Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e2039333034.roa
File: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: ogcbgRhECNKG4+F/6zpdBOh/u0edVYhkw7e/c907t3Y=
Subject key identifier: A1:B1:BA:98:26:41:1E:10:80:59:8D:96:ED:22:AC:2B:19:AB:65:6A
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 4F6990AE62A7FA5D50898CC92D467286EBE2AB48
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e2039333034.roa
Signing time: Mon 04 Aug 2025 13:49:46 +0000
ROA not before: Mon 04 Aug 2025 13:44:46 +0000
ROA not after: Mon 03 Aug 2026 13:49:46 +0000
asID: 9304
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:69:90:ae:62:a7:fa:5d:50:89:8c:c9:2d:46:72:86:eb:e2:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Aug 4 13:44:46 2025 GMT
Not After : Aug 3 13:49:46 2026 GMT
Subject: CN=A1B1BA9826411E1080598D96ED22AC2B19AB656A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:59:93:c1:30:31:a1:f3:c6:4a:f6:35:e5:
c5:42:16:5d:99:6d:a1:1b:a1:b7:00:43:df:4b:e6:
a7:c0:ae:32:d5:3f:cb:5c:f7:91:db:89:2f:e2:97:
a3:4f:9d:12:f6:df:29:22:e3:94:e9:c1:0e:31:6d:
f1:32:bb:12:99:95:a9:0d:7c:0e:88:8a:26:11:9d:
13:35:23:94:f2:d1:d9:b2:df:35:e3:5c:61:35:0a:
c9:73:7a:05:97:aa:b7:25:e1:58:5c:c2:9e:58:eb:
4f:43:5a:51:bd:a1:b9:26:75:b0:f3:43:2f:21:c6:
f5:e2:a8:ab:88:34:89:f6:af:6c:82:9d:87:9d:7a:
be:c3:d9:47:18:6b:27:fd:d8:66:f9:c5:b5:eb:61:
af:14:cd:77:85:fc:86:61:5c:b1:2c:36:0c:b0:27:
5d:6a:94:3b:b5:69:de:80:c2:8d:af:4f:3d:74:6f:
fb:b9:ea:79:5c:4a:6e:55:e1:af:e2:14:1e:5a:c4:
64:87:c5:4a:7a:59:9c:a6:20:bb:5c:a5:2d:ac:94:
25:a3:da:7a:af:fc:03:d1:bc:41:ea:8d:b2:d2:ef:
14:9d:af:94:a7:69:27:a6:cb:f0:5b:a1:81:6a:44:
1a:51:90:75:07:1a:6d:ff:7b:a9:28:88:c0:f6:25:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B1:BA:98:26:41:1E:10:80:59:8D:96:ED:22:AC:2B:19:AB:65:6A
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a4:ff:88:f5:24:0c:03:59:ab:38:fc:33:77:e8:8b:82:03:
04:16:c8:f2:6a:52:9b:b6:e2:ac:11:40:e9:db:ca:31:22:5b:
54:92:32:d9:3b:c4:8e:34:43:35:2d:ab:0d:ce:27:49:72:5b:
ab:ae:69:23:9e:01:e3:97:25:87:46:6c:e8:46:43:9d:d6:45:
e9:4f:ce:92:a3:5c:20:92:f2:e1:26:23:31:08:9d:52:5e:70:
ba:2b:f7:f9:db:12:f4:83:6f:77:09:c8:ad:e6:1c:1c:8d:74:
62:c5:2e:19:cc:27:b1:ab:f7:38:69:5c:ac:d0:d8:dd:2b:e5:
c6:77:55:26:e9:97:46:45:63:e3:bf:e4:20:e1:fb:7d:02:8a:
fa:f5:3b:72:8a:71:2f:8a:3e:45:cb:d2:f4:55:f3:58:9b:b8:
99:ea:a0:3b:10:d1:7a:b0:c4:02:9e:1c:30:43:e5:e8:c1:9e:
3e:84:b8:df:bc:94:e3:a6:32:fd:3f:19:57:64:1d:c3:6f:80:
09:4a:91:ad:8c:ba:34:b0:a6:8b:e0:40:a4:02:7c:e4:09:59:
a2:ca:3d:c2:9c:e7:31:01:40:ea:27:21:16:cd:8b:ef:05:17:
1b:cf:88:d9:e4:27:05:c9:a6:2f:b5:5f:db:69:41:11:d6:2f:
aa:da:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:48 2025 by rpki-client