Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20343032323635.roa
File: 39332e39352e3131342e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: XpI1frjDCdiqqdjI8V0/ftv5/Y6j8UuAYvwRLMQoOgQ=
Subject key identifier: 5B:40:92:7B:E6:B8:76:C4:50:41:45:B1:8A:05:C3:4B:24:D3:5A:F2
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 50C6B3D86778F3050DE68710E737E62EEB7FBE38
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20343032323635.roa
Signing time: Mon 21 Sep 2026 06:10:18 +0000
ROA not before: Mon 21 Sep 2026 06:05:18 +0000
ROA not after: Mon 20 Sep 2027 06:10:18 +0000
asID: 402265
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c6:b3:d8:67:78:f3:05:0d:e6:87:10:e7:37:e6:2e:eb:7f:be:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 21 06:05:18 2026 GMT
Not After : Sep 20 06:10:18 2027 GMT
Subject: CN=5B40927BE6B876C4504145B18A05C34B24D35AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:2e:dd:54:38:fc:e8:47:93:90:d2:d9:e2:
5f:19:cf:2a:58:1c:53:79:83:91:cd:16:19:9d:02:
8a:2e:5c:53:a7:ee:3e:56:fd:69:cd:88:ea:82:00:
85:87:12:8c:89:9a:1b:f6:b0:30:56:93:e4:9e:a9:
b7:2a:d2:f7:91:98:4b:b9:92:ff:7d:3f:96:80:4b:
d6:48:b0:2c:f9:19:f4:c3:7a:4c:86:5f:18:63:74:
55:86:b7:f3:79:3f:b8:c0:95:98:e2:8f:7f:ec:94:
e9:07:d6:b3:03:6e:ad:7f:e3:66:4e:95:21:df:a8:
bc:99:fa:d9:ec:8e:67:93:6e:31:19:ed:cc:e4:3f:
d5:3b:bb:5c:7a:38:5f:ae:59:9c:23:8e:1a:35:97:
d2:08:3e:e8:4b:d2:4c:15:26:53:5a:10:95:39:63:
b4:84:c1:aa:0e:05:de:46:49:fd:74:99:aa:55:f7:
fa:90:83:6d:99:61:30:76:d8:29:24:0a:21:93:9b:
a1:9b:f2:9a:0f:c3:a7:d2:41:b2:9e:09:1a:54:08:
ce:7a:02:4a:81:33:a8:c4:0e:f7:31:ab:6c:08:ee:
49:96:b7:5d:0d:9c:21:c5:c0:b9:5b:a8:17:e2:d4:
4e:28:1d:de:99:29:a6:5f:91:61:28:10:95:8d:37:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:92:7B:E6:B8:76:C4:50:41:45:B1:8A:05:C3:4B:24:D3:5A:F2
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bd:64:0b:5d:b4:08:68:1a:41:c5:07:ac:15:ce:90:46:7f:
0f:08:03:de:e3:00:7f:36:36:e3:8f:24:20:10:d4:56:a7:eb:
e1:89:29:1b:af:b3:88:ca:18:c0:12:ae:b7:92:c6:ee:53:22:
65:bb:6d:4c:44:95:2f:27:e5:6d:bc:57:93:38:dd:ca:fa:f9:
74:31:78:7f:ea:68:a2:ac:8d:a2:f0:2c:71:81:4f:99:5e:4d:
5c:23:a6:79:74:73:c0:c7:af:ce:be:ad:77:4e:b4:8a:98:18:
83:95:5d:b2:a6:71:a8:ab:1f:78:09:f1:b8:70:f0:a2:9b:0a:
c3:6a:9f:d6:b4:55:ee:30:00:80:bf:bf:95:44:2a:e4:36:e0:
d5:07:29:97:1d:3c:f2:a0:0e:3f:12:28:ed:86:6e:a7:c8:ff:
77:19:d4:aa:40:53:4b:99:a0:da:92:07:8c:e4:f3:98:84:97:
dd:0c:d9:d4:fc:46:0c:43:99:3d:44:b6:42:dc:03:4f:9c:8a:
97:c1:10:bb:e2:15:ae:91:df:a7:0c:0a:7a:e8:a7:74:19:4b:
3a:ac:2c:28:b7:32:15:01:cb:fd:98:34:99:1f:06:73:69:e0:
3b:b2:08:bd:ee:fe:72:13:c1:22:11:23:76:6d:9e:21:84:d6:
b0:5d:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:54 2026 by rpki-client