9f:d6:ca:98:51:40:6a:
03:05:e9:7e:d8:8d:a3:35:5b:7a:d7:ac:bb:a4:a3:7d:d5:eb:
d2:dc:c2:2c:63:b8:4f:e6:76:fd:58:8c:a5:b4:da:c6:d2:33:
8e:64:26:00:09:02:55:2a:1f:af:ca:f4:ec:d7:f6:7f:9d:99:
91:1d:85:6c:7e:b6:10:66:3d:34:10:eb:0e:ce:6a:74:ca:12:
8e:6e:6b:c7:f5:ca:a5:f8:63:c6:d4:ae:21:09:ab:f2:d5:9a:
4f:62:f5:dc:74:1c:56:9a:66:56:d0:87:6d:ea:ed:be:3d:9d:
4a:ee:02:94:30:85:66:22:53:46:08:bb:d0:c1:b6:09:6a:39:
70:da:64:6f:5a:ff:9d:2b:82:4f:f4:cc:e1:36:15:b4:12:8a:
8a:7a:b5:92:f0:89:45:18:99:98:d1:5b:a7:13:23:67:34:b2:
d4:be:2a:e1:e6:ce:64:f4:91:80:34:42:72:19:fb:bb:e7:a5:
e8:9f:8f:7d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUD+G6HwKmnbpxU6M86bo0XC7OhiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNjA3MDIyMDQ5MjlaFw0yNzA3MDEyMDU0MjlaMDMxMTAvBgNV
BAMTKDMyOEVBODhCNUFBQjFBNDA1Q0IxRTdBMUY1MTYyMjIxNzI2MjhERTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNszJF5g9ch/Xty46BiYabs2Ue
Wmn4McCGlnGwvc39iUPcLgbQEjZfNsxASV3d7LHzWzNDVriQki5bXvOX9PaShp31
a+v7Ntmn3LrtanrGWT242imAmhF8054GItUOnGargO6jjt9qVY9itD5sA8JXWL52
jPHctcF+2NaTkadwOTGriS2jqD0q7cuUn2w0hxNmX8fGZvfMrrwE6JeGlfW6mkcJ
xLKNFFVsqpe0gzbGG5uC/GGZ2uy4q5nUMMCsMazGSHtA2zoxWvB4FzYYRsLC34Qn
+5BFw2E0qrmnNx7I/puLzj3ECSDotNwSbEWQE5lzA6+d72F0EoFgxO3l895TAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUMo6oi1qrGkBcseeh9RYiIXJijeAwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABf1rcw
DQYJKoZIhvcNAQELBQADggEBAD7DekMgXh6gNlEMkZ6sRq5NW+x44SZwxY6ZRxpj
upJKjUlN+zAoM7CX0z7Fc/KWmifdlkWUQqSltG9wFUAPaqFan9bKmFFAagMF6X7Y
jaM1W3rXrLuko33V69LcwixjuE/mdv1YjKW02sbSM45kJgAJAlUqH6/K9OzX9n+d
mZEdhWx+thBmPTQQ6w7OanTKEo5ua8f1yqX4Y8bUriEJq/LVmk9i9dx0HFaaZlbQ
h23q7b49nUruApQwhWYiU0YIu9DBtglqOXDaZG9a/50rgk/0zOE2FbQSiop6tZLw
iUUYmZjRW6cTI2c0stS+KuHmzmT0kYA0QnIZ+7vnpeifj30=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:41 2026 by rpki-client