Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313939353530.roa
File: 39332e39352e3131372e302f32342d3234203d3e20313939353530.roa (raw, json)
Hash identifier: yK4SlFqYZqw24XzIvuSXyDco9ggufuCdB4ClN+zHcy8=
Subject key identifier: FF:D6:F5:A4:26:F6:A5:7F:0C:8D:0A:15:95:3D:79:6C:36:EE:52:AA
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 5C099A7DD93C2956C3DB40337D151DBED5FB2F0C
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313939353530.roa
Signing time: Tue 13 Oct 2026 19:02:24 +0000
ROA not before: Tue 13 Oct 2026 18:57:24 +0000
ROA not after: Tue 12 Oct 2027 19:02:24 +0000
asID: 199550
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:09:9a:7d:d9:3c:29:56:c3:db:40:33:7d:15:1d:be:d5:fb:2f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Oct 13 18:57:24 2026 GMT
Not After : Oct 12 19:02:24 2027 GMT
Subject: CN=FFD6F5A426F6A57F0C8D0A15953D796C36EE52AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:50:9c:4a:49:d4:fc:0c:83:8a:de:70:3e:
a9:41:e5:d0:86:fb:a5:b4:e2:d3:17:b4:9a:a5:aa:
b3:19:a4:f5:bb:53:d7:5c:bf:0a:38:c0:45:a7:38:
8a:49:0c:cf:cc:93:80:70:af:81:22:00:38:ec:76:
94:e0:a8:f4:52:a4:1d:a6:56:22:0a:a6:74:3e:d8:
50:a5:bf:42:6d:79:2e:39:e8:67:58:6c:c6:94:4c:
00:67:5c:0e:70:a7:17:58:5e:95:6f:d2:0f:2b:8e:
73:17:58:7b:d7:78:33:a6:95:4a:c2:e0:ed:51:9d:
c5:fd:b3:c7:0f:d3:a1:c1:34:6f:08:95:35:a0:26:
f6:2a:a0:9f:0c:92:30:15:cb:30:3a:d9:a9:50:3a:
9f:8c:e3:e7:c0:85:0f:28:ec:d1:1a:c0:88:10:7d:
5a:53:37:5c:eb:22:4a:21:ee:48:62:37:b0:f5:b5:
41:75:23:51:bd:5e:04:b5:15:35:df:fd:ad:f6:8e:
ac:03:d0:b6:89:ca:a4:9c:88:d5:17:18:a5:6b:6a:
09:c3:8b:f2:0c:c4:72:20:3c:3d:44:9a:b7:3f:a4:
6f:68:35:79:c7:57:ee:0f:4a:1b:fe:8c:a8:35:45:
dd:ac:97:e9:98:f2:a7:bf:cb:9c:81:dd:1e:77:22:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D6:F5:A4:26:F6:A5:7F:0C:8D:0A:15:95:3D:79:6C:36:EE:52:AA
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20313939353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3d:d8:4d:9e:89:a6:f0:0f:3e:b2:ef:c3:a7:ef:5b:47:d7:
3c:67:43:2d:fb:67:ea:3d:a0:55:d5:40:17:e9:21:86:ad:d1:
42:a0:d0:02:9e:8c:85:46:59:48:3d:20:37:7e:de:49:a9:df:
17:6d:90:e9:31:a0:b7:7b:40:64:b2:5e:0f:12:93:39:9c:13:
0b:ae:6c:33:24:d8:8e:6c:e6:d8:07:f1:0d:0c:09:63:63:48:
7d:a1:20:63:bd:32:88:d8:d6:fd:b9:b3:a6:f2:a4:a1:a4:f4:
9a:30:65:d5:7b:10:3f:ca:ee:56:87:65:cd:27:bb:f4:59:32:
11:96:5c:98:c7:cb:3e:c2:0f:47:d0:10:c3:4d:59:a3:ad:e0:
68:c7:f2:e2:33:52:8e:36:48:18:bd:51:b6:75:44:b4:2d:18:
b8:0c:e9:81:e0:4f:34:1f:ff:98:f7:d5:f1:6b:fc:8a:11:38:
91:84:0e:15:79:71:3d:e0:2a:8c:80:08:a2:e2:3c:90:d8:80:
7c:23:9d:f9:04:7f:70:c4:d8:af:50:b1:d1:24:7a:42:f4:fb:
18:c7:41:ec:5f:99:c7:41:87:fa:0f:bd:61:5a:c2:bf:54:e0:
75:f0:83:5e:c0:75:77:45:5a:82:64:6b:6a:d7:02:33:1c:b8:
5d:b8:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:26 2026 by rpki-client