Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e203534373032.roa
File: 39332e39352e3131362e302f32342d3234203d3e203534373032.roa (raw, json)
Hash identifier: 0nfsp23c5kiPkAJifOKqxHPhNlSnG3S2DMrmu5VfeRU=
Subject key identifier: B9:FA:E2:4F:85:FE:7B:4F:4E:84:F2:6E:9D:51:F0:0E:90:95:DE:B8
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 473133D5C025F348808C04038E6F91DE61EE2653
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e203534373032.roa
Signing time: Wed 12 Aug 2026 20:51:54 +0000
ROA not before: Wed 12 Aug 2026 20:46:54 +0000
ROA not after: Wed 11 Aug 2027 20:51:54 +0000
asID: 54702
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:31:33:d5:c0:25:f3:48:80:8c:04:03:8e:6f:91:de:61:ee:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Aug 12 20:46:54 2026 GMT
Not After : Aug 11 20:51:54 2027 GMT
Subject: CN=B9FAE24F85FE7B4F4E84F26E9D51F00E9095DEB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:bc:8e:8f:c3:49:f9:d6:d9:fe:ce:09:82:
ad:5c:77:7f:9c:62:b6:47:8a:64:9f:a6:9c:8a:f1:
df:83:b2:ee:08:f6:e6:77:60:0f:30:c2:db:e4:3c:
77:83:f0:dd:91:9f:40:5d:8f:1b:cf:5d:a0:6f:6f:
80:42:67:cd:cb:56:74:41:5b:1c:5e:5d:2f:23:ec:
4d:c3:7f:c3:34:a9:35:c2:fa:a4:f1:e9:21:23:24:
62:69:31:fb:7c:ac:3a:e2:f0:c3:41:84:66:a4:11:
5f:62:57:0f:2e:0a:0c:42:6f:4c:7f:86:b7:50:0e:
b4:90:3b:08:2d:ce:5a:e0:4a:fc:cc:fd:5c:73:83:
52:54:f8:28:08:a6:bd:03:3c:1a:59:5e:97:cf:5d:
81:28:fa:87:b4:e7:11:e9:25:13:58:a1:56:88:35:
3c:7e:91:6c:ed:36:9d:9b:c0:64:3a:0a:61:b0:cf:
05:bf:4b:c5:3f:9d:30:62:f6:2d:c9:52:1f:29:bd:
b1:d0:c4:d2:90:32:98:ac:9e:0c:91:f8:4c:14:3b:
cc:47:10:27:ec:7a:8d:cf:12:a2:7d:3b:de:83:a6:
45:61:db:d1:63:9d:f9:8b:45:9b:41:10:75:ec:69:
e4:59:94:3d:61:d7:9d:b0:4d:50:4c:2d:6f:8c:01:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FA:E2:4F:85:FE:7B:4F:4E:84:F2:6E:9D:51:F0:0E:90:95:DE:B8
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e203534373032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:57:9e:04:66:7a:a3:37:bf:d9:91:27:ca:00:de:4f:0e:7b:
96:d5:fa:b6:64:d8:50:d0:4d:8d:71:5f:39:d0:2e:32:9d:a1:
b9:03:e1:57:9f:2c:8f:96:15:c3:b6:21:cc:fe:d6:74:3a:56:
b6:83:5f:96:6d:1d:27:f9:18:bf:eb:cc:e4:7a:79:f1:15:1c:
a9:20:e0:97:3e:cb:68:bb:9c:76:de:b2:7e:a2:f2:46:a4:97:
8f:ca:22:06:98:c4:5d:e4:d3:fe:5e:da:9f:af:00:c8:d7:6c:
5e:b3:de:5e:b0:d5:6a:fb:6b:5f:5f:4e:96:87:34:23:98:18:
a1:c3:3a:3f:71:37:35:fa:97:93:b8:5b:f5:3f:4f:48:99:fe:
56:1a:80:4b:53:03:fb:55:d7:39:84:51:ee:04:f7:27:b3:6b:
47:a4:6e:2f:1b:0a:45:4d:e8:ee:bd:7d:85:76:4c:b0:27:52:
a7:bd:34:d3:27:48:7a:57:a2:82:dc:64:6d:11:f6:24:d7:f6:
55:35:a2:e0:25:3b:14:3d:12:6f:b8:de:12:06:eb:1b:eb:5d:
bb:4a:12:6c:ff:45:8b:eb:8a:ee:fe:40:91:03:3e:d4:6c:41:
16:a3:25:8d:97:7a:8c:f0:e0:29:b6:6a:3f:6b:92:05:e8:83:
04:22:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:29:52 2026 by rpki-client