Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20323134303535.roa
File: 39352e3136392e3137332e302f32342d3234203d3e20323134303535.roa (raw, json)
Hash identifier: zgdXVfuBGT4/PE3/+MvefwJSpMiun76pugulDA781rM=
Subject key identifier: 63:EF:B1:39:E6:41:DD:77:7F:5E:82:3E:F2:80:F6:97:69:E3:07:98
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 03A5852D5317FC3314717DC59EFAED4CF2F86A46
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20323134303535.roa
Signing time: Tue 08 Jul 2025 13:26:24 +0000
ROA not before: Tue 08 Jul 2025 13:21:24 +0000
ROA not after: Tue 07 Jul 2026 13:26:24 +0000
asID: 214055
IP address blocks: 95.169.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a5:85:2d:53:17:fc:33:14:71:7d:c5:9e:fa:ed:4c:f2:f8:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 8 13:21:24 2025 GMT
Not After : Jul 7 13:26:24 2026 GMT
Subject: CN=63EFB139E641DD777F5E823EF280F69769E30798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:2a:d2:1a:8a:e8:a8:4f:89:ec:21:8b:8b:
8c:53:05:70:c9:33:5d:92:84:2a:37:c6:75:cf:35:
d3:95:c4:60:ef:8b:ee:0a:0b:ef:a9:61:4b:ae:1e:
6e:d2:63:ea:93:02:bd:39:77:76:17:fe:a9:d4:9d:
27:ef:9c:f2:52:d2:90:10:a0:5d:21:72:ae:3a:93:
c3:59:e5:b9:88:ef:a4:a1:85:43:5d:75:7e:68:44:
c1:f7:1a:58:e3:45:c7:36:d9:16:21:9e:c8:1b:96:
f4:dd:70:80:a5:f6:c5:63:17:0b:85:f5:2c:51:1b:
3c:bb:5e:c6:44:5a:2c:1d:d9:5c:33:a6:51:84:ac:
1f:1b:a1:6d:6f:9f:13:03:04:cc:4d:2e:db:f7:b4:
34:a6:07:aa:16:c9:4c:e9:e2:43:5b:9e:fa:52:8a:
e7:11:b5:f2:bd:16:bb:16:75:42:a7:8f:66:68:7b:
e4:8b:46:5a:a8:37:98:6f:ab:7f:2b:31:54:65:ee:
e5:07:3a:93:19:9b:5e:22:13:f9:7d:7f:3f:f5:c1:
02:82:f2:c9:b6:7c:b7:92:25:68:65:a7:5e:fa:71:
30:b1:5a:2b:71:b5:7c:a9:42:e6:ed:5a:f2:33:bc:
25:ce:c9:b3:e8:0a:a1:e9:73:2c:3d:9c:9e:55:38:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EF:B1:39:E6:41:DD:77:7F:5E:82:3E:F2:80:F6:97:69:E3:07:98
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20323134303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.173.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8a:f0:72:e6:38:35:fe:53:7b:88:09:4e:50:7b:ea:12:8d:
5a:3c:8a:0b:21:95:9a:70:0d:b0:a6:61:0a:47:e4:25:f5:bb:
8e:d8:60:a2:59:78:5a:91:d6:1d:95:07:d7:ee:ac:c4:af:19:
3a:94:49:5d:33:31:38:05:69:e9:17:4f:44:9f:38:81:77:9c:
c6:cb:66:4a:12:e0:3b:8f:6f:74:7e:59:de:5b:bf:1e:ea:03:
42:23:d4:d4:3c:a4:06:0b:af:a2:8e:46:f3:96:ae:77:58:86:
3f:f5:57:87:40:9f:57:fd:5a:a3:3a:ca:2d:95:dc:97:6e:76:
2f:5c:dc:c3:3b:12:e9:00:68:d1:7c:6e:04:fd:b1:f7:56:80:
28:4d:3a:62:bd:14:9e:31:b1:e7:af:63:eb:8a:73:14:00:1a:
4c:5b:fa:bb:59:10:cc:9d:ec:36:ea:be:cc:69:16:d6:35:d7:
55:5d:e9:73:e1:bf:1e:5f:75:1f:5b:47:2e:66:53:39:80:d7:
93:52:4e:e3:d3:c1:56:fd:ce:4e:b9:1b:7c:7e:8d:fb:85:5a:
7e:40:ab:80:4e:ba:91:cf:d3:44:b8:e0:26:e9:bc:44:18:ee:
d5:ed:f6:07:04:4d:15:73:fc:33:c7:e5:53:30:07:8f:a5:41:
ef:cd:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:25:08 2025 by rpki-client