Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203239383032.roa
File: 39352e3136392e3136372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: 1ZcgAZkIDxVdXepiZbyDXvpiLogALm2uYRnEme9mnUg=
Subject key identifier: 28:13:1D:54:82:1D:C4:CF:C5:F3:9A:83:51:02:81:D8:C7:05:E6:AC
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 06A5B3E5283623C9C2A61425AA5CCCF4019BE7FD
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203239383032.roa
Signing time: Wed 15 Jul 2026 16:49:12 +0000
ROA not before: Wed 15 Jul 2026 16:44:12 +0000
ROA not after: Wed 14 Jul 2027 16:49:12 +0000
asID: 29802
IP address blocks: 95.169.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a5:b3:e5:28:36:23:c9:c2:a6:14:25:aa:5c:cc:f4:01:9b:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jul 15 16:44:12 2026 GMT
Not After : Jul 14 16:49:12 2027 GMT
Subject: CN=28131D54821DC4CFC5F39A83510281D8C705E6AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:bf:75:4b:5a:96:6c:76:b6:1f:38:e2:c0:
ce:34:a7:01:fa:67:5a:20:03:8f:71:ad:7b:51:b2:
0c:c1:15:21:e0:e8:62:b2:b6:12:42:50:20:8c:19:
37:97:92:61:86:cc:fd:7e:db:bc:85:4b:fa:db:d9:
9c:a3:f7:32:9b:13:d9:8f:40:fb:fd:f3:11:a9:95:
cf:f8:57:aa:5a:bb:39:16:66:1b:15:37:2d:04:66:
18:7b:67:94:6d:3b:3a:9c:78:b3:ca:aa:ed:db:73:
8a:f6:51:2e:02:15:b2:96:02:61:6d:8b:ec:b1:bb:
c0:04:32:27:ec:14:b3:0d:f6:c4:6a:0b:6d:0c:70:
ce:4f:0e:06:d1:43:be:bb:37:4c:99:1b:eb:05:c8:
63:b0:2c:48:2d:71:b1:4a:36:f6:53:85:36:76:90:
00:69:da:26:ab:ec:7f:db:49:9a:c2:7f:ad:9c:8e:
d7:09:30:b5:c2:fb:95:a0:e5:0e:39:e1:cd:9d:c7:
6b:4c:21:d7:c0:e7:a3:09:43:1a:86:89:66:08:03:
1f:48:0e:8b:4e:3e:ce:5d:69:b2:8c:96:e2:5f:fe:
bf:ef:28:52:55:b1:11:53:2f:c3:f4:25:28:b6:4c:
5b:0c:5d:1a:d7:dd:68:d7:bd:be:a9:2e:3a:47:8d:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:1D:54:82:1D:C4:CF:C5:F3:9A:83:51:02:81:D8:C7:05:E6:AC
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d0:12:2b:23:5c:54:60:4b:7b:11:2a:e2:14:c0:49:6e:d3:
9c:cb:87:fc:64:cb:26:7b:7b:d6:3d:b8:5b:e0:27:41:20:06:
6d:76:60:27:fb:9f:c0:bd:b0:07:4d:ba:10:0c:ea:2c:56:43:
d3:c5:60:cc:c4:be:4b:c9:1d:85:02:7f:d7:ea:d4:a3:93:28:
a8:7e:c2:b1:39:5a:48:5b:09:e1:a2:40:81:3e:14:eb:d8:a2:
bb:82:e8:ea:b6:a6:73:bb:0c:06:fa:f8:27:3c:65:7b:59:93:
2c:ef:c6:43:30:3c:73:43:b6:f9:e0:b8:41:9b:ff:9c:18:24:
0f:d3:8f:50:c0:ea:a5:11:08:5a:7b:83:e6:7c:76:06:cb:3d:
49:bd:4f:d0:29:90:0c:61:6a:d3:d3:86:f1:26:05:91:1f:2d:
21:93:d6:f0:8d:7d:78:39:de:f0:ab:26:0c:93:50:79:d9:8a:
e1:d2:1d:7a:ce:98:ef:34:42:ab:b1:69:03:2d:85:cd:cc:f4:
cc:10:60:5c:29:fc:58:75:d7:6c:8d:8e:79:cd:6d:96:a4:50:
cc:d3:f3:4b:bd:dd:dc:bc:f2:51:4c:d8:4d:15:b9:8d:6b:f0:
f0:7c:c9:da:77:8c:07:40:5c:9b:b7:d5:e0:27:8e:f8:f1:42:
0d:bb:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:53 2026 by rpki-client