Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131342e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CCW9iz/tLSc5vh8WPbay4TNyhjv7mllpw0wZBVP8E5g=
Subject key identifier: 2A:80:CB:33:30:4E:AE:EF:48:D5:DF:FC:80:E6:47:62:E6:59:01:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 75A86F7E5625ADF2CCA384330F1461CA82E417E3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:39 +0000
ROA not before: Fri 30 Oct 2026 20:27:39 +0000
ROA not after: Fri 29 Oct 2027 20:32:39 +0000
asID: 136787
IP address blocks: 95.214.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a8:6f:7e:56:25:ad:f2:cc:a3:84:33:0f:14:61:ca:82:e4:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:39 2026 GMT
Not After : Oct 29 20:32:39 2027 GMT
Subject: CN=2A80CB33304EAEEF48D5DFFC80E64762E6590153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:f0:18:7a:63:1c:3d:33:23:e5:18:c7:c8:
92:92:62:2e:f9:77:67:4d:64:43:a1:50:81:0c:f6:
cd:7d:85:d0:80:39:ab:5d:75:b4:dd:79:b2:57:98:
e9:d4:60:c1:d7:8f:26:c9:7f:cb:b2:29:3c:fb:78:
eb:28:d9:0f:94:5b:6b:b8:62:5c:a7:78:06:2b:b9:
31:50:65:8f:01:18:b3:ef:bf:d5:0f:29:1f:23:72:
0e:42:a9:da:f9:9e:b1:8b:14:09:48:b3:e9:44:94:
ab:73:b2:87:03:cd:49:8c:0d:5a:66:08:e4:a4:d1:
d1:87:49:b9:1f:10:58:70:00:f3:61:aa:99:0b:7b:
80:8f:10:8c:dc:a5:f8:0b:07:72:a2:e4:c0:c2:84:
e7:11:5b:89:72:23:34:33:ee:5a:5f:dd:4d:49:82:
6d:65:3a:d6:7b:22:f8:58:65:b8:78:10:81:f4:71:
0b:96:c9:25:d6:6c:e5:b1:dc:29:6f:c5:b3:a3:be:
ad:26:08:22:fd:97:36:72:15:42:9f:f6:4e:ba:03:
b9:12:03:74:2b:57:51:e8:47:fd:df:b2:55:70:a2:
72:bf:34:75:47:50:dd:65:26:aa:33:46:46:5e:30:
4a:51:6a:79:81:a5:2b:a9:50:37:6a:0a:de:75:18:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:CB:33:30:4E:AE:EF:48:D5:DF:FC:80:E6:47:62:E6:59:01:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.114.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0a:88:3c:83:7d:de:95:60:7c:a6:83:de:f7:1d:14:2a:56:
19:40:90:9a:13:03:3a:7c:0a:9d:c7:a1:63:5a:23:66:87:07:
34:e1:9a:ff:a6:66:78:d2:65:4d:36:52:24:50:1b:6f:81:23:
0b:10:d0:28:b3:a0:c8:c5:fa:bb:e8:b1:41:5a:ee:25:b0:2f:
08:8b:4b:09:08:54:45:88:19:34:a9:9c:16:a0:6d:48:02:ed:
ba:1e:a9:28:22:72:cf:a3:25:47:5b:f6:f2:39:a7:ad:0c:b7:
b7:75:8b:41:73:19:52:47:a4:15:07:4e:95:ff:62:0f:8d:98:
cd:42:bf:c5:45:13:e4:d6:da:33:5e:14:3e:55:f7:fc:05:17:
3e:0b:0a:ff:1b:9c:88:3f:cd:f0:2c:09:2e:b0:28:0f:c5:6a:
b2:e5:73:59:38:96:fa:01:59:cc:eb:1f:25:c2:3a:d3:df:35:
fe:4d:78:e3:ea:65:04:d3:c4:81:c8:70:1c:ef:c1:7e:c8:27:
84:9d:c9:23:9f:40:4b:ef:31:da:a5:4e:6c:70:c1:10:a2:0b:
04:a1:fc:e3:d4:67:13:03:6c:79:24:e6:be:cb:f1:dd:eb:6f:
9e:9b:fb:90:01:45:4c:bc:9d:57:52:9e:f7:c3:93:4b:b6:b6:
66:b9:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:09 2026 by rpki-client