Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313938353834.roa
File: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (raw, json)
Hash identifier: 6mlvSCedy5Dk/9Meq1y5iQGn2LdxMPyo3HKS4yR63y0=
Subject key identifier: 6D:F8:92:76:CD:1B:FD:A7:07:10:A2:96:5C:85:AC:66:9A:BE:25:CD
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 062CC4F1893DCA19756DEEC1E445D7362FAF131F
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313938353834.roa
Signing time: Fri 04 Sep 2026 15:49:33 +0000
ROA not before: Fri 04 Sep 2026 15:44:33 +0000
ROA not after: Fri 03 Sep 2027 15:49:33 +0000
asID: 198584
IP address blocks: 93.95.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 02:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2c:c4:f1:89:3d:ca:19:75:6d:ee:c1:e4:45:d7:36:2f:af:13:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 4 15:44:33 2026 GMT
Not After : Sep 3 15:49:33 2027 GMT
Subject: CN=6DF89276CD1BFDA70710A2965C85AC669ABE25CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:2a:81:73:5f:2f:1c:a9:07:7a:e1:48:c5:
2f:8a:1e:34:fe:15:b7:4d:8e:b0:c4:fa:67:09:0d:
2e:59:61:e4:73:d1:02:76:86:bc:6c:6b:69:d9:26:
59:f4:1b:7e:3d:bd:67:4f:69:a5:e2:bf:08:a8:90:
95:fc:cc:12:3d:ff:a4:39:84:9a:85:71:25:ad:1b:
c0:f9:52:81:7f:44:12:5a:27:bf:d2:f4:74:11:65:
6f:6c:f3:0f:b4:58:90:4c:27:af:d5:3e:85:1c:b6:
83:d7:ae:b6:23:91:af:0b:00:0d:1b:ae:4a:f3:53:
47:38:6b:6f:de:03:2d:69:5b:93:20:ff:ce:8d:90:
0d:e2:36:2f:0e:48:4f:7a:3d:b5:82:bd:3c:a4:a5:
5c:6b:9f:91:57:d0:94:d4:3e:86:0e:54:2a:83:d7:
58:e7:da:2b:c5:d2:ff:25:b5:55:6b:71:9e:98:59:
01:c0:b7:82:68:89:ce:52:39:78:a8:f5:18:cc:b7:
66:c8:e6:98:ec:c4:e0:d2:5a:29:32:be:80:9a:42:
e0:09:49:59:21:e4:03:df:e9:cb:9e:80:3a:b9:d9:
2d:cd:33:04:51:bf:4f:c5:81:67:c6:42:f0:48:0d:
a2:e2:50:88:96:1c:b2:8b:df:7a:b5:0c:71:df:5b:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:92:76:CD:1B:FD:A7:07:10:A2:96:5C:85:AC:66:9A:BE:25:CD
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313938353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1d:39:4f:58:b1:d6:b3:56:35:d3:0c:14:a5:92:c3:c4:e1:
f2:1d:ee:9c:d8:97:d4:7a:22:ef:8d:1e:72:11:a4:37:03:9e:
2d:b5:3a:9f:1a:3c:46:47:68:73:28:b5:6e:97:7d:ce:4d:b6:
c6:68:12:b5:77:58:b8:88:66:5b:fd:dd:bf:3a:13:93:a1:e0:
64:96:8d:63:85:75:e7:91:44:fc:73:73:ef:cf:fc:35:0d:c5:
eb:a2:44:92:e5:b9:56:41:e7:c6:42:9d:dd:a0:83:13:29:53:
51:73:cd:21:5a:08:ec:c4:51:de:e4:c8:42:93:34:61:ad:21:
b5:91:fb:b4:03:9c:c8:84:45:d6:d4:c3:d5:18:49:64:6f:c0:
6d:ac:76:d6:9b:56:a1:2c:dd:ae:5d:29:dc:50:ca:3f:4e:65:
e4:d9:33:ce:29:3b:ea:38:17:e3:e2:9c:62:99:06:fa:a8:86:
60:08:cd:67:b3:b9:4b:04:0f:29:cc:77:34:cb:30:b3:c6:8c:
63:e3:20:91:e2:74:a5:78:35:b0:c8:a4:75:a2:8a:3d:0d:a1:
1b:90:5b:96:1c:e9:f1:56:be:f8:07:9d:e8:ef:3e:f9:af:5f:
fd:8d:65:91:33:cc:c1:52:60:50:f2:6a:00:2e:db:25:18:01:
8a:bf:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:24:26 2026 by rpki-client