Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa
File: 39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: BeHYmLAcwPzUb541czFha5MdBLASqOU+LSKZWT1BsqI=
Subject key identifier: 00:C7:8E:85:8C:E5:A7:EA:63:0D:D9:D0:A6:65:08:9A:70:9C:B6:E3
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7360C3BB7EE5773501155390424727AC83EE51C6
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa
Signing time: Sat 20 Jun 2026 06:47:47 +0000
ROA not before: Sat 20 Jun 2026 06:42:47 +0000
ROA not after: Sat 19 Jun 2027 06:47:47 +0000
asID: 262287
IP address blocks: 95.169.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:60:c3:bb:7e:e5:77:35:01:15:53:90:42:47:27:ac:83:ee:51:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 20 06:42:47 2026 GMT
Not After : Jun 19 06:47:47 2027 GMT
Subject: CN=00C78E858CE5A7EA630DD9D0A665089A709CB6E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:a8:5f:30:d3:a0:d6:4e:a0:85:21:30:7d:
c5:c5:9e:18:b4:39:8f:cb:1b:78:60:61:5e:15:a1:
f2:41:4e:2d:1f:e0:86:99:72:9c:b1:d4:b7:fa:d3:
64:fa:af:53:29:19:97:a8:72:1d:97:51:02:34:c1:
34:3d:e6:b5:34:75:c4:e9:38:05:8c:c2:49:ef:78:
14:28:58:62:4f:4d:ad:18:44:6e:40:2b:d0:d9:2c:
4a:1e:4b:ea:4b:8e:70:8c:23:67:d3:23:13:41:87:
3a:f7:b2:d3:68:3b:d2:2a:e2:fc:cb:86:ce:d9:c3:
00:6d:83:2c:69:5c:25:47:d0:2f:87:86:5b:cd:98:
cf:db:0c:cd:4a:71:5f:41:86:f9:2c:a0:63:dc:4b:
0d:a0:26:dd:64:b3:cb:b7:7e:fc:85:bf:af:11:d7:
a0:74:ba:9a:64:f0:c4:03:59:e2:b0:df:b3:6b:3e:
25:15:d6:41:b2:81:5c:4d:e5:40:0c:3e:8c:2f:0b:
f5:ab:e8:2f:32:f1:1e:be:6a:d3:4e:58:98:e0:a7:
4e:5c:6f:4c:62:bf:43:6e:b3:62:c9:5e:ca:a7:e4:
c8:74:80:30:c5:75:67:fc:38:94:2b:d8:e3:57:d1:
88:f4:0a:3e:b4:91:43:87:dc:ce:47:47:1b:95:9d:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:8E:85:8C:E5:A7:EA:63:0D:D9:D0:A6:65:08:9A:70:9C:B6:E3
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138302e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.180.0/24
Signature Algorithm: sha256WithRSAEncryption
92:32:13:38:ea:d3:65:7e:87:49:f7:e1:ab:93:4c:6e:9d:bc:
9e:2a:34:ab:aa:43:1c:56:ec:12:93:2c:f1:ac:a4:ef:77:a4:
99:a3:eb:a4:4c:e0:ea:29:4f:9a:66:3d:a6:7e:86:71:48:cc:
ad:a1:ea:53:2c:67:07:75:a6:a2:74:51:13:37:43:d0:78:bf:
a9:1b:5c:67:2d:c8:c5:c1:57:e1:bf:a9:c9:5c:90:ef:63:45:
da:74:1a:66:7b:8c:df:a2:7c:f0:3d:40:65:47:e7:6e:d8:d4:
85:1f:03:dd:a7:e4:f2:76:bb:e8:fa:79:91:a4:48:d0:d0:8b:
80:06:9a:04:ca:49:00:84:e3:a1:ad:96:23:bb:30:15:e6:a7:
15:c0:2f:4f:b3:32:4a:19:48:79:d7:b8:62:46:79:6d:f9:8c:
12:eb:97:eb:6e:17:ea:a1:0c:99:4e:46:9d:44:63:2f:ed:7d:
df:04:cf:18:86:56:40:8c:17:2c:28:cb:a8:e3:61:1f:8b:3a:
bb:fe:8a:45:0b:54:fd:56:68:e3:5c:2f:a5:f4:a5:03:32:06:
23:81:e0:5a:d6:cc:f3:6c:76:a5:96:6c:35:29:e8:79:ac:67:
4f:df:00:9f:bc:f4:02:00:23:da:e1:86:73:a0:fc:34:f1:3c:
07:b8:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:52:58 2026 by rpki-client