Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa
File: 39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa (raw, json)
Hash identifier: Y0vOirnEju94tIkNX/GWYNnqnXhBfYRftoO3oMQSY5I=
Subject key identifier: CE:FE:B2:E0:6E:EF:9A:CB:01:97:F1:A3:A3:18:FD:B2:3D:72:DE:17
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 789548365238BBF9975BA9FB88BFDFDE938A6C72
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa
Signing time: Tue 18 Aug 2026 20:49:30 +0000
ROA not before: Tue 18 Aug 2026 20:44:30 +0000
ROA not after: Tue 17 Aug 2027 20:49:30 +0000
asID: 400810
IP address blocks: 95.169.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:95:48:36:52:38:bb:f9:97:5b:a9:fb:88:bf:df:de:93:8a:6c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Aug 18 20:44:30 2026 GMT
Not After : Aug 17 20:49:30 2027 GMT
Subject: CN=CEFEB2E06EEF9ACB0197F1A3A318FDB23D72DE17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:ff:df:52:97:ae:e7:d0:0d:41:6b:b6:33:
f7:36:49:4f:22:56:7b:7c:54:32:24:7b:ad:14:f6:
ab:c5:19:b6:67:9d:00:78:e0:9f:55:d4:15:ac:01:
8d:b9:16:0e:31:d0:f6:9b:17:29:2d:bc:05:ca:63:
a5:b7:7e:28:74:0a:50:ac:94:56:c8:26:87:a9:e5:
56:4f:b1:b6:48:14:32:13:a3:95:14:e9:41:8c:96:
00:b1:6c:69:aa:45:9f:7e:b1:ca:4b:bb:22:cb:67:
79:3a:a7:d1:e0:8a:02:8f:7f:3f:f7:c5:37:70:9d:
45:d8:9b:d6:f4:14:81:9e:7a:85:81:19:05:a1:89:
74:50:3d:c8:15:9f:17:2e:d6:27:e2:2d:b7:a6:47:
8e:56:87:db:c3:6f:91:bb:c9:b4:dd:f3:b8:ae:38:
61:d4:44:31:76:f9:f8:8b:83:a4:74:88:8a:c9:fc:
95:84:21:b0:72:0a:61:9a:ad:8e:32:a5:18:26:66:
68:ad:1b:f9:6d:8e:aa:7b:83:e5:b3:1d:87:56:6d:
9f:92:f6:1e:a8:a0:d9:48:de:cc:ab:6c:09:0c:13:
cc:a3:b6:ca:cc:4d:1d:de:da:3f:94:15:23:d6:c3:
86:0a:24:11:87:3b:18:c3:00:4e:e1:9b:c8:a9:c9:
d0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:B2:E0:6E:EF:9A:CB:01:97:F1:A3:A3:18:FD:B2:3D:72:DE:17
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137332e302f32342d3234203d3e20343030383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:20:bc:b2:e3:04:a8:87:f8:b0:53:25:d5:4a:d9:1c:3e:66:
2e:48:a7:c9:06:c6:fe:08:30:a7:63:5b:38:bb:b3:c2:db:17:
82:88:d8:4d:7d:bb:be:97:70:e5:ae:fe:fb:89:79:de:69:0d:
13:13:42:bc:49:e9:ee:05:4a:1b:23:1a:3c:2e:63:39:45:d1:
32:48:b7:30:21:f9:7a:af:32:d6:d7:f8:b0:34:3d:2a:51:33:
8c:ea:2d:d6:2f:a1:aa:17:fe:ef:ae:a6:04:19:e3:c9:af:d9:
cb:f2:6e:ae:48:ae:9f:55:b4:90:5f:52:f8:57:21:8d:a6:a6:
05:f3:73:15:2d:e1:8d:3f:fd:99:e2:dc:d8:78:c4:46:f5:6f:
ef:c3:42:b5:42:59:16:06:88:e3:82:3b:61:4f:c7:65:61:e0:
bc:99:3a:1f:3c:5c:d1:4c:4c:25:b6:59:f6:e5:11:56:8e:1a:
07:45:45:25:43:aa:04:e5:2e:56:be:35:48:e1:e3:64:30:21:
b8:1a:00:86:b3:58:00:12:72:1c:97:d6:de:4d:1b:08:c4:82:
6b:f7:45:ec:87:6e:36:40:91:aa:24:71:77:e0:21:dc:2b:2b:
28:33:d4:07:17:a5:10:80:74:67:d8:21:86:56:75:c5:7d:eb:
4d:41:9c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:42:19 2026 by rpki-client