Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PJrA85sLaMrz06diEat3Ui02BumAGRiMY4YcEc22v08=
Subject key identifier: A6:7A:B3:3D:C3:1A:82:A7:F5:53:50:1A:FE:E2:22:2C:59:61:D2:43
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3FFF0479F56A2AC37CA3A72F2FC76183CD195762
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Feb 2026 00:06:02 +0000
ROA not before: Mon 23 Feb 2026 00:01:02 +0000
ROA not after: Mon 22 Feb 2027 00:06:02 +0000
asID: 834
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ff:04:79:f5:6a:2a:c3:7c:a3:a7:2f:2f:c7:61:83:cd:19:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Feb 23 00:01:02 2026 GMT
Not After : Feb 22 00:06:02 2027 GMT
Subject: CN=A67AB33DC31A82A7F553501AFEE2222C5961D243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:2e:0f:f8:bd:17:c4:22:e5:9f:72:7b:fa:
08:d0:0c:6d:b8:a0:b1:e3:4b:e9:22:43:ae:f3:56:
3d:c7:07:bd:4c:ab:24:f3:26:1f:71:ee:ca:bd:ae:
ca:15:60:a0:e4:2f:f4:c1:ae:7c:2a:a5:b0:43:2a:
94:d6:bf:14:43:4c:18:cc:57:a6:87:1a:2a:52:10:
bb:ab:ef:cc:f5:c7:af:dd:4b:51:65:90:b5:92:de:
16:f8:0a:e5:67:52:4d:17:63:c8:2a:c6:00:5d:76:
73:9c:57:a3:c7:bc:0e:ab:22:a9:62:20:c2:eb:16:
3f:2c:ed:e7:7e:3b:5e:5f:81:26:2e:99:db:fd:9c:
59:c1:42:75:6d:b3:5e:37:cd:09:df:e3:e6:cf:61:
bf:bf:59:1b:bc:32:a7:08:31:ec:29:42:4f:cf:1b:
33:84:e3:12:66:5e:66:96:96:c4:45:69:fa:5e:78:
7b:da:8d:55:49:b7:b1:ef:b9:00:54:92:13:d6:68:
3f:89:80:f1:ce:73:91:2d:1a:f1:ac:d4:19:7a:4a:
b7:03:22:5e:8a:a7:9e:ac:af:20:35:15:61:80:4b:
f7:ac:5e:55:f8:f7:d2:dd:9a:85:b4:87:11:25:f7:
34:1f:26:fe:7d:45:55:4e:3d:82:21:f9:9a:57:2e:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:B3:3D:C3:1A:82:A7:F5:53:50:1A:FE:E2:22:2C:59:61:D2:43
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:73:44:3f:2e:58:84:de:a2:e1:22:68:36:94:c3:43:bf:be:
46:fc:f0:66:cd:09:01:ac:f1:d6:a8:dd:3c:e8:95:55:eb:ca:
b7:a8:a7:8b:53:25:bb:42:7a:2e:a9:31:df:5b:e4:e4:3a:da:
9f:87:ab:8d:90:07:03:bc:ab:c9:79:a0:0b:a2:9b:85:e2:d4:
9b:df:e7:d7:4b:e4:1d:74:35:47:80:43:f4:82:0d:57:e6:10:
50:72:27:8b:87:d8:ff:f2:da:c6:85:0c:be:ac:c6:91:c7:7e:
b9:81:8f:e0:cc:fe:68:0b:87:4c:9b:b9:eb:b3:da:a8:ac:4c:
b4:3d:7d:f0:1b:4c:68:1d:f4:46:f9:90:d0:d9:4a:b7:50:ad:
47:5a:c9:5c:4c:50:8c:32:12:b9:fc:e1:72:ee:84:ce:90:8f:
47:62:11:df:67:16:7b:1d:09:c4:00:e4:06:69:be:e7:a0:d8:
d4:29:fa:0b:32:32:a8:d0:27:d9:26:79:e1:d8:df:c1:19:10:
92:ca:31:09:12:84:9c:dc:4e:8d:b7:a9:a7:50:5a:ae:93:2e:
ea:39:40:f0:57:75:9a:82:56:ee:c2:7d:15:ae:97:23:cd:54:
dd:76:cd:4b:5d:36:b7:2b:59:a7:1e:64:03:e3:48:c9:43:aa:
30:61:f2:9c
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUP/8EefVqKsN8o6cvL8dhg80ZV2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNjAyMjMwMDAxMDJaFw0yNzAyMjIwMDA2MDJaMDMxMTAvBgNV
BAMTKEE2N0FCMzNEQzMxQTgyQTdGNTUzNTAxQUZFRTIyMjJDNTk2MUQyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbS4P+L0XxCLln3J7+gjQDG24
oLHjS+kiQ67zVj3HB71MqyTzJh9x7sq9rsoVYKDkL/TBrnwqpbBDKpTWvxRDTBjM
V6aHGipSELur78z1x6/dS1FlkLWS3hb4CuVnUk0XY8gqxgBddnOcV6PHvA6rIqli
IMLrFj8s7ed+O15fgSYumdv9nFnBQnVts143zQnf4+bPYb+/WRu8MqcIMewpQk/P
GzOE4xJmXmaWlsRFafpeeHvajVVJt7HvuQBUkhPWaD+JgPHOc5EtGvGs1Bl6SrcD
Il6Kp56sryA1FWGAS/esXlX499LdmoW0hxEl9zQfJv59RVVOPYIh+ZpXLrQvAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUpnqzPcMagqf1U1Aa/uIiLFlh0kMwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV9xMA0G
CSqGSIb3DQEBCwUAA4IBAQChc0Q/LliE3qLhImg2lMNDv75G/PBmzQkBrPHWqN08
6JVV68q3qKeLUyW7QnouqTHfW+TkOtqfh6uNkAcDvKvJeaALopuF4tSb3+fXS+Qd
dDVHgEP0gg1X5hBQcieLh9j/8trGhQy+rMaRx365gY/gzP5oC4dMm7nrs9qorEy0
PX3wG0xoHfRG+ZDQ2Uq3UK1HWslcTFCMMhK5/OFy7oTOkI9HYhHfZxZ7HQnEAOQG
ab7noNjUKfoLMjKo0CfZJnnh2N/BGRCSyjEJEoSc3E6Nt6mnUFquky7qOUDwV3Wa
glbuwn0VrpcjzVTdds1LXTa3K1mnHmQD40jJQ6owYfKc
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:08 2026 by rpki-client