Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e203235313938.roa
File: 39332e39352e3131342e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 924UCUNRr1o7SXVc+gUKT1SfFkm+pmuiOFGdc7vnnI8=
Subject key identifier: 39:78:C1:31:D2:38:5E:3F:2B:FF:28:EA:42:5C:06:ED:A7:98:25:AE
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 6DCF0D2DD991111BA79BC2F7498E9D169D5D6CC7
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e203235313938.roa
Signing time: Thu 20 Aug 2026 07:48:38 +0000
ROA not before: Thu 20 Aug 2026 07:43:38 +0000
ROA not after: Thu 19 Aug 2027 07:48:38 +0000
asID: 25198
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:cf:0d:2d:d9:91:11:1b:a7:9b:c2:f7:49:8e:9d:16:9d:5d:6c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Aug 20 07:43:38 2026 GMT
Not After : Aug 19 07:48:38 2027 GMT
Subject: CN=3978C131D2385E3F2BFF28EA425C06EDA79825AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:d8:35:ad:65:03:c5:e9:e6:9d:33:3a:78:
45:c4:05:7f:52:d3:32:c0:26:8e:66:af:6a:f6:9b:
55:75:87:96:8c:19:72:65:a4:ac:21:b3:97:a9:b6:
18:db:a9:b6:5c:2f:64:df:af:37:fa:52:06:29:fa:
56:75:ae:28:93:e9:41:d5:48:33:e6:18:9d:f1:b4:
d6:ed:d9:53:ca:5b:73:e1:e2:1e:7d:b2:2c:a0:dd:
73:96:a0:34:57:c9:d3:ef:fc:ef:15:f2:48:dd:aa:
50:f0:ce:0c:70:58:6b:44:dd:1b:0e:d4:a8:61:f4:
92:a2:37:ad:05:96:b4:8e:13:12:ec:05:00:86:42:
4d:f9:4c:38:5f:21:04:7e:b2:61:41:0e:95:54:a8:
19:53:e1:07:ca:ec:15:a3:58:6f:3e:5b:d8:03:8f:
61:1d:c6:c0:92:8c:d8:33:65:7d:92:a0:bd:1c:96:
bf:97:f3:54:34:86:0d:c1:41:cc:68:05:ea:ee:78:
88:29:7d:6c:d2:a7:f9:a6:1d:a1:f4:69:87:a8:ee:
15:5a:13:78:00:46:e1:7b:f9:6f:d8:61:19:82:23:
1a:2d:24:ec:cd:92:4d:9d:79:b7:e3:84:2a:07:44:
34:d2:4f:ac:77:ae:dc:e8:95:e2:97:0c:f9:4b:f9:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:78:C1:31:D2:38:5E:3F:2B:FF:28:EA:42:5C:06:ED:A7:98:25:AE
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bc:2d:1a:93:87:95:04:b3:63:9c:3f:22:a5:09:04:b2:ae:
f8:06:c1:15:17:7f:ef:4a:fc:5b:79:12:37:35:dd:12:c8:d5:
5e:d1:49:a9:7e:de:16:2c:46:27:78:b6:61:4d:e9:08:de:6a:
d0:47:4a:6d:f0:b2:cd:18:04:c9:9b:b6:2e:52:b9:95:cd:2a:
38:66:ec:70:fb:2a:de:61:13:4d:ae:58:55:9f:88:8c:b9:03:
a4:ed:da:ec:17:d1:13:fc:34:6a:30:62:a1:d5:24:e5:db:bc:
6b:0d:47:f6:2f:89:5b:66:81:e7:81:8a:88:59:01:cb:e0:07:
48:88:3d:36:54:a1:2a:86:6a:6c:7d:4a:f9:41:69:3a:31:c9:
72:63:9f:6f:05:57:34:67:c3:d8:76:2f:9d:2b:c7:23:a7:2e:
23:a4:db:12:b1:d6:99:41:ef:da:a4:ae:0f:b8:74:20:82:27:
30:b5:58:ef:ad:35:23:1f:98:73:86:ba:44:e3:1b:51:72:1e:
55:86:da:77:ea:6d:ee:85:b4:36:a6:f5:13:3f:a8:37:9b:7a:
ed:93:14:5a:ee:b2:eb:54:40:3d:6a:f4:54:87:5e:66:75:81:
35:4c:7f:17:49:d0:ce:01:00:fb:67:e6:21:83:f7:b5:46:61:
f2:28:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:23 2026 by rpki-client