Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20313336353537.roa
File: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier: 7D44z6xLp+NWT+JNRmxNHn/TxGu7Gwn+STgluSXXDGU=
Subject key identifier: 96:66:ED:23:62:E2:8A:38:B2:84:5D:63:18:2A:7B:62:EF:5B:25:01
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 710BA441DFBB6ACDEC826833C22D0786B8096395
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20313336353537.roa
Signing time: Thu 01 Oct 2026 05:49:35 +0000
ROA not before: Thu 01 Oct 2026 05:44:35 +0000
ROA not after: Thu 30 Sep 2027 05:49:35 +0000
asID: 136557
IP address blocks: 93.95.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0b:a4:41:df:bb:6a:cd:ec:82:68:33:c2:2d:07:86:b8:09:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Oct 1 05:44:35 2026 GMT
Not After : Sep 30 05:49:35 2027 GMT
Subject: CN=9666ED2362E28A38B2845D63182A7B62EF5B2501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:25:e0:cd:22:4c:40:5c:07:d9:76:95:64:62:
0f:ee:e7:d4:ec:0a:2e:19:16:da:e4:76:b0:b9:08:
82:e3:bd:8e:65:92:76:82:63:5e:e0:65:64:aa:ff:
59:ba:8a:a8:1f:d8:85:f3:a7:7a:9e:ca:e5:2c:47:
f0:69:c1:84:c8:79:e1:b7:f6:8a:8f:84:cc:f9:7d:
4a:9e:25:d0:2a:74:22:d1:40:24:db:98:68:02:1c:
f3:27:ae:d6:b3:d1:06:67:3d:98:62:95:15:da:3a:
52:16:c1:72:19:d9:bb:b0:11:e5:5a:ba:b3:d1:50:
06:90:56:35:c6:15:a3:9e:78:ff:38:9f:a0:e7:e3:
f3:ee:0b:d3:5a:08:2e:52:a9:ab:8b:ba:ed:70:a7:
af:e6:87:12:17:25:97:c2:fa:16:68:57:b0:0c:88:
59:49:39:28:d2:53:37:65:29:65:8c:df:e6:67:0a:
63:66:84:f2:b1:c6:a7:aa:d7:55:30:d1:43:7c:7f:
22:fa:d5:b8:51:3d:67:d0:84:66:f2:d5:e4:c7:43:
55:18:d7:f1:b9:81:cc:24:44:74:fe:b8:d8:c8:69:
0d:27:bc:33:e3:ff:aa:95:5a:0d:97:95:86:1c:63:
1f:b5:60:07:94:0c:88:39:b6:38:a4:07:36:98:ae:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:66:ED:23:62:E2:8A:38:B2:84:5D:63:18:2A:7B:62:EF:5B:25:01
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20313336353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.118.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ca:a4:27:21:e5:08:99:99:38:17:c9:14:bc:ca:52:c7:fc:
19:92:b8:95:c2:48:c9:eb:9c:5e:48:85:bf:27:1d:3b:a1:0d:
41:7e:04:37:fa:19:06:0c:85:ca:c1:35:bc:c4:dc:35:e7:bb:
da:33:37:4a:ef:06:86:61:08:2e:fd:20:9f:4f:54:e2:5d:3f:
f8:e0:ed:95:81:81:50:a6:75:f2:27:ce:e6:3e:da:65:87:5c:
f2:d7:cc:c8:72:40:2c:66:31:02:ab:74:02:d6:08:af:bc:11:
73:3b:4b:89:49:fe:11:a9:be:72:f1:62:2d:c6:71:06:cb:1a:
42:2d:08:fd:f8:4f:3b:a4:f2:a4:83:a8:3b:82:a4:21:15:7c:
50:ab:9a:80:e0:f0:ef:3d:cc:07:48:b1:c1:70:2e:59:63:60:
77:90:22:bb:1d:b4:6e:02:9b:4a:97:47:6c:32:a4:da:b1:52:
2f:a2:6a:b7:2b:41:25:da:34:d1:b1:2b:83:63:8c:3b:24:7e:
de:31:14:6e:6b:78:10:ca:08:4b:c6:70:3b:f3:30:2c:46:c4:
ef:95:94:6f:29:61:d4:31:97:84:c5:4b:7e:64:cd:c7:7c:f7:
86:e3:22:fe:82:1f:52:d6:20:1e:f2:eb:3e:fd:9b:73:da:d0:
c5:76:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:02:55 2026 by rpki-client