Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203136353039.roa
File: 39352e3136392e3136322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: dJM5t5nPX1W05O3LoaV7bcaZ2+r3vYhN4a7Q5isWNzo=
Subject key identifier: AF:12:DB:04:83:C8:1C:31:C9:2B:14:E8:07:35:19:D2:67:A6:52:D7
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 1C256D27AA64E06A4A1FE152E5CAE608F899A5BE
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203136353039.roa
Signing time: Sun 16 Aug 2026 14:59:06 +0000
ROA not before: Sun 16 Aug 2026 14:54:06 +0000
ROA not after: Sun 15 Aug 2027 14:59:06 +0000
asID: 16509
IP address blocks: 95.169.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 08:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:25:6d:27:aa:64:e0:6a:4a:1f:e1:52:e5:ca:e6:08:f8:99:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Aug 16 14:54:06 2026 GMT
Not After : Aug 15 14:59:06 2027 GMT
Subject: CN=AF12DB0483C81C31C92B14E8073519D267A652D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3e:b7:53:77:ae:1c:9e:83:04:3e:8e:2c:49:
a1:77:be:e9:5d:d3:e4:20:84:4c:23:02:cc:91:19:
a7:60:d3:74:6b:69:b1:26:85:ac:79:25:c9:13:4a:
72:d1:dd:5b:51:f4:75:64:5c:ee:a0:3f:c5:36:69:
09:91:46:62:54:07:9c:ce:15:3d:54:8a:19:35:cd:
80:26:df:ac:61:32:ef:ba:ac:71:25:e0:13:ee:94:
23:df:88:20:0d:45:f5:9d:1c:50:88:4a:53:71:30:
61:b0:89:89:e4:70:6f:f9:be:1b:53:d2:c0:23:53:
47:6d:7d:52:9e:8d:fb:59:24:06:10:f6:9c:a0:bd:
a8:aa:f4:18:08:8b:6a:64:d9:b5:68:16:37:4f:f4:
93:27:d0:03:5f:40:17:f9:6e:cf:3e:da:a8:84:e6:
99:73:3f:4c:54:47:81:b1:95:b8:6c:67:8e:bd:68:
34:40:7c:8f:de:4d:cb:d8:23:85:91:99:41:9b:72:
36:5a:85:a4:3e:84:ce:ac:57:ef:22:eb:1e:9e:60:
68:54:2d:8e:87:48:60:0e:4d:83:62:69:22:59:55:
da:90:6f:e9:e2:09:09:6d:ba:06:66:c6:d5:be:e1:
5a:b3:16:9b:b9:9d:eb:c3:7d:5c:61:e9:c9:11:6d:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:DB:04:83:C8:1C:31:C9:2B:14:E8:07:35:19:D2:67:A6:52:D7
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:de:7f:1f:ae:3e:f4:3d:45:12:20:a2:6e:df:e4:10:0f:f7:
7c:1c:11:dc:45:21:e5:c7:38:c4:d3:d4:2a:a7:dc:10:ea:a6:
b2:9e:8d:e8:bf:b8:bd:5c:ee:57:fc:d4:8b:77:4f:2c:12:65:
22:fc:de:44:83:d7:b9:55:62:94:b1:d1:76:db:ca:00:33:37:
aa:0c:f2:e2:f0:bb:db:b3:09:01:af:c1:86:f1:7c:bd:ae:c4:
b8:3f:e5:85:e6:e8:5b:12:3f:02:45:5f:d7:d8:05:49:ed:e1:
84:e5:79:83:9c:89:89:68:d2:5e:8c:e7:01:c1:b3:b5:24:8d:
18:16:34:ab:d8:00:ce:88:59:c7:f1:e0:26:e2:26:45:db:73:
75:50:ff:3a:8e:61:78:6f:98:5a:6b:51:50:6a:4d:c7:b5:b1:
44:69:48:c4:65:bd:79:9e:a7:73:c8:f0:b3:bc:ca:a8:e6:53:
14:36:bb:ba:d5:8d:c7:1e:35:4d:56:17:b7:78:58:62:fc:a4:
16:bc:82:8e:a2:ca:40:43:09:48:c0:67:c6:de:c4:c4:f3:df:
2a:cc:e7:b8:1d:49:5e:68:cc:f8:c2:65:1c:9e:c6:6c:dd:47:
39:90:6e:35:a4:eb:6b:a1:de:80:e2:8b:81:b8:c6:42:2c:65:
44:62:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:22 2026 by rpki-client