Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313534343032.roa
File: 39332e39352e3131372e302f32342d3234203d3e20313534343032.roa (raw, json)
Hash identifier: 1o9u3wNFNEpcO6mQb06aCfzikqFltLXXW8AwfLeTIXI=
Subject key identifier: 4A:61:52:99:D9:FA:A1:AD:C6:5B:8D:41:C8:A2:48:DD:0E:9E:98:FD
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 2036F03099E10E47463100D67F7268E88B685D99
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313534343032.roa
Signing time: Sun 08 Mar 2026 07:45:41 +0000
ROA not before: Sun 08 Mar 2026 07:40:41 +0000
ROA not after: Sun 07 Mar 2027 07:45:41 +0000
asID: 154402
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:36:f0:30:99:e1:0e:47:46:31:00:d6:7f:72:68:e8:8b:68:5d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Mar 8 07:40:41 2026 GMT
Not After : Mar 7 07:45:41 2027 GMT
Subject: CN=4A615299D9FAA1ADC65B8D41C8A248DD0E9E98FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:5c:79:74:cb:fe:5a:55:6a:d1:75:5c:76:
87:8e:ca:38:20:8f:e0:d6:ad:af:50:dc:67:40:3c:
50:8b:9c:12:89:5b:e6:0c:4a:4a:6f:62:9e:27:7c:
8d:55:18:e9:7f:d9:fe:ae:5d:7c:9a:1b:8b:6e:71:
20:ed:7f:d3:ee:36:7c:77:ef:0d:d8:2c:d5:17:f5:
de:79:c4:c1:32:8b:20:6c:62:03:52:c5:58:25:65:
b3:bf:5c:a2:83:5c:fc:47:f7:a4:c1:fd:81:05:18:
d7:90:ad:8d:d9:8f:cf:c1:f0:85:4f:40:e5:b3:af:
7e:06:f0:54:80:3b:d8:f6:2e:1a:cd:96:b3:3c:48:
bc:21:c5:fc:a5:22:56:04:ae:69:36:96:d8:ca:77:
93:a6:22:ea:8a:3d:47:26:32:96:74:54:6b:d3:62:
27:c2:c7:0c:d9:5c:df:46:ec:e1:6a:e0:a1:8d:5b:
11:30:be:19:5d:b3:a9:d4:5c:81:1a:f3:c8:fc:d9:
16:aa:b7:30:ef:9a:2c:7d:97:19:10:71:f5:32:98:
1a:61:67:e3:02:81:64:02:b3:02:95:2c:e2:65:57:
57:b7:e8:51:19:d0:16:91:75:9f:b3:22:17:b3:47:
4f:fb:41:58:42:10:99:46:64:b6:ef:f7:27:ba:c9:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:61:52:99:D9:FA:A1:AD:C6:5B:8D:41:C8:A2:48:DD:0E:9E:98:FD
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313534343032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:5d:81:e3:23:44:3b:06:7d:36:04:0d:24:99:b2:11:a1:e6:
fd:46:16:f2:3f:2d:c6:1a:30:fa:bb:8a:9f:3c:e9:f9:c8:b3:
2f:85:e0:ee:0d:46:39:22:f8:0d:8d:52:e8:d3:0b:b7:f0:09:
38:8b:20:41:cf:30:21:fd:fd:2b:3c:33:2e:43:a8:55:e5:f3:
c9:55:4f:b3:f5:79:b9:e8:97:50:61:5b:ac:f0:6b:61:8d:f2:
ac:25:6a:04:f6:60:c9:be:fa:af:db:56:64:d0:74:da:a0:21:
83:13:38:45:3b:23:77:8c:b5:2d:90:8f:71:4b:33:3e:c3:dd:
94:82:6d:68:50:54:a1:99:eb:28:e9:05:e6:14:b2:59:dd:3f:
cd:8a:33:5a:ae:0c:3c:b6:a5:e1:e5:c0:1a:c6:c2:5e:06:10:
53:da:dd:12:27:66:4c:52:ad:f0:de:62:04:ab:f5:a6:55:a2:
c0:da:8a:2e:94:c7:2c:a5:55:1a:a6:df:5e:81:35:3f:cb:0e:
69:c7:bf:ba:5e:39:a6:f9:1e:fe:48:db:c1:f4:9e:70:56:2f:
7a:a5:44:a9:bf:3c:23:4d:61:3d:6d:b9:a9:9a:17:04:7d:4c:
dd:1a:b0:90:a0:24:9a:d9:66:f3:9a:f5:9d:7a:96:7c:6b:e8:
10:ed:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:51:59 2026 by rpki-client