Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
File: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (raw, json)
Hash identifier: AWocCLR1xSfV14n6Epp6AJfbUCM308NybpDrmnPeixU=
Subject key identifier: FD:77:DF:B8:D1:91:3A:D3:AD:EE:C4:C4:88:52:C4:95:30:2F:4E:8F
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 30569194F54217BD2F37F4D785495F5A2E0642C5
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
Signing time: Tue 15 Sep 2026 05:49:35 +0000
ROA not before: Tue 15 Sep 2026 05:44:35 +0000
ROA not after: Tue 14 Sep 2027 05:49:35 +0000
asID: 23865
IP address blocks: 95.169.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:56:91:94:f5:42:17:bd:2f:37:f4:d7:85:49:5f:5a:2e:06:42:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Sep 15 05:44:35 2026 GMT
Not After : Sep 14 05:49:35 2027 GMT
Subject: CN=FD77DFB8D1913AD3ADEEC4C48852C495302F4E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:a9:5e:0a:d4:72:dc:5e:5d:8c:33:2c:bc:
e6:12:5e:18:a6:08:1c:e6:c5:fd:2d:b7:f5:4d:3f:
3e:07:87:40:02:03:71:83:2f:8f:78:a8:18:02:a3:
cf:a7:28:32:b5:8f:99:4a:84:60:cb:52:5b:b3:c1:
57:07:bb:a7:42:df:c4:07:fe:b4:76:51:a6:c1:d0:
fe:eb:f1:5c:22:1f:c7:e8:94:c9:69:9e:21:d9:0e:
9e:54:14:78:6a:4c:ef:1f:68:c3:63:b4:44:33:1d:
73:71:71:be:8e:5b:73:85:67:0a:fa:2f:1c:ff:f2:
a6:13:cc:4c:be:16:44:e2:e8:b0:50:18:17:14:25:
0c:a2:97:13:dc:0b:c0:4a:44:3a:ea:ed:a1:6c:51:
b7:4f:0b:95:8f:ff:7d:92:04:0d:30:c2:e7:1d:93:
db:83:4c:07:06:c1:5f:6e:7f:0c:16:37:93:46:ef:
d4:ef:e1:54:1a:3e:b7:7e:de:c6:c2:67:43:d9:78:
d3:51:30:13:3c:f0:81:61:e2:1b:82:d9:0f:d9:fd:
f0:97:2d:d6:f9:cd:87:0b:3d:61:da:c1:73:4a:19:
6b:f0:31:93:49:bf:be:f3:85:f9:75:d8:75:c4:1f:
54:0a:80:f0:f0:a3:72:31:1a:c1:5c:88:bd:d6:d7:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:DF:B8:D1:91:3A:D3:AD:EE:C4:C4:88:52:C4:95:30:2F:4E:8F
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
46:eb:b7:e4:82:f2:37:d1:1c:b5:34:50:20:cd:ee:1a:18:90:
29:86:3f:94:e2:b1:d8:c2:04:a7:74:6e:ad:18:f3:35:3b:0a:
cf:cd:f4:51:17:5a:95:63:ef:fe:fc:e0:f3:12:6d:e2:c4:17:
22:98:5d:34:a8:a0:85:13:44:1b:f1:b8:b9:c3:45:f6:6c:61:
d6:96:97:25:a6:74:11:d3:1a:e5:c8:27:1e:83:3b:9c:83:1a:
c7:bc:92:71:f8:c5:f6:e0:11:cb:70:14:a5:14:e4:c3:d3:c9:
3b:51:aa:0e:89:fc:8e:4f:03:5a:1a:6f:fa:0c:c9:aa:39:6b:
9b:f4:87:ba:ed:17:95:98:0c:05:2e:5a:1c:50:d2:58:c7:03:
e6:96:90:9e:53:3a:09:98:78:68:94:20:a2:fd:15:0a:77:6c:
c8:1e:03:5f:3b:8d:83:ed:b2:2d:42:66:a8:56:6e:02:0e:ac:
51:ae:d6:ff:87:c9:90:93:0f:40:08:e3:d5:55:88:66:2e:11:
6d:86:ba:63:e2:2a:da:07:be:f0:a8:78:17:19:5e:6c:f9:d2:
10:70:93:06:d4:bf:c9:bc:dd:f6:fb:7e:be:d6:6c:82:eb:7f:
0f:24:ed:6e:f7:f4:c4:38:9c:f4:5d:1b:b6:ec:aa:58:05:25:
cf:99:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:12:29 2026 by rpki-client