Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20313534313332.roa
File: 39332e39352e3131362e302f32342d3234203d3e20313534313332.roa (raw, json)
Hash identifier: TKltJX5YgKOXisaMoj3sr6XgcIKTujLLlLGN3DK/bAA=
Subject key identifier: 31:6A:DE:EE:ED:B3:06:39:D4:46:CF:0C:1F:A5:B3:32:5B:2E:05:F2
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 292526C846F484615652AB21893FA0905BA303D3
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20313534313332.roa
Signing time: Tue 07 Jul 2026 15:14:30 +0000
ROA not before: Tue 07 Jul 2026 15:09:30 +0000
ROA not after: Tue 06 Jul 2027 15:14:30 +0000
asID: 154132
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:25:26:c8:46:f4:84:61:56:52:ab:21:89:3f:a0:90:5b:a3:03:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jul 7 15:09:30 2026 GMT
Not After : Jul 6 15:14:30 2027 GMT
Subject: CN=316ADEEEEDB30639D446CF0C1FA5B3325B2E05F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:a7:3b:87:4c:ac:d5:b4:a0:c2:41:c5:0e:
37:25:f6:94:ec:49:65:f0:3b:42:c0:51:ca:6b:43:
c4:08:2b:50:3b:1f:70:39:4d:70:b6:22:df:b4:4b:
da:ec:26:ba:8e:d1:66:a4:61:c4:dd:aa:db:2c:2c:
78:5f:1d:2e:41:b5:b2:36:34:35:cf:ea:35:81:e8:
a8:45:89:4d:59:71:4f:bf:4a:bb:9f:9f:37:e7:12:
27:f6:b9:3b:54:59:66:44:60:77:b9:9e:31:ea:ee:
61:e0:90:0c:4a:42:5e:e8:a8:db:29:a8:65:27:27:
a1:ea:78:f2:bd:bc:64:51:d5:d9:12:db:1b:44:29:
64:ef:17:86:c5:9b:85:5c:7c:54:dc:93:28:c9:fe:
18:bb:ba:75:b5:ec:c0:1a:de:bb:79:35:50:a5:5a:
ee:a8:ce:ed:b6:ff:c8:aa:db:e8:8a:41:ba:c7:3f:
62:48:d0:38:60:db:90:f0:bd:a9:f6:9f:1b:6e:4d:
d0:9f:05:48:bc:39:88:ce:86:a0:b8:c2:19:dd:4c:
6e:87:fa:9d:69:ad:b0:fc:3e:50:b3:6b:f0:06:ba:
96:93:43:58:7f:27:c4:0a:fa:a1:e1:83:5b:dc:cf:
85:4b:47:0b:13:e2:51:10:bf:2a:f6:ee:81:73:34:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:DE:EE:ED:B3:06:39:D4:46:CF:0C:1F:A5:B3:32:5B:2E:05:F2
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20313534313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d0:0a:bf:09:ef:fc:7b:9b:3d:aa:1b:18:74:9e:d1:e0:56:
06:dc:36:af:48:d7:e7:77:e4:08:45:ab:ff:93:62:53:50:83:
0c:48:e5:4f:2a:08:1a:f4:40:8a:6f:d8:73:8d:34:b1:ad:ae:
78:e0:b4:2f:0f:d1:28:1e:dc:0b:2a:e4:ab:53:a3:04:34:2a:
f5:95:6b:88:c0:1c:e9:67:ae:06:73:96:dc:ee:d6:30:8a:56:
b0:9f:dc:28:c2:50:64:4f:82:12:dd:41:15:2f:0d:3c:25:4e:
59:7d:ea:15:e7:bd:74:7d:9a:b9:f2:0f:3b:60:28:a1:1b:ae:
44:28:ea:22:10:1d:f3:15:15:fd:b7:b9:c7:58:36:e4:43:60:
0b:5c:36:26:6c:a4:96:10:b8:cc:b7:16:40:08:50:9f:4f:d0:
7e:24:64:47:a5:6e:d0:40:26:8b:7d:51:60:4e:19:27:80:d7:
fe:6d:f1:42:c5:27:95:63:ac:5f:ac:82:f2:0b:d9:ff:df:b6:
41:c5:1c:b3:50:c2:f6:41:f4:42:db:9d:13:dd:45:94:15:33:
d5:ad:30:71:88:5c:97:8a:49:d9:32:04:0e:99:ec:56:c4:8d:
0f:8d:7a:fd:d4:2f:6c:4e:2f:b8:9a:06:8b:63:61:e6:b9:06:
f0:dd:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client