Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Yvn2hgfWBB67lUsg5bePvjQ1LejvgLP9iHpOC2lrTXg=
Subject key identifier: B9:E8:09:CD:44:9A:CE:7F:0D:CE:3A:72:23:FE:B5:00:60:1E:7A:69
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 4CEF7430574C9684912C890CE3856FD00C455291
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
Signing time: Mon 08 Jun 2026 16:37:20 +0000
ROA not before: Mon 08 Jun 2026 16:32:20 +0000
ROA not after: Mon 07 Jun 2027 16:37:20 +0000
asID: 834
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ef:74:30:57:4c:96:84:91:2c:89:0c:e3:85:6f:d0:0c:45:52:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jun 8 16:32:20 2026 GMT
Not After : Jun 7 16:37:20 2027 GMT
Subject: CN=B9E809CD449ACE7F0DCE3A7223FEB500601E7A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:b0:b2:03:20:6e:f1:f3:f9:1e:53:84:aa:
97:8a:17:77:8e:1a:d0:c1:3d:cb:37:ea:81:8a:cd:
b3:14:80:8d:d9:d1:f8:7d:f8:5d:50:38:ea:32:4c:
10:2f:eb:34:cf:3e:13:d8:9f:41:93:c9:fb:c9:32:
27:b7:08:76:83:9d:78:3c:99:82:af:6a:90:34:51:
b6:07:1f:7b:9a:e0:0b:f6:04:b8:ce:7a:12:20:37:
33:4b:5e:0d:42:38:3f:2f:f9:4a:59:a4:5e:10:54:
88:9d:4e:6c:9b:f6:08:af:1b:74:23:0f:8b:2e:c2:
45:1e:d8:8c:ee:03:36:86:35:5e:bc:e0:50:b7:49:
45:f6:05:fa:ae:81:e8:82:9e:9a:26:f7:7d:21:f2:
1f:31:72:f9:7b:9a:da:0e:62:c1:fc:d8:4b:a2:08:
c7:75:82:47:07:9d:e5:fa:20:10:4a:53:16:e5:03:
63:da:d5:ff:ef:a0:c4:77:1c:64:55:57:d5:6c:c9:
f8:35:2b:bc:3f:60:c1:0d:20:71:5a:fc:81:70:9f:
14:f9:87:19:6e:c2:50:5b:e3:54:31:bb:38:cf:66:
19:61:47:ce:3b:f2:b0:74:5a:8c:17:b0:4f:0f:a9:
f1:97:02:72:6b:6e:f1:08:ef:45:e3:d1:92:08:10:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:09:CD:44:9A:CE:7F:0D:CE:3A:72:23:FE:B5:00:60:1E:7A:69
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:27:4e:cd:c3:10:8d:66:9e:b0:17:a0:74:43:33:1e:46:78:
c0:d3:ca:17:b9:f8:bb:33:3a:c4:66:34:0b:a7:54:38:0a:6e:
a3:3a:25:ae:6a:38:82:3a:a5:64:cd:8b:01:64:39:42:ca:47:
90:62:32:14:f5:7e:8b:fb:77:da:e1:63:c4:ec:a7:ce:37:e6:
09:bb:6e:e2:3e:32:8d:1f:96:63:83:b3:cf:b9:60:d2:26:07:
cd:4e:8a:f9:bc:72:20:9c:4f:8f:27:26:9f:a3:11:e1:b3:37:
8e:28:8c:2b:c9:b9:62:f8:4b:05:5d:85:9c:8f:b1:d3:ce:5d:
05:35:d5:8b:fb:6e:42:38:4b:54:2e:07:d3:80:26:a4:0a:91:
2e:82:11:2f:93:c9:f7:f9:fa:99:0a:cf:63:98:f2:ae:09:a6:
6c:ee:8d:48:70:41:c3:24:99:74:c9:3d:c0:f2:9e:80:bd:82:
b0:b1:96:eb:f9:e2:a1:15:20:1b:65:ec:38:0b:1c:89:cd:17:
b5:46:b6:cb:ea:65:36:a9:30:4e:60:61:b2:a6:4c:26:a7:38:
48:72:bf:58:b2:55:c8:f1:bd:9d:25:11:c9:ba:98:fd:58:7a:
30:22:09:7b:9a:51:d3:6d:5c:2d:f7:6b:1c:bb:44:5a:88:f9:
67:a6:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:12 2026 by rpki-client