Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: sDWVV4bEKlRdrJ6HMAif5iKiskw5HzaNy6GYER3Gp1I=
Subject key identifier: 39:E3:F3:06:CB:EA:42:7B:E1:A2:4C:6C:C4:F7:7C:FE:AD:D9:6A:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 088315753B6EECE87FB1A939543CB2AA72A65C9F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:38 +0000
ROA not before: Fri 30 Oct 2026 20:27:38 +0000
ROA not after: Fri 29 Oct 2027 20:32:38 +0000
asID: 136787
IP address blocks: 95.214.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:83:15:75:3b:6e:ec:e8:7f:b1:a9:39:54:3c:b2:aa:72:a6:5c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:38 2026 GMT
Not After : Oct 29 20:32:38 2027 GMT
Subject: CN=39E3F306CBEA427BE1A24C6CC4F77CFEADD96A3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:32:af:36:e2:c5:36:2c:69:2a:25:bb:d0:
22:b0:67:0f:4c:69:f5:59:c4:48:9a:a4:ed:91:0c:
f5:e2:55:a9:f8:cb:ff:72:cd:a1:79:44:82:22:cc:
7f:7f:4b:f5:e4:e2:b5:29:4f:e6:bd:b0:a7:e2:25:
ab:67:4a:d8:ec:e6:1b:4f:36:08:69:58:3d:34:e5:
b7:9b:18:e0:66:0e:6b:a5:c1:5b:b1:7c:27:9a:a8:
7a:92:1a:91:32:50:d4:b4:f4:87:b3:51:6a:3a:0e:
0a:78:34:d7:77:2b:69:7f:76:83:79:9b:7f:6e:e5:
1b:ae:69:9f:ce:3f:2c:b0:96:5c:82:2d:ca:71:e4:
1d:c7:92:cd:1a:b8:6b:d2:90:96:d6:44:dd:21:b8:
b8:b6:2e:50:77:d2:f4:f2:d8:bb:2b:15:f3:80:a3:
42:6a:10:a3:08:b5:00:51:3a:21:57:55:7f:3d:be:
a0:7a:d5:af:d8:6e:d7:f2:36:7d:09:66:1e:28:7c:
87:67:99:72:e8:ad:50:28:45:6d:b1:a8:5d:56:2e:
39:52:59:83:76:99:90:b1:53:cf:07:46:42:58:5a:
16:0e:8f:64:0f:f6:fa:fc:bb:89:a8:37:aa:c1:44:
cb:ed:5d:6c:d6:de:e7:1e:93:d5:ef:87:4e:fa:de:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:F3:06:CB:EA:42:7B:E1:A2:4C:6C:C4:F7:7C:FE:AD:D9:6A:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:3c:b3:da:2f:dc:bc:28:d5:28:73:f3:1f:bf:ae:ae:27:dd:
ad:c6:de:d5:74:4e:ca:e9:84:fd:5f:a7:44:48:11:44:70:4f:
84:06:30:62:6a:33:11:a9:97:2f:6b:01:75:a6:c1:4a:95:28:
9b:30:fd:94:72:df:ef:ae:6e:ee:71:cd:be:c3:e7:8a:e6:1b:
33:91:b0:1e:92:50:c4:b2:5a:78:a7:c4:72:f1:25:0d:38:09:
e8:b2:cd:27:69:4e:e9:c9:5e:86:58:f8:e5:79:ea:35:18:a5:
a2:46:32:85:68:be:5d:57:e5:15:e6:37:b0:17:f7:1a:ea:b9:
8d:bb:16:1b:56:81:cd:4e:12:ff:6a:e6:23:b5:54:52:c5:16:
28:ee:4f:04:00:5a:be:01:8f:64:5b:7d:b8:48:2e:0b:26:b3:
5f:3a:ce:4b:f8:37:21:6e:17:83:37:6a:77:3b:c9:56:69:1b:
ba:3f:84:79:f0:34:46:95:f3:cf:1c:d3:ab:83:89:c1:c6:71:
ab:88:55:08:aa:47:74:7f:0e:57:1f:96:60:9d:ae:1b:d7:e9:
cb:9e:99:27:ba:79:32:d3:8b:04:db:7d:cf:04:d9:5b:6d:49:
41:77:da:34:24:39:bc:2d:2f:31:a6:cf:df:90:31:cd:f2:f8:
ff:6e:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:22:03 2026 by rpki-client