Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e2039303039.roa
File: 39352e3136392e3136322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: 5rhATBPkfNKDZF5AJtnWAm8M8CirDc2kJ/6TFHW/xiw=
Subject key identifier: 50:3C:63:DD:63:0E:D7:71:79:46:97:20:83:AB:65:69:A3:70:9E:07
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 4C4E8A0991195B48A893F8B36290C73A60200EB8
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e2039303039.roa
Signing time: Thu 16 Jul 2026 06:26:05 +0000
ROA not before: Thu 16 Jul 2026 06:21:05 +0000
ROA not after: Thu 15 Jul 2027 06:26:05 +0000
asID: 9009
IP address blocks: 95.169.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4e:8a:09:91:19:5b:48:a8:93:f8:b3:62:90:c7:3a:60:20:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 16 06:21:05 2026 GMT
Not After : Jul 15 06:26:05 2027 GMT
Subject: CN=503C63DD630ED7717946972083AB6569A3709E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:8b:6b:17:2e:b3:9b:89:60:c0:3a:78:19:
76:ec:2f:03:33:c4:68:f8:e3:bf:66:81:3f:51:16:
a1:c2:03:08:f8:e7:68:75:4f:42:22:9f:e8:2a:2c:
78:b7:12:b5:21:5f:3f:cc:42:02:81:c3:dd:67:93:
b3:ae:f6:01:03:41:8b:72:8b:d7:8f:24:c4:51:9a:
63:f3:4e:7b:9a:e9:21:9f:55:5b:f2:cb:37:0b:27:
11:c7:2e:a5:7f:9a:8a:3a:94:e7:8a:67:bd:42:b8:
7a:14:9f:29:c5:e7:c7:2a:51:9c:da:ce:7e:bd:aa:
0b:1f:38:af:75:99:45:97:11:e7:a6:a4:21:20:1a:
f5:81:e9:a3:a7:00:df:fa:13:7d:23:3b:38:90:bc:
6c:dc:99:c6:4d:d0:5b:23:e2:b3:72:10:ec:b6:8d:
51:4f:24:bb:66:13:de:45:ff:f8:b7:fb:e2:5c:77:
cc:57:fd:c3:5c:7e:5b:72:ce:4b:6a:56:c3:c0:f8:
6a:59:f7:b0:a7:57:cf:81:10:f3:e6:c3:c0:32:6f:
7c:97:c1:6e:08:67:2e:b4:2c:13:02:9e:81:85:d4:
91:b8:22:7c:1a:7c:0e:63:ea:f3:f6:ca:4b:e5:9b:
81:5c:f8:6c:5c:99:da:41:db:29:b8:5d:4b:bd:10:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:63:DD:63:0E:D7:71:79:46:97:20:83:AB:65:69:A3:70:9E:07
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136322e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.162.0/24
Signature Algorithm: sha256WithRSAEncryption
93:04:d3:4f:de:71:07:22:b0:7d:fe:b4:e6:d8:93:bf:19:13:
72:45:ef:6d:0f:0b:ac:1c:09:31:c1:c0:ac:4e:4e:88:59:40:
76:c9:3a:19:de:5c:09:2a:92:a8:18:66:2c:44:32:67:f8:d8:
02:c8:30:f7:e0:70:e6:13:eb:fb:8f:80:fa:31:6c:ea:83:c7:
91:e0:03:06:4f:4c:f6:b3:e8:b2:50:61:ac:dc:73:40:af:bc:
43:9a:2f:6f:dc:d2:9d:00:50:0b:c4:db:09:9d:4e:fe:97:1e:
a9:85:f1:08:85:26:d0:e4:bc:3a:3f:80:c7:a7:c6:13:0a:8e:
d4:ec:68:23:40:10:7c:86:7b:cc:34:c8:2e:28:59:e6:21:36:
26:aa:6d:35:56:c8:fc:20:7d:b3:03:98:43:41:89:7c:6c:67:
3b:2b:65:68:13:ee:03:12:00:46:e1:4c:a6:0d:d8:c8:f5:4b:
a8:4d:4c:7f:a6:e2:6e:20:7c:7e:35:a3:26:6b:e1:29:de:83:
02:fe:c7:3e:10:cc:a8:8b:49:9c:81:f8:e0:99:5d:a7:21:a8:
f1:a7:26:57:ff:fc:cf:14:41:79:ce:0f:47:b9:7a:9f:8c:59:
c2:62:d9:84:02:ae:b6:6a:65:70:fd:e5:0a:c0:b4:57:11:f2:
e8:8c:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client