Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cwyJuw3VsR76FAyXUcPAkfavom7CD+gGOjMD+PD6Bf4=
Subject key identifier: AD:B8:B5:A3:4C:53:92:0A:57:AD:C1:4C:8F:F7:B1:3D:3D:06:94:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B78CAB2C0E6F5222B140B3C10ACE92B97BF7A24
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:30 +0000
ROA not before: Fri 30 Oct 2026 20:27:30 +0000
ROA not after: Fri 29 Oct 2027 20:32:30 +0000
asID: 136787
IP address blocks: 95.214.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:78:ca:b2:c0:e6:f5:22:2b:14:0b:3c:10:ac:e9:2b:97:bf:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:30 2026 GMT
Not After : Oct 29 20:32:30 2027 GMT
Subject: CN=ADB8B5A34C53920A57ADC14C8FF7B13D3D0694FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:9a:17:02:a3:c6:1b:ba:6a:64:95:d1:11:
30:91:00:2d:86:04:b5:42:34:b9:f9:5b:be:80:8c:
76:fb:2c:63:11:3e:13:15:d6:af:7f:12:a3:6f:85:
8f:a6:fa:24:36:30:a1:0c:73:d6:65:b5:26:70:c2:
7d:e3:0d:e7:b0:c7:9b:f1:81:79:a4:62:0f:56:82:
04:3f:09:e4:93:31:47:27:fa:9d:26:c3:db:26:e7:
dc:9f:7e:b2:be:86:33:4b:e5:66:86:01:75:4f:2d:
56:a3:8d:19:3a:0e:68:31:42:e1:7b:82:79:04:02:
57:33:84:a6:7c:8e:0a:17:58:b3:18:19:fe:cf:93:
5c:9c:5f:ee:ad:3d:19:c5:f5:2b:d3:18:23:20:f9:
44:81:39:25:46:bd:88:a2:55:63:f2:93:c3:e1:a1:
38:f8:c5:67:c5:3a:3c:13:5f:a5:de:04:8b:40:d4:
95:7e:9e:39:51:6b:6d:aa:c5:1b:0e:f9:fa:9f:9a:
40:9c:db:5a:60:29:5a:26:2e:8c:53:bf:6d:fe:cb:
23:b5:fd:88:41:f7:8c:93:14:09:ab:9b:0d:04:de:
13:e6:11:ce:0b:ad:f0:9d:d5:c5:a1:29:ce:eb:61:
3d:6d:85:c5:34:35:51:aa:da:2b:a3:83:48:c5:17:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:B5:A3:4C:53:92:0A:57:AD:C1:4C:8F:F7:B1:3D:3D:06:94:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ec:b0:23:4b:9f:a6:b2:94:6e:a0:bf:73:ff:fd:a8:dd:1f:
a8:a8:b8:0f:4d:41:c2:66:e9:4c:ee:df:22:df:12:15:ee:11:
44:d7:02:48:e9:d8:ee:5f:65:57:67:14:67:9f:b8:90:b9:32:
78:ca:e8:ca:a3:e6:9e:e4:ba:03:76:1d:88:db:7d:ed:f7:4e:
79:b4:1a:df:56:8f:cc:2b:e0:12:fd:18:75:82:63:a0:76:37:
1d:58:9c:bb:ca:e2:5c:e1:b3:9f:83:56:b8:cc:29:5e:c6:1a:
67:ac:0b:0e:98:b3:12:0d:a6:d3:2e:bd:a6:0b:19:dd:2c:24:
fb:55:85:0f:cb:46:a7:0f:94:8c:99:03:14:4c:c5:91:1b:d1:
5d:8e:2f:7d:99:79:36:7f:17:be:64:6e:6a:c3:50:bd:60:2c:
d4:1f:c3:60:17:ba:80:92:44:18:23:ab:2a:e8:d8:72:53:2b:
6a:24:25:a7:27:d8:28:c3:d9:c3:97:1d:76:d8:c2:0f:14:2c:
b3:54:c8:bb:61:d6:b7:86:5c:53:5e:54:33:a8:7e:e3:40:06:
18:8f:1c:8e:a6:65:31:d4:be:5d:5e:8c:02:c6:20:77:77:f5:
9e:65:93:83:35:34:df:3c:96:a6:ff:bd:0a:7c:c6:2b:31:06:
40:57:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:00:21 2026 by rpki-client