Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: vlUyQs58V3iOtesditCG9jyXMo5pxNX2QT7xReJNFdM=
Subject key identifier: 5F:AC:A8:53:1A:84:CC:A7:19:2D:11:E2:8F:57:B0:8E:AC:83:E7:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 056373B46E1F7BCD7C96DC711D710BE540F240BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:12 +0000
ROA not before: Tue 22 Sep 2026 13:24:12 +0000
ROA not after: Tue 21 Sep 2027 13:29:12 +0000
asID: 212238
IP address blocks: 95.214.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:63:73:b4:6e:1f:7b:cd:7c:96:dc:71:1d:71:0b:e5:40:f2:40:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:12 2026 GMT
Not After : Sep 21 13:29:12 2027 GMT
Subject: CN=5FACA8531A84CCA7192D11E28F57B08EAC83E75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:e3:aa:d2:7a:2f:31:52:00:9d:67:e4:ed:
9c:7f:ca:0e:ba:c3:53:f6:2e:77:65:d0:ef:41:2f:
6f:ec:6a:6e:12:75:1a:e8:61:ca:9e:71:02:cb:0e:
9d:16:f0:9d:5f:06:ef:5f:a5:45:65:01:03:8a:61:
fe:ea:21:7f:b5:48:66:e3:f4:0a:d8:03:73:a1:36:
c2:99:f9:02:18:bc:d8:ff:72:7b:79:45:d8:c0:bf:
57:51:a8:82:87:43:36:f3:e7:e8:61:67:13:8c:8d:
0d:9c:56:a2:07:7f:7e:30:97:44:b0:d3:25:b9:2b:
24:c0:28:e5:da:6c:8f:91:3a:ad:21:45:b1:e2:a1:
2c:13:f2:5b:b8:d2:6e:0c:fb:1d:ab:49:1a:5a:e5:
3f:d0:d0:30:21:63:3e:47:d7:25:b9:e9:40:0f:82:
31:49:13:9c:1f:4f:ed:83:d4:ba:e7:8e:95:7c:51:
e0:11:96:89:16:52:06:3e:95:c0:74:8e:b3:84:16:
87:a6:7d:a9:fb:d0:c4:05:d1:fe:34:43:38:c0:a7:
50:7d:3e:fd:d0:f4:69:a6:a2:cf:97:f5:e7:57:87:
56:9e:b9:8a:4f:2d:6f:93:0f:2a:4c:94:37:be:98:
cc:8a:d6:86:3c:77:0e:98:d8:f5:a4:94:c7:cf:c4:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:A8:53:1A:84:CC:A7:19:2D:11:E2:8F:57:B0:8E:AC:83:E7:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.115.0/24
Signature Algorithm: sha256WithRSAEncryption
07:76:22:42:da:eb:e3:7d:86:29:a1:87:4c:0f:d1:ab:a6:0d:
41:2d:0e:bd:f8:f6:59:c6:b0:e7:df:65:20:37:81:a2:b6:c1:
f6:a5:89:6d:9f:4b:cb:e5:51:b1:e2:aa:34:f3:78:c4:08:3a:
7f:ee:4a:4f:51:4e:48:12:23:a6:63:07:5e:31:6b:12:25:59:
73:1a:ac:a4:5c:fc:48:0a:b7:d6:92:7e:2a:59:cb:c7:98:ca:
cc:90:e9:fc:3e:9c:59:98:46:ed:36:47:1f:9f:8c:ce:81:bf:
31:18:aa:a0:b1:c7:23:0b:16:d4:5d:2a:a7:d1:71:7a:9b:2d:
f9:8f:d8:d8:c4:40:83:6a:6f:83:5d:13:46:91:07:b2:44:3d:
eb:98:db:e2:67:82:55:cb:e4:56:7c:ff:c8:19:d0:89:52:19:
04:d7:9f:9f:7a:91:7e:69:13:1e:50:3a:fc:95:8d:d7:31:93:
a1:56:d2:29:9f:c4:fc:57:3d:05:d1:0b:4e:f7:d6:72:f3:08:
02:e2:64:52:0b:9b:6e:08:d1:fa:3d:31:99:92:32:2c:7a:f0:
18:23:d1:1b:35:90:94:9d:86:59:d8:da:4d:66:77:9f:fc:b5:
cb:e5:61:b4:26:9c:6d:01:b1:f0:15:3d:a6:3b:3e:33:d9:77:
e1:6f:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:52 2026 by rpki-client