Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313532313739.roa
File: 39332e39352e3131372e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: ji2/MCdooHTpH3XVLgjAWg48dgwREbcRqJCa0SPFvoY=
Subject key identifier: 75:B6:8F:2D:9A:BC:BB:45:FA:1A:2A:88:CB:3A:F0:BF:DB:3A:22:93
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3FCEA056051F45F85930B74B04DEC5495AE85413
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313532313739.roa
Signing time: Mon 24 Aug 2026 05:21:01 +0000
ROA not before: Mon 24 Aug 2026 05:16:01 +0000
ROA not after: Mon 23 Aug 2027 05:21:01 +0000
asID: 152179
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ce:a0:56:05:1f:45:f8:59:30:b7:4b:04:de:c5:49:5a:e8:54:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Aug 24 05:16:01 2026 GMT
Not After : Aug 23 05:21:01 2027 GMT
Subject: CN=75B68F2D9ABCBB45FA1A2A88CB3AF0BFDB3A2293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:2b:9d:9d:51:79:9d:0d:77:03:ad:e7:9a:
63:f7:0a:f6:a9:40:b0:51:21:af:40:2b:6b:b0:d5:
21:91:62:af:47:7e:fc:6e:8a:83:a3:9b:7f:3a:dd:
5f:f6:57:fa:49:16:e3:b1:71:30:c3:de:0e:36:13:
14:46:03:b4:c9:e6:fc:ff:0e:cb:32:7f:ec:8e:2d:
c3:fd:88:74:b4:7a:56:c0:72:72:ac:71:07:04:79:
53:58:c3:ea:52:c8:54:9a:e6:f3:92:f5:e5:b5:22:
41:c4:df:39:da:fe:47:e4:84:1f:9a:e3:cf:2f:7c:
fe:76:38:90:b8:f5:37:bd:b6:00:5f:4b:6a:d7:65:
51:f9:04:1d:aa:b6:18:54:7d:c7:0c:a4:d7:1c:a1:
af:81:79:b2:ae:73:6e:0d:9c:95:c6:20:db:ab:c8:
6a:d4:70:1f:b9:76:ac:69:79:61:7b:0d:88:f2:f2:
db:62:67:f2:69:8d:22:20:d1:c0:d5:29:50:0b:59:
76:81:b9:db:42:81:c1:90:ed:98:dc:1d:3a:e2:fd:
26:19:78:69:47:ac:58:57:14:bd:a3:a9:5c:3d:9d:
fb:bb:f0:ee:ad:4e:27:ac:f7:37:2d:d5:7b:7c:88:
b5:6d:43:a1:fc:ff:40:3f:34:92:78:7a:a2:c0:f8:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B6:8F:2D:9A:BC:BB:45:FA:1A:2A:88:CB:3A:F0:BF:DB:3A:22:93
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
03:23:42:5d:c6:65:f0:69:09:7b:ba:c9:3b:2c:eb:13:5b:24:
78:3b:80:06:17:0e:86:13:55:30:ae:a6:0f:47:f3:0e:cf:ba:
15:4b:0f:a1:d0:54:3c:64:89:3b:5d:3d:e5:24:68:ec:d5:04:
35:e8:6a:f5:2e:83:7a:fc:da:69:7c:09:32:87:74:47:d3:73:
df:7d:ab:66:f8:6f:e5:3b:2b:97:8a:e0:6a:dd:08:fc:16:2d:
91:a7:ba:21:7f:8d:65:a6:41:23:4c:e3:0c:9c:ed:8c:2c:cb:
24:8d:ca:9e:fb:b7:99:11:0d:a4:38:37:7b:5f:eb:1c:31:7b:
c5:fa:28:77:cf:a2:05:2a:5c:ac:dc:82:ac:a6:ff:72:3c:e9:
ea:87:50:bf:7f:f2:09:c0:23:4f:8e:56:8f:e3:d0:97:06:32:
b4:44:ce:ac:14:5f:81:6f:3a:57:9f:32:97:fa:41:29:2e:71:
ed:e3:27:16:14:1c:3a:9f:42:d4:83:37:ca:54:cd:6e:df:c7:
c9:47:1f:4f:3c:49:c9:a2:cf:f5:9d:8b:45:b5:76:62:1c:d9:
c3:13:0b:06:b4:ea:c7:02:d8:18:3c:cd:b5:0e:44:1f:7a:e8:
da:95:74:14:1f:1c:0b:fe:49:99:12:d6:19:e6:90:05:b6:3e:
93:bf:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:23 2026 by rpki-client