Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20313534313332.roa
File: 39332e39352e3131322e302f32342d3234203d3e20313534313332.roa (raw, json)
Hash identifier: X+hAqNzdKPOq+S7rLC3YDEE1/xfftKr31m0O1xfsUHE=
Subject key identifier: EA:13:D8:7F:BB:AE:CB:35:A1:7E:C6:BD:24:8F:18:88:06:47:BC:98
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3DB02EDAFFC655716334F0BF7B25F93A4401F0DE
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20313534313332.roa
Signing time: Mon 08 Jun 2026 16:34:55 +0000
ROA not before: Mon 08 Jun 2026 16:29:55 +0000
ROA not after: Mon 07 Jun 2027 16:34:55 +0000
asID: 154132
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:b0:2e:da:ff:c6:55:71:63:34:f0:bf:7b:25:f9:3a:44:01:f0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jun 8 16:29:55 2026 GMT
Not After : Jun 7 16:34:55 2027 GMT
Subject: CN=EA13D87FBBAECB35A17EC6BD248F18880647BC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:f6:14:02:1f:42:7f:d0:cd:e7:44:5f:8b:
ff:e2:b5:cc:85:fe:e5:67:4f:48:26:74:bd:31:3e:
23:1b:67:e0:05:1e:79:1c:7b:5b:c9:70:dd:b4:86:
fc:f9:18:74:e4:72:fc:93:1b:f3:0c:86:24:98:ce:
78:7a:2c:e3:59:25:02:a3:37:09:f6:ee:5d:36:7e:
97:42:80:6a:d4:03:d1:7d:5d:38:99:0b:c0:60:a2:
86:57:76:38:f6:6b:6d:f2:cc:a1:a2:01:ac:8c:8a:
fc:3d:fc:3d:75:65:14:a2:1c:16:22:d1:a0:b5:73:
b9:66:e6:36:51:97:51:96:63:b2:96:ba:c6:a2:e7:
c7:62:7e:3d:81:55:52:65:7a:22:2b:88:ef:b0:48:
e0:aa:21:a7:7d:0b:39:fb:1a:6c:2e:26:16:cd:52:
81:dd:48:d5:ec:b4:68:00:e9:77:70:77:95:34:09:
e8:2a:d9:f1:68:1c:6d:a3:3c:57:6e:b2:42:16:b9:
1f:ef:a3:e2:6b:ad:f3:96:38:6c:cd:1e:ee:47:ce:
3e:73:ee:d0:ba:b3:d9:c6:27:08:ff:01:ac:0d:93:
e0:17:ed:b7:7e:9e:f2:7f:05:c4:23:75:43:ec:03:
21:29:f5:bb:3f:fa:ee:e4:8f:2d:f3:0e:6e:f5:d5:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:13:D8:7F:BB:AE:CB:35:A1:7E:C6:BD:24:8F:18:88:06:47:BC:98
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20313534313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f5:f1:c0:d6:bd:73:5d:b7:3a:47:7f:bc:b2:95:69:38:39:
13:44:15:2c:17:39:89:06:15:da:2d:6c:cd:e8:ca:24:e7:52:
77:bf:7e:a1:d5:fc:93:73:5c:e8:55:d6:c5:dd:d2:50:f2:71:
81:4e:3a:2e:43:bb:b1:e1:54:7c:08:5e:d8:1f:bd:76:39:52:
a9:56:a5:17:04:fb:ce:e6:17:4d:83:07:5b:7d:bc:b0:b8:c4:
8f:3a:9b:b1:8a:09:06:33:09:bf:81:90:de:85:43:6d:69:f1:
b3:91:67:0e:0b:20:92:43:a4:80:ff:43:78:d5:72:6d:a6:e1:
76:f3:19:f2:22:04:08:fe:c5:16:2e:44:18:e1:d3:d3:a2:41:
c8:bf:c4:5e:45:2e:50:ed:6c:05:ed:ef:c9:9d:a6:14:9f:5a:
a6:89:81:7b:c5:08:5d:3d:ad:eb:0c:bd:38:bf:ca:c7:39:20:
e3:dc:b7:5f:54:17:a4:2a:59:14:e2:a4:d5:68:42:06:6c:37:
73:98:38:75:0f:b4:2c:40:5f:5b:79:16:74:cf:d9:1c:e5:94:
3c:ff:28:2e:d0:cc:01:5d:60:4b:44:54:d0:6e:6c:25:6c:23:
e6:8b:af:06:91:3b:90:dc:48:26:f9:71:c7:cd:1f:38:ac:1e:
b1:4c:b5:ef
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPbAu2v/GVXFjNPC/eyX5OkQB8N4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNjA2MDgxNjI5NTVaFw0yNzA2MDcxNjM0NTVaMDMxMTAvBgNV
BAMTKEVBMTNEODdGQkJBRUNCMzVBMTdFQzZCRDI0OEYxODg4MDY0N0JDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZfYUAh9Cf9DN50Rfi//itcyF
/uVnT0gmdL0xPiMbZ+AFHnkce1vJcN20hvz5GHTkcvyTG/MMhiSYznh6LONZJQKj
Nwn27l02fpdCgGrUA9F9XTiZC8BgooZXdjj2a23yzKGiAayMivw9/D11ZRSiHBYi
0aC1c7lm5jZRl1GWY7KWusai58difj2BVVJleiIriO+wSOCqIad9Czn7GmwuJhbN
UoHdSNXstGgA6Xdwd5U0Cegq2fFoHG2jPFduskIWuR/vo+JrrfOWOGzNHu5Hzj5z
7tC6s9nGJwj/AawNk+AX7bd+nvJ/BcQjdUPsAyEp9bs/+u7kjy3zDm711T6nAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU6hPYf7uuyzWhfsa9JI8YiAZHvJgwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTM0MzEzMzMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XV9wMA0GCSqGSIb3DQEBCwUAA4IBAQBe9fHA1r1zXbc6R3+8spVpODkTRBUsFzmJ
BhXaLWzN6Mok51J3v36h1fyTc1zoVdbF3dJQ8nGBTjouQ7ux4VR8CF7YH712OVKp
VqUXBPvO5hdNgwdbfbywuMSPOpuxigkGMwm/gZDehUNtafGzkWcOCyCSQ6SA/0N4
1XJtpuF28xnyIgQI/sUWLkQY4dPTokHIv8ReRS5Q7WwF7e/JnaYUn1qmiYF7xQhd
Pa3rDL04v8rHOSDj3LdfVBekKlkU4qTVaEIGbDdzmDh1D7QsQF9beRZ0z9kc5ZQ8
/ygu0MwBXWBLRFTQbmwlbCPmi68GkTuQ3Egm+XHHzR84rB6xTLXv
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:42 2026 by rpki-client