Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20343032343837.roa
File: 39332e39352e3131342e302f32342d3234203d3e20343032343837.roa (raw, json)
Hash identifier: Erlc0+I1V+N0QznVX9yi3bgzA6bpFJT8+cwcp88ol0A=
Subject key identifier: 15:E3:E2:D5:86:2A:1E:FA:86:0A:70:82:52:AC:7F:3F:89:47:24:A9
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 047C866B8E15599A3214898CAF8732AB2041FD82
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20343032343837.roa
Signing time: Mon 29 Jun 2026 08:19:13 +0000
ROA not before: Mon 29 Jun 2026 08:14:13 +0000
ROA not after: Mon 28 Jun 2027 08:19:13 +0000
asID: 402487
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 07:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7c:86:6b:8e:15:59:9a:32:14:89:8c:af:87:32:ab:20:41:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jun 29 08:14:13 2026 GMT
Not After : Jun 28 08:19:13 2027 GMT
Subject: CN=15E3E2D5862A1EFA860A708252AC7F3F894724A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:6c:a1:b4:f7:6b:4f:cc:85:94:09:ab:26:
97:96:a1:0a:1c:7c:cc:5f:1d:b0:c7:7a:eb:21:26:
e6:df:94:a6:db:9c:e9:84:e5:e8:7a:27:60:0f:06:
4d:d8:14:6d:4d:22:91:21:55:4f:24:f3:34:f1:68:
8b:b6:95:62:2e:56:a6:22:58:42:15:85:63:eb:32:
9e:be:49:f0:0b:f9:44:01:a5:08:75:a2:85:41:ca:
ad:32:7d:09:11:20:e0:21:2e:28:95:74:60:21:d7:
59:40:f7:ab:5b:b6:63:17:09:20:25:18:4d:0e:7c:
68:fa:2d:99:6a:5f:86:9e:42:83:e2:4f:40:57:2c:
e8:b5:c7:4f:8a:51:80:8c:9a:93:71:02:e4:5a:8c:
cf:65:57:ec:90:10:56:15:34:2c:60:3d:85:90:8e:
a6:e6:61:e5:fa:2e:79:b0:1a:c4:61:da:10:b9:0b:
f9:2e:f6:d2:80:4b:8c:18:5c:88:73:65:9d:f7:f2:
b1:3d:bd:84:12:c6:86:20:7e:d4:00:66:cd:a2:da:
89:64:a3:3d:59:59:ce:da:01:65:8d:a9:9a:53:33:
ce:be:12:94:28:13:65:d6:2d:ca:d9:ca:6a:9c:0e:
70:c4:bd:ee:50:8b:df:8d:ad:ec:cf:ee:d2:69:f1:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:E2:D5:86:2A:1E:FA:86:0A:70:82:52:AC:7F:3F:89:47:24:A9
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20343032343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:76:5d:ef:93:99:56:1b:90:09:0d:0a:75:6b:62:c0:8b:9a:
ce:ef:a3:34:c7:0d:9d:f5:55:b7:9b:08:32:2f:44:43:74:e4:
05:09:d1:ef:d0:14:c4:30:d3:55:cd:ca:97:ab:c1:ab:20:fb:
40:48:c0:6e:f2:47:b0:da:ab:97:9d:9e:74:5f:5b:0d:a1:9f:
94:91:e1:1c:15:2e:9e:8a:b0:7d:3f:63:69:a9:6f:e3:ee:53:
af:ad:49:f4:78:f5:8b:de:70:59:b2:75:58:b9:a7:2c:71:03:
f7:f0:db:31:ef:a1:f7:a4:7e:fb:6c:62:39:30:66:23:fd:97:
02:8c:ca:54:b9:fc:47:18:b4:ce:bb:2f:99:58:e2:6e:9a:9d:
4c:4c:15:be:c1:f1:7a:ee:98:23:b4:57:95:0e:60:b3:1b:d3:
6c:8a:6e:89:2a:47:bb:e6:c3:6c:bf:1c:be:d1:1a:a2:4c:40:
b6:6c:c3:19:12:37:5e:12:39:d3:a4:5b:a6:27:fe:a6:de:d0:
8e:5c:f1:01:65:db:de:96:1a:fb:bc:86:f7:3e:98:6f:de:8b:
3a:82:fe:a3:8e:46:e5:a0:b4:83:ce:bb:33:b7:b5:5e:ef:15:
76:f4:da:3d:25:7a:b2:17:35:ef:65:c0:f1:9e:79:ba:7d:61:
49:7c:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:24 2026 by rpki-client