Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32332d3234203d3e20383334.roa
File: 39332e39352e3131362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: zE810mHdbiXdYuZn8GXUXH+9TIR0J58yLM93cBwnbeA=
Subject key identifier: 5D:52:1E:1C:96:0B:7A:08:08:44:A0:D0:5A:85:24:D4:40:FE:C4:49
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 7B809C38F867D85A0C571E612011AF5354842AD5
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32332d3234203d3e20383334.roa
Signing time: Fri 13 Nov 2026 18:48:40 +0000
ROA not before: Fri 13 Nov 2026 18:43:40 +0000
ROA not after: Fri 12 Nov 2027 18:48:40 +0000
asID: 834
IP address blocks: 93.95.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:80:9c:38:f8:67:d8:5a:0c:57:1e:61:20:11:af:53:54:84:2a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 13 18:43:40 2026 GMT
Not After : Nov 12 18:48:40 2027 GMT
Subject: CN=5D521E1C960B7A080844A0D05A8524D440FEC449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:af:30:3e:0f:1e:91:67:b9:e6:70:c3:56:
95:62:0e:c7:b0:8f:1d:50:bf:c6:c5:25:a1:aa:45:
b7:d0:15:bc:8e:75:f0:8a:7c:f5:a7:c9:0f:f7:3b:
6a:06:2e:c1:1e:79:59:33:00:6f:f1:40:4c:5f:f6:
22:aa:e0:56:9c:a3:83:01:f6:10:d6:57:28:29:13:
d6:5b:db:e5:95:48:27:ce:d6:17:ad:2f:ae:f3:c8:
33:9e:45:09:15:f0:96:d7:49:3b:8a:82:46:39:19:
0e:07:b9:58:25:fe:15:73:f1:84:d0:87:ef:87:e6:
18:2c:21:d9:60:20:45:60:b6:68:9b:36:11:90:45:
77:a4:60:ea:40:e5:95:75:0a:e8:c3:e4:55:9a:7b:
46:f0:8b:7f:64:fa:44:73:58:5d:e0:fb:1e:5c:58:
8a:ed:5f:35:93:40:75:49:3d:b3:67:f0:70:66:92:
bc:0b:42:55:30:b0:16:ee:b7:26:05:cd:69:13:19:
46:7b:01:df:89:14:c7:67:ed:8c:1f:38:c8:f1:80:
f2:a5:e8:dd:5f:50:4c:34:c1:6f:64:ef:26:ed:c6:
71:05:9a:46:2b:22:10:45:a2:10:2f:f6:8d:a4:4d:
ff:1a:99:61:8c:21:e1:54:94:c6:1e:bf:97:a2:53:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:52:1E:1C:96:0B:7A:08:08:44:A0:D0:5A:85:24:D4:40:FE:C4:49
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/23
Signature Algorithm: sha256WithRSAEncryption
39:13:70:8c:95:64:65:4b:7a:be:ce:9d:ad:84:4b:b0:de:6a:
ac:6d:41:88:1c:76:80:5a:59:7c:0f:e9:17:4e:f0:5e:56:b1:
1f:55:23:78:51:e2:a9:fe:71:06:a7:d9:0a:37:1f:9a:d3:34:
13:9f:d3:8f:6a:cb:a4:26:4b:07:38:f2:2a:14:56:cc:e3:d7:
7b:f1:b6:ba:23:2e:8a:3d:1c:95:6f:9b:0e:e1:a2:d4:12:55:
71:6c:95:b9:33:6c:9c:1e:92:35:d9:42:57:6a:ba:e7:81:57:
8a:4d:90:62:7b:f9:dc:ab:96:32:4c:2d:39:87:31:e1:1d:a3:
1d:42:3a:38:19:e5:2b:0c:36:61:8b:d1:44:bd:dc:08:37:74:
de:b9:f3:f4:75:3c:b5:15:7d:f5:6e:e6:b5:2c:49:0e:e3:fa:
0b:0f:b0:05:90:0e:32:b1:ff:eb:7d:58:c8:3e:1c:25:99:29:
f8:1f:3d:0c:13:e8:7c:55:5e:58:ee:f3:a7:61:72:18:f4:49:
44:28:8c:49:fe:d9:40:d5:0f:92:a9:e5:a7:e9:fe:b0:f9:4c:
f8:f3:da:3d:39:dd:13:80:73:a6:cc:47:54:14:e0:32:60:20:
ca:cb:6e:2f:0d:96:5a:17:e6:98:cf:70:4e:70:7a:a8:f7:b8:
24:c4:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 03:01:48 2026 by rpki-client