Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e203231383539.roa
File: 39352e3136392e3136342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: IWCP1vYEgIpNYJ/1SLKjGGplezz5LIOVyQhQ3NDvzHI=
Subject key identifier: ED:92:1A:1A:21:B2:4F:57:97:94:1F:05:FF:C9:D6:8C:CE:7E:39:92
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 53905F8D6EE206AFD5A7148368D21B0364D1DF65
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e203231383539.roa
Signing time: Mon 13 Jul 2026 02:28:37 +0000
ROA not before: Mon 13 Jul 2026 02:23:37 +0000
ROA not after: Mon 12 Jul 2027 02:28:37 +0000
asID: 21859
IP address blocks: 95.169.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:90:5f:8d:6e:e2:06:af:d5:a7:14:83:68:d2:1b:03:64:d1:df:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 13 02:23:37 2026 GMT
Not After : Jul 12 02:28:37 2027 GMT
Subject: CN=ED921A1A21B24F5797941F05FFC9D68CCE7E3992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:55:4c:bc:c1:e8:08:44:2c:ae:20:4b:76:
1c:c2:8e:74:ec:b2:1f:b0:5e:5e:6d:d1:a6:09:e0:
fb:84:95:db:38:52:0b:d3:6c:02:5b:d5:c7:82:81:
d1:d9:a4:2a:6d:cb:3f:94:60:28:86:e9:5a:6d:90:
0d:d8:7f:1d:ef:e1:1b:af:73:a1:85:bf:72:88:a0:
a3:23:08:fe:cb:9e:a6:cd:94:51:c4:61:66:3e:33:
05:6f:ea:5b:7e:cd:c9:99:1e:93:59:9d:39:45:13:
21:e7:53:4b:50:52:18:d4:ba:98:a0:5c:98:2b:69:
aa:85:63:ca:88:f4:74:e4:1f:38:07:49:07:4d:8a:
62:7e:32:59:90:37:32:94:6d:a4:13:d4:aa:0f:5f:
e4:7c:ea:26:57:a9:7e:b0:78:38:9a:39:37:fb:86:
a6:64:66:b0:de:da:cf:30:10:b5:74:30:2f:80:d9:
68:5a:64:03:f9:e6:be:c0:2a:9d:ec:d3:e7:d0:15:
40:f5:f2:11:7e:25:76:a7:02:56:06:28:ed:f4:81:
4e:51:9b:16:40:da:8f:ac:7b:9a:f8:be:74:e0:28:
b5:73:c1:81:fe:7d:87:c5:f2:4e:08:51:01:38:36:
a4:9c:f5:39:69:ef:24:3c:69:42:9b:a2:a6:ab:1f:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:92:1A:1A:21:B2:4F:57:97:94:1F:05:FF:C9:D6:8C:CE:7E:39:92
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4c:44:95:30:2e:a8:04:de:bf:6b:37:e7:18:9f:e6:51:34:
2d:a9:72:5a:82:77:fa:5c:b0:ad:e1:97:d9:7a:cd:4e:95:94:
f9:1f:91:0a:0e:b8:f0:c0:0f:a9:a6:f7:f5:13:08:f3:3c:ea:
84:77:a8:5d:c2:95:d7:33:80:22:15:a1:b4:b3:8e:bc:1b:72:
f0:78:96:91:f6:23:cd:12:7c:83:24:a9:db:d1:f4:83:a4:de:
a3:ba:ab:0c:c5:85:c0:c4:46:71:55:22:cc:85:a3:89:61:9e:
35:a6:fb:42:75:4c:0f:ca:be:0e:4a:6e:7c:b4:3e:c7:06:12:
ac:45:d7:aa:11:ab:b8:a8:ab:2f:f6:de:00:22:8f:7a:28:ed:
a1:89:01:c4:83:2b:68:9c:63:58:75:86:55:61:b9:db:8f:9a:
11:13:00:15:3b:8e:00:b2:4d:38:38:78:43:2c:e7:78:b1:53:
5c:a6:3a:ad:56:5e:9e:5d:35:fb:d9:62:0a:58:85:48:92:24:
d2:6d:7d:58:67:0e:c5:8c:8d:3f:f1:bd:be:40:9c:11:8e:34:
6e:f7:dc:dc:cc:dc:a6:cf:06:ad:11:39:b7:e2:a8:9e:8a:e8:
0a:2f:98:1b:fb:28:18:59:82:95:e1:c0:92:c6:7b:60:6e:ea:
41:6b:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:57 2026 by rpki-client