Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203134363138.roa
File: 39352e3136392e3136322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: yqbaz/x5dOfuDMe5vO3Mzh1fgze7QD9EPpVisoUi+Mc=
Subject key identifier: C5:B1:9B:B2:E3:33:51:EE:F0:0F:23:A2:DB:6F:C6:99:00:FB:8F:04
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 314F40E388E8DE7460FC435C18DDCA81B447A159
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203134363138.roa
Signing time: Sun 16 Aug 2026 14:59:06 +0000
ROA not before: Sun 16 Aug 2026 14:54:06 +0000
ROA not after: Sun 15 Aug 2027 14:59:06 +0000
asID: 14618
IP address blocks: 95.169.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4f:40:e3:88:e8:de:74:60:fc:43:5c:18:dd:ca:81:b4:47:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Aug 16 14:54:06 2026 GMT
Not After : Aug 15 14:59:06 2027 GMT
Subject: CN=C5B19BB2E33351EEF00F23A2DB6FC69900FB8F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:03:eb:a7:f9:6f:aa:92:2c:40:09:98:c7:
7a:7e:28:01:7e:7a:a1:0a:44:55:60:05:29:8e:01:
ed:c9:dd:23:78:92:cd:7f:9f:75:4a:b2:fb:8e:cc:
6e:1e:78:7c:19:aa:ee:04:7f:41:1b:cc:65:4c:e6:
e4:3f:f9:db:37:e6:14:bb:a2:ad:b5:4f:df:98:97:
a0:21:f6:f4:3f:be:9d:f6:1e:75:6a:c5:15:f4:a4:
a9:87:19:d4:30:79:a4:e6:f5:29:94:47:c3:60:6e:
c7:bb:26:29:a7:d9:ee:9b:ae:4b:1e:c5:f3:46:a6:
05:27:d9:69:38:62:ab:b4:c2:00:ac:71:26:e9:84:
80:62:2d:a4:9e:cd:98:27:6f:04:d4:44:ff:8d:8b:
fd:10:bf:9b:62:f7:c1:08:40:81:18:48:35:c9:f4:
e8:9a:f5:54:4a:67:16:99:1d:fd:f8:87:8e:5e:63:
5c:ec:0e:ee:77:c1:6b:6f:b8:f4:7c:36:8d:48:d3:
92:39:91:dc:29:d9:c0:79:87:c4:a1:6e:48:bb:27:
43:9d:c3:ad:ee:9e:96:24:50:cb:34:6e:ec:bd:75:
cc:ad:27:fc:de:cd:cb:a0:3c:39:4f:ad:28:3c:f5:
c5:2f:8d:76:ad:dc:15:8f:7c:86:c6:26:d1:43:fa:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:9B:B2:E3:33:51:EE:F0:0F:23:A2:DB:6F:C6:99:00:FB:8F:04
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e1:08:23:02:d7:18:63:d4:fc:46:35:22:38:fe:0a:b8:9c:
38:b3:22:09:9f:3c:39:5d:2b:bf:a5:19:d5:c5:a0:28:50:ff:
3d:e8:21:6d:f7:40:bd:78:2d:4a:35:07:3e:52:f6:29:db:82:
ca:86:49:48:3b:28:76:3c:c4:12:27:d6:a3:d6:9c:4d:42:6c:
aa:cd:21:c7:e5:b7:73:18:25:16:32:0c:80:4c:44:af:a8:11:
55:54:c8:80:aa:19:44:06:03:45:eb:5a:99:64:99:00:bf:8b:
b8:c5:3b:fb:e0:97:13:1f:bc:d6:12:6c:79:b6:ba:75:a3:1b:
89:e0:aa:fb:b6:4d:3e:db:ef:74:6e:c7:d3:43:f0:63:e2:e2:
df:d6:aa:e1:5a:8c:80:a5:8b:53:01:24:a6:b0:7d:9f:c9:45:
5a:ee:63:f9:2f:71:ce:9f:3a:e9:56:bb:ce:b9:af:39:31:e8:
b5:fe:2a:d9:7c:d0:35:c0:63:ae:7b:6b:95:2e:6f:48:fe:09:
bd:2f:bb:c2:25:42:6e:3b:ef:ba:ed:19:05:30:76:3b:9b:36:
53:37:16:96:b8:47:68:69:a2:ee:7f:8d:3b:31:2a:17:f6:b0:
59:5f:e6:4f:5a:a2:c7:ed:a2:16:36:43:e5:04:a8:8d:04:09:
e0:e8:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:22 2026 by rpki-client