Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e2039333034.roa
File: 39332e39352e3131362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: plCfGSXPfhTajm4cdjMqyYr1YrnQY7w3e6xDMUQOQyY=
Subject key identifier: 85:DE:1B:86:50:72:3E:9A:BC:9F:0F:FB:2B:86:42:23:92:ED:59:72
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 0E8D605629EDFD7FA8B0481E0639C31C98F1032C
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e2039333034.roa
Signing time: Sun 13 Sep 2026 10:19:31 +0000
ROA not before: Sun 13 Sep 2026 10:14:31 +0000
ROA not after: Sun 12 Sep 2027 10:19:31 +0000
asID: 9304
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 02:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8d:60:56:29:ed:fd:7f:a8:b0:48:1e:06:39:c3:1c:98:f1:03:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 13 10:14:31 2026 GMT
Not After : Sep 12 10:19:31 2027 GMT
Subject: CN=85DE1B8650723E9ABC9F0FFB2B86422392ED5972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:85:6f:9d:7a:8f:2f:2b:b7:aa:4c:24:b5:
d1:61:3f:76:6b:e9:60:43:f8:f2:0e:b3:9b:07:a7:
4c:1a:a6:9b:37:53:36:83:c2:43:79:bb:c8:45:4b:
3b:5f:4f:bf:34:4e:63:30:5b:35:2e:4c:08:cb:d4:
dd:9e:58:01:8b:92:d3:f1:13:7b:8b:18:d4:0c:ea:
fd:ae:c5:9a:04:c5:cc:a6:3b:0c:a6:40:7c:c4:cb:
6b:f1:23:dd:79:d7:7b:d8:9a:51:7b:f3:43:a9:ab:
e8:d7:12:d2:4d:cc:56:12:e1:cb:36:e7:d0:71:81:
db:a3:ba:3a:ec:e0:63:f7:d7:db:33:75:0c:0e:63:
1e:90:6d:18:e1:38:69:2f:11:58:80:17:a4:1f:b5:
c7:dd:8b:a4:96:76:fa:66:4a:83:2a:6e:27:b6:2f:
96:99:01:d1:2b:50:a1:7d:84:47:8e:6f:00:73:2c:
c6:5b:e5:b8:62:06:5f:cc:54:cb:ab:cb:3f:9e:29:
86:a0:98:63:5f:55:4a:f7:5f:14:37:28:62:b3:43:
4f:e0:59:38:c8:31:83:13:a7:2d:b3:6c:50:11:45:
7c:ae:ab:bd:2c:5b:e3:6c:4f:d9:11:9a:57:f8:5b:
30:94:51:2e:f9:3b:e9:1f:b8:c7:46:07:d2:ed:11:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:1B:86:50:72:3E:9A:BC:9F:0F:FB:2B:86:42:23:92:ED:59:72
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1a:e6:7a:de:6e:e6:3b:b8:1d:87:fa:e4:7a:32:19:5b:40:
ae:c5:94:c8:2f:a5:b3:ad:9d:98:3c:01:7a:79:c2:d4:87:79:
24:5d:05:b0:b7:0b:a0:40:4f:46:f5:9d:15:d6:ee:90:88:24:
d1:1d:ae:fc:47:81:cf:cd:14:9a:7b:0c:15:7a:8b:29:15:de:
5b:96:76:1c:c9:e5:a5:9b:7b:4b:80:64:97:8d:a4:97:ae:9c:
30:ac:36:ab:ca:7f:2e:83:07:bc:7d:77:56:f3:68:b1:b9:1a:
bd:18:0f:65:3a:91:14:ee:c0:d2:a2:fd:f5:70:a3:0f:4b:12:
9c:d7:1d:a6:63:db:48:3c:d7:b0:c8:a1:39:94:e0:db:ff:5b:
cc:25:04:5f:72:26:f9:2a:8a:d3:bd:e3:78:f5:49:da:17:46:
6c:1d:4f:41:21:19:b5:14:e6:d2:c3:08:5e:87:bc:67:19:33:
0b:6b:ac:fc:74:73:b8:0d:d2:4e:27:4f:a1:f1:20:43:47:eb:
53:27:f2:21:e3:b2:be:2a:0e:6b:f1:94:43:35:8f:0e:46:11:
f5:4c:a1:ec:8c:bc:63:3f:c7:c3:30:96:2c:f0:ce:da:2c:7a:
97:e8:0d:89:c7:cd:12:fb:12:e9:5a:67:6e:56:0c:06:1b:49:
07:b8:05:5e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUDo1gVint/X+osEgeBjnDHJjxAywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNjA5MTMxMDE0MzFaFw0yNzA5MTIxMDE5MzFaMDMxMTAvBgNV
BAMTKDg1REUxQjg2NTA3MjNFOUFCQzlGMEZGQjJCODY0MjIzOTJFRDU5NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxoVvnXqPLyu3qkwktdFhP3Zr
6WBD+PIOs5sHp0wapps3UzaDwkN5u8hFSztfT780TmMwWzUuTAjL1N2eWAGLktPx
E3uLGNQM6v2uxZoExcymOwymQHzEy2vxI91513vYmlF780Opq+jXEtJNzFYS4cs2
59Bxgdujujrs4GP319szdQwOYx6QbRjhOGkvEViAF6Qftcfdi6SWdvpmSoMqbie2
L5aZAdErUKF9hEeObwBzLMZb5bhiBl/MVMuryz+eKYagmGNfVUr3XxQ3KGKzQ0/g
WTjIMYMTpy2zbFARRXyuq70sW+NsT9kRmlf4WzCUUS75O+kfuMdGB9LtEe6jAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUhd4bhlByPpq8nw/7K4ZCI5LtWXIwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdX3Qw
DQYJKoZIhvcNAQELBQADggEBAE8a5nrebuY7uB2H+uR6MhlbQK7FlMgvpbOtnZg8
AXp5wtSHeSRdBbC3C6BAT0b1nRXW7pCIJNEdrvxHgc/NFJp7DBV6iykV3luWdhzJ
5aWbe0uAZJeNpJeunDCsNqvKfy6DB7x9d1bzaLG5Gr0YD2U6kRTuwNKi/fVwow9L
EpzXHaZj20g817DIoTmU4Nv/W8wlBF9yJvkqitO943j1SdoXRmwdT0EhGbUU5tLD
CF6HvGcZMwtrrPx0c7gN0k4nT6HxIENH61Mn8iHjsr4qDmvxlEM1jw5GEfVMoeyM
vGM/x8MwlizwztosepfoDYnHzRL7EulaZ25WDAYbSQe4BV4=
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:22:31 2026 by rpki-client