Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313335333932.roa
File: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (raw, json)
Hash identifier: ZFuFEPBt9Pan2hx00mCFtbREXr4oCkkEHZYHwDaWQu0=
Subject key identifier: 6C:CE:E7:DE:B7:E7:E0:39:79:57:17:69:24:FE:9B:82:12:03:E4:E9
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 25EE331929CD765794AE68E4D75E90D625AF0AC2
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313335333932.roa
Signing time: Fri 04 Sep 2026 13:49:33 +0000
ROA not before: Fri 04 Sep 2026 13:44:33 +0000
ROA not after: Fri 03 Sep 2027 13:49:33 +0000
asID: 135392
IP address blocks: 93.95.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 02:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ee:33:19:29:cd:76:57:94:ae:68:e4:d7:5e:90:d6:25:af:0a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 4 13:44:33 2026 GMT
Not After : Sep 3 13:49:33 2027 GMT
Subject: CN=6CCEE7DEB7E7E0397957176924FE9B821203E4E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:10:4b:ed:f5:57:6b:1f:b8:9c:9f:e0:d6:61:
47:9d:fa:0a:01:6f:1b:62:86:9b:76:39:77:1f:29:
bb:fa:e7:de:01:ee:b2:46:ea:70:4b:eb:cc:49:7f:
ef:96:11:f9:02:c2:33:85:c1:bf:13:ce:6f:b0:16:
45:65:5b:42:a3:4b:83:64:9f:5b:29:32:5d:31:bd:
c9:af:59:be:fb:02:90:49:70:c1:2a:9f:86:bf:6c:
6c:3b:e8:4b:7d:e5:98:b1:b4:e8:19:4d:93:2c:d2:
7c:83:94:6d:10:fd:67:cc:f1:71:4c:6a:37:bb:6b:
c5:d1:c7:15:3b:c4:aa:dd:6d:4b:37:d2:e1:59:03:
18:eb:3c:ad:73:40:b6:47:bd:66:20:33:2b:55:36:
c7:10:15:3a:bb:8e:5b:78:0b:93:eb:e2:91:60:96:
83:9f:e8:07:b7:a9:86:98:55:e9:67:f5:fb:d1:b9:
ec:65:87:7c:ce:09:7a:1f:cc:fc:41:0c:78:3b:6b:
b8:25:ff:f7:f1:40:48:07:0c:43:4b:02:8b:70:78:
b8:b1:0e:a2:7b:a2:08:8c:e5:c8:2e:bd:af:1f:86:
02:2d:38:a4:11:94:d6:5b:a9:3f:2f:43:97:0d:79:
c1:7f:e1:31:88:41:40:7d:b2:72:1c:93:88:38:82:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:E7:DE:B7:E7:E0:39:79:57:17:69:24:FE:9B:82:12:03:E4:E9
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313335333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:31:56:bb:46:72:ca:4b:b9:b5:78:ac:22:7b:2b:07:e4:06:
84:de:21:99:c0:12:ed:84:1e:db:f4:ab:41:d4:9e:35:09:0d:
24:c9:a8:fc:b3:31:8f:8a:48:24:4e:9f:3d:b2:f8:1e:2d:b6:
7c:12:0e:4e:78:b3:01:77:54:b4:cc:aa:ca:50:a4:d9:12:38:
e4:18:18:91:32:9b:ae:08:76:e9:4d:ad:bd:34:ba:ab:16:a1:
04:43:75:d3:2b:3b:c5:b7:f3:6f:54:53:ca:3c:ba:f4:90:a7:
63:de:78:00:55:6b:64:63:e9:42:f2:5c:03:f4:08:83:01:1a:
3c:f9:0e:dc:20:75:4b:06:35:ab:4b:5b:2b:44:85:c6:05:a3:
1f:51:43:c9:85:24:1e:e8:d6:ee:5b:13:11:c0:cc:af:f2:3e:
88:05:a9:b8:f3:79:f4:27:51:cc:5b:80:2e:1b:6e:d4:16:3a:
c2:d2:2c:a1:fc:21:f0:10:d0:c9:3c:57:55:48:95:7b:da:c0:
48:a6:72:77:40:ed:ff:1f:bf:9c:40:e8:b1:81:b6:20:7a:c8:
ed:e0:e1:6c:4c:c9:9f:5f:48:1f:6f:2a:1c:55:30:b6:4a:b2:
84:4d:39:11:82:ca:1f:18:7c:92:dc:5b:1f:5d:91:39:7b:f2:
e1:e1:e6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:57:37 2026 by rpki-client