Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e20313437323831.roa
File: 39352e3136392e3136322e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: LClnoUR1aAbw/cfozx5n6W27853AmTeLN2wAYhICp2A=
Subject key identifier: 17:3D:CB:F1:55:92:2C:E6:F9:51:0C:A0:A1:03:C8:92:D8:4E:E5:D4
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 33C7F2B558D162154F10AA463D199ECF33F50CB4
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e20313437323831.roa
Signing time: Fri 16 Oct 2026 09:47:56 +0000
ROA not before: Fri 16 Oct 2026 09:42:56 +0000
ROA not after: Fri 15 Oct 2027 09:47:56 +0000
asID: 147281
IP address blocks: 95.169.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c7:f2:b5:58:d1:62:15:4f:10:aa:46:3d:19:9e:cf:33:f5:0c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 16 09:42:56 2026 GMT
Not After : Oct 15 09:47:56 2027 GMT
Subject: CN=173DCBF155922CE6F9510CA0A103C892D84EE5D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:7d:ae:31:77:4d:36:49:93:93:20:b2:65:
e5:ad:70:54:85:51:21:fd:27:ce:79:5d:1c:6e:19:
d1:70:e7:fa:b0:30:86:bc:dd:a5:34:6b:94:bb:d8:
c3:7c:7e:02:33:75:a4:da:50:64:08:b3:78:7e:7c:
e4:aa:50:86:3a:15:e0:55:6f:ba:b5:60:c0:b2:42:
8b:2f:3a:f5:4d:4f:d0:1d:74:bf:e9:20:8f:00:fb:
d9:29:db:28:f6:fb:9f:3e:21:eb:58:f2:c5:9a:c2:
68:9c:da:65:eb:7c:8e:4d:65:ec:6b:69:4d:f6:40:
13:4e:6d:6e:06:81:7e:de:f1:10:47:d7:ee:2f:4e:
5d:04:4e:d6:aa:a2:d6:70:a4:26:0e:81:9e:e3:ee:
cc:7f:69:75:a2:08:c9:5c:a7:06:9b:cd:9d:b0:5c:
16:e6:eb:87:8b:39:0c:d1:2d:b2:5b:91:3b:44:1b:
66:57:e9:02:1e:fc:ee:1e:59:ab:a2:5f:16:19:a5:
3f:94:29:ec:88:14:26:da:08:df:2f:c7:a7:f7:33:
ce:7e:95:a4:df:0d:50:34:ca:c5:01:ae:04:d5:36:
ed:91:0a:a1:cc:c8:de:78:04:ee:d7:ff:c2:89:57:
28:12:e7:45:ee:76:33:5d:88:f9:d6:1f:1a:57:49:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3D:CB:F1:55:92:2C:E6:F9:51:0C:A0:A1:03:C8:92:D8:4E:E5:D4
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
18:68:ab:4f:f0:92:af:dd:f2:0a:9a:40:35:3b:37:58:ad:6e:
0b:4c:b5:74:89:3b:05:c7:58:c5:23:4a:d9:09:26:31:93:62:
9e:82:53:78:47:00:39:78:e8:30:3e:e6:82:17:04:26:97:8a:
74:a8:44:5a:14:b0:a6:ae:28:1f:92:7d:c3:04:76:79:1a:26:
4a:0f:d7:e6:26:63:b5:6d:45:75:15:55:cc:a3:e0:a4:ba:c1:
ca:53:bf:73:6f:d9:ba:0d:08:83:da:dd:27:43:4b:10:32:9f:
1d:eb:3c:cc:b9:b7:3e:37:2b:56:aa:8e:21:9f:11:c2:8c:3f:
b7:fc:02:59:66:b5:b2:de:1b:14:d1:6e:9d:28:36:c5:56:3d:
1e:00:0b:18:04:6c:c7:3f:84:48:26:a3:49:d4:20:0c:ee:3b:
ad:79:e1:8d:15:27:d5:c2:1f:a8:37:0a:a8:17:ac:a5:6d:02:
de:a3:1d:31:ba:69:ed:ae:88:95:9a:97:ee:cd:62:50:a3:48:
c8:dd:98:0a:bf:fc:6e:89:64:7b:b8:b5:0c:e5:c9:b3:9b:c7:
c0:50:3f:85:77:d1:c7:e0:70:1e:a2:99:9e:70:e9:34:c1:40:
18:dc:5f:2a:60:38:9b:2c:ae:01:69:15:0e:11:94:7e:7b:4d:
56:30:93:9b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUM8fytVjRYhVPEKpGPRmezzP1DLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjEwMTYwOTQyNTZaFw0yNzEwMTUwOTQ3NTZaMDMxMTAvBgNV
BAMTKDE3M0RDQkYxNTU5MjJDRTZGOTUxMENBMEExMDNDODkyRDg0RUU1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65H2uMXdNNkmTkyCyZeWtcFSF
USH9J855XRxuGdFw5/qwMIa83aU0a5S72MN8fgIzdaTaUGQIs3h+fOSqUIY6FeBV
b7q1YMCyQosvOvVNT9AddL/pII8A+9kp2yj2+58+IetY8sWawmic2mXrfI5NZexr
aU32QBNObW4GgX7e8RBH1+4vTl0ETtaqotZwpCYOgZ7j7sx/aXWiCMlcpwabzZ2w
XBbm64eLOQzRLbJbkTtEG2ZX6QIe/O4eWauiXxYZpT+UKeyIFCbaCN8vx6f3M85+
laTfDVA0ysUBrgTVNu2RCqHMyN54BO7X/8KJVygS50XudjNdiPnWHxpXSX9hAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUFz3L8VWSLOb5UQygoQPIkthO5dQwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMjM4MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqaIwDQYJKoZIhvcNAQELBQADggEBABhoq0/wkq/d8gqaQDU7N1itbgtMtXSJ
OwXHWMUjStkJJjGTYp6CU3hHADl46DA+5oIXBCaXinSoRFoUsKauKB+SfcMEdnka
JkoP1+YmY7VtRXUVVcyj4KS6wcpTv3Nv2boNCIPa3SdDSxAynx3rPMy5tz43K1aq
jiGfEcKMP7f8AllmtbLeGxTRbp0oNsVWPR4ACxgEbMc/hEgmo0nUIAzuO6154Y0V
J9XCH6g3CqgXrKVtAt6jHTG6ae2uiJWal+7NYlCjSMjdmAq//G6JZHu4tQzlybOb
x8BQP4V30cfgcB6imZ5w6TTBQBjcXypgOJssrgFpFQ4RlH57TVYwk5s=
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:11 2026 by rpki-client