Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa
File: 39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa (raw, json)
Hash identifier: mQwS4DrXOHq48ct1v19yRxTLIFMUX1FiLxr5ARLhkMA=
Subject key identifier: 37:15:43:D6:0D:D8:C3:04:68:CB:95:90:DF:D3:98:5D:8B:64:26:03
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 0D647AEF76D6DED741CF89667E977FEE3CFFCC34
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa
Signing time: Thu 22 Oct 2026 14:49:38 +0000
ROA not before: Thu 22 Oct 2026 14:44:38 +0000
ROA not after: Thu 21 Oct 2027 14:49:38 +0000
asID: 203636
IP address blocks: 95.169.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:64:7a:ef:76:d6:de:d7:41:cf:89:66:7e:97:7f:ee:3c:ff:cc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 22 14:44:38 2026 GMT
Not After : Oct 21 14:49:38 2027 GMT
Subject: CN=371543D60DD8C30468CB9590DFD3985D8B642603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:e2:58:fe:6f:52:5c:d2:ae:0a:87:ca:73:
ea:27:9e:96:94:6c:8b:ab:62:46:30:c1:90:b7:92:
eb:fc:7e:ff:ed:f6:e4:f0:d5:f2:f0:ae:2a:3c:02:
3a:70:fa:0e:e1:aa:79:ff:30:e2:8f:0d:11:e4:f3:
f7:93:e1:02:19:b2:e1:70:8b:da:39:11:47:6c:88:
d7:e9:82:c5:4b:d7:f9:c7:e1:81:06:f4:40:d3:cf:
f7:10:93:8b:7f:17:ca:c1:cd:91:18:78:88:4f:7d:
1a:8d:d0:d1:91:75:6a:d1:a1:14:4c:90:5c:dd:90:
ac:3d:7e:0a:24:22:9c:a3:d4:cb:31:45:2b:e2:0c:
55:7b:d3:22:ac:14:44:05:0c:3f:c3:32:47:8e:0c:
97:cc:be:6e:d0:51:9f:32:44:25:8f:05:e6:4e:93:
4d:b8:c7:47:8c:65:63:50:53:a7:6f:18:ae:66:b0:
b8:68:e7:98:92:a0:95:79:8e:44:f5:70:99:91:43:
3d:30:c9:93:71:ed:65:1a:5c:fe:0d:3d:92:87:80:
04:75:90:3a:8a:60:31:83:6f:09:71:79:a6:d9:e1:
b5:d4:fa:90:7e:e0:94:47:89:4a:e6:9b:69:00:d4:
f3:34:6a:86:b9:0e:36:e1:c9:f0:97:14:53:d7:8d:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:43:D6:0D:D8:C3:04:68:CB:95:90:DF:D3:98:5D:8B:64:26:03
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323033363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.176.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:be:52:c8:52:d9:18:d7:f3:e3:12:f2:20:9a:d6:59:f0:85:
17:eb:d0:02:19:a9:97:bf:ac:af:16:d4:ba:12:36:59:d7:b5:
8c:82:20:f3:80:6c:b0:fe:aa:89:b6:0e:5c:cd:04:ca:23:93:
26:2b:85:1d:f1:6b:9b:84:a0:5c:c2:82:f0:40:39:4b:b6:39:
97:23:ee:b0:97:f2:22:08:6a:6c:62:c5:2d:05:f2:64:cb:e3:
2c:df:42:b1:e5:33:88:b2:80:89:51:b6:e6:34:79:85:10:97:
2f:5a:6b:17:78:44:4a:db:b9:55:90:4d:ea:b2:ae:e0:3d:32:
35:c8:1f:18:13:d7:40:63:53:3b:13:bb:0c:d6:d0:b5:1f:06:
f0:8d:fd:63:22:c0:e1:68:12:59:cf:3c:e8:b6:de:30:64:51:
39:57:35:58:38:5c:97:92:c8:1b:bb:23:22:1c:95:35:a9:0a:
b8:87:f6:5f:e7:17:cc:99:6e:2c:f9:f5:37:4e:29:67:8c:f8:
af:40:ea:8c:2f:a2:b0:80:f5:e4:32:7c:95:fa:44:4d:b9:a1:
fe:90:a8:ef:26:22:d8:68:ba:39:30:c9:e3:3c:34:f0:f9:45:
b8:a3:38:45:32:67:78:ee:e6:43:41:a1:0e:76:74:6c:25:6e:
ad:ec:5d:5d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUDWR673bW3tdBz4lmfpd/7jz/zDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjEwMjIxNDQ0MzhaFw0yNzEwMjExNDQ5MzhaMDMxMTAvBgNV
BAMTKDM3MTU0M0Q2MEREOEMzMDQ2OENCOTU5MERGRDM5ODVEOEI2NDI2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRPuJY/m9SXNKuCofKc+onnpaU
bIurYkYwwZC3kuv8fv/t9uTw1fLwrio8Ajpw+g7hqnn/MOKPDRHk8/eT4QIZsuFw
i9o5EUdsiNfpgsVL1/nH4YEG9EDTz/cQk4t/F8rBzZEYeIhPfRqN0NGRdWrRoRRM
kFzdkKw9fgokIpyj1MsxRSviDFV70yKsFEQFDD/DMkeODJfMvm7QUZ8yRCWPBeZO
k024x0eMZWNQU6dvGK5msLho55iSoJV5jkT1cJmRQz0wyZNx7WUaXP4NPZKHgAR1
kDqKYDGDbwlxeabZ4bXU+pB+4JRHiUrmm2kA1PM0aoa5DjbhyfCXFFPXjehfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUNxVD1g3YwwRoy5WQ39OYXYtkJgMwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzNjMzMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqbAwDQYJKoZIhvcNAQELBQADggEBAEy+UshS2RjX8+MS8iCa1lnwhRfr0AIZ
qZe/rK8W1LoSNlnXtYyCIPOAbLD+qom2DlzNBMojkyYrhR3xa5uEoFzCgvBAOUu2
OZcj7rCX8iIIamxixS0F8mTL4yzfQrHlM4iygIlRtuY0eYUQly9aaxd4RErbuVWQ
TeqyruA9MjXIHxgT10BjUzsTuwzW0LUfBvCN/WMiwOFoElnPPOi23jBkUTlXNVg4
XJeSyBu7IyIclTWpCriH9l/nF8yZbiz59TdOKWeM+K9A6owvorCA9eQyfJX6RE25
of6QqO8mIthoujkwyeM8NPD5RbijOEUyZ3ju5kNBoQ52dGwlbq3sXV0=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:25:49 2026 by rpki-client