Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: K6wwtMDDQNyRVY6veGWGM8RV7lUBIMcj9t7lzkWaMr4=
Subject key identifier: 02:6B:24:AC:BD:47:F4:86:1F:0A:48:7F:C6:9C:89:19:5C:48:A4:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23CAE52937682FEBB614BF778891E2D0917A43BD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:14 +0000
ROA not before: Tue 22 Sep 2026 13:24:14 +0000
ROA not after: Tue 21 Sep 2027 13:29:14 +0000
asID: 212238
IP address blocks: 95.214.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ca:e5:29:37:68:2f:eb:b6:14:bf:77:88:91:e2:d0:91:7a:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:14 2026 GMT
Not After : Sep 21 13:29:14 2027 GMT
Subject: CN=026B24ACBD47F4861F0A487FC69C89195C48A411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:49:f2:ae:62:80:f1:e8:f5:32:7d:65:0c:
48:6d:14:dd:67:2b:65:ef:8b:66:fe:a6:a3:d0:52:
77:69:0f:e6:f0:22:e0:d1:c6:0a:60:be:59:eb:f7:
c9:39:d2:16:27:e5:c9:32:f3:ab:2d:92:99:2c:94:
56:eb:30:f7:c0:21:b4:f8:ea:ac:2d:28:4c:d5:a6:
0e:52:7f:fe:44:57:9d:19:b0:bf:76:db:d6:db:49:
8a:03:2f:3e:bd:16:24:f9:12:31:95:af:1f:ee:09:
d3:b3:53:a9:37:4e:a1:ef:65:e3:35:52:b9:84:12:
5d:cc:09:70:4a:3d:23:3c:0a:05:9f:86:cd:8a:39:
1a:39:ae:2f:4a:58:37:2e:ef:ab:6f:db:3c:51:c9:
94:ec:b1:c1:5a:2f:1b:1e:39:cd:f9:0c:d0:cb:c4:
9a:6d:a2:4b:16:99:b9:79:4b:b9:44:76:fc:b8:9b:
c6:96:03:7e:a4:12:e9:f2:cd:36:2f:2d:28:f6:9b:
be:7c:4d:3f:b8:55:39:47:b4:6f:15:e1:76:63:27:
23:0d:6e:0e:3b:87:db:f2:91:52:5a:69:65:40:ff:
d4:92:2a:55:8e:29:b2:74:3a:52:5d:6d:38:43:74:
98:8d:74:ff:d4:89:5b:22:6b:10:4a:fe:f5:4a:ec:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6B:24:AC:BD:47:F4:86:1F:0A:48:7F:C6:9C:89:19:5C:48:A4:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
38:be:3c:06:a3:9a:67:89:99:ce:40:50:29:9b:1b:fb:a1:e1:
7d:43:aa:ed:21:eb:f5:a5:f4:dc:14:48:5d:28:6e:8e:7f:a0:
e9:60:92:9d:28:1c:37:b1:f6:c0:c0:68:fc:cb:b4:d1:6a:22:
31:68:56:56:b2:13:be:a4:80:2d:b7:cb:f6:1e:71:8c:8c:d0:
59:63:79:e2:11:cc:45:f3:b8:48:e8:b0:57:e8:fd:8c:42:8a:
56:d5:b8:47:94:38:40:e8:88:c5:80:de:8d:13:08:41:9a:b4:
ab:31:ff:3f:78:95:c4:7d:3c:e8:d1:ab:48:6b:3c:ab:0c:5a:
40:97:53:5e:2c:62:2a:75:56:e2:fb:25:e5:54:83:0b:c9:cb:
6d:5d:39:96:f6:e9:0a:31:7d:b5:7e:20:18:58:30:9b:39:e0:
f3:93:97:57:d4:8b:17:48:69:fb:88:be:82:c4:de:e9:40:76:
f5:a4:88:54:51:ab:ba:c7:c7:9c:95:d7:36:4e:1f:41:7a:e6:
59:ba:1d:26:69:0f:89:e5:1b:f2:38:59:c8:0c:e8:18:95:3d:
22:7e:8d:e5:ce:b2:ff:0d:07:e2:0c:be:4e:28:fd:79:4a:d1:
95:47:24:b2:29:9d:14:66:24:13:ab:bd:4e:24:5c:47:74:4f:
67:86:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:03:56 2026 by rpki-client