Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4eq9712vDC2KzjLiI/85dC0fof3FTr42toEycm2GzrQ=
Subject key identifier: 75:D0:D6:AE:63:F3:09:D8:76:95:73:04:28:55:6D:FB:02:C8:0C:DF
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 572676E295642FDD6E7953943858F4E007A8B36A
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 06:33:39 +0000
ROA not before: Sun 20 Sep 2026 06:28:39 +0000
ROA not after: Sun 19 Sep 2027 06:33:39 +0000
asID: 834
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:26:76:e2:95:64:2f:dd:6e:79:53:94:38:58:f4:e0:07:a8:b3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 20 06:28:39 2026 GMT
Not After : Sep 19 06:33:39 2027 GMT
Subject: CN=75D0D6AE63F309D87695730428556DFB02C80CDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:91:b8:6e:73:46:b3:2d:ea:70:10:e2:78:
a1:d8:46:5f:28:57:07:69:e5:92:15:2a:03:47:b3:
00:ed:3f:cc:a3:b6:f0:f2:ad:9b:63:fe:55:28:22:
51:55:d6:5a:7c:b5:e8:2b:f8:af:06:68:ce:df:61:
b0:56:6d:fa:cd:ec:c4:e9:06:59:71:21:96:4e:01:
da:4b:d7:90:b1:53:11:74:2b:e0:64:eb:06:35:18:
52:4a:bf:bd:9d:c2:c6:b6:b2:1b:ce:eb:ba:cf:b5:
d3:25:ab:a5:4b:a8:31:23:82:e6:37:23:74:45:3b:
37:c7:88:00:83:f1:04:27:38:96:b5:4a:d8:1d:85:
df:16:a6:7a:15:71:60:fa:af:30:62:33:36:b2:9d:
db:f8:e3:00:dd:ec:ae:4c:a7:ac:71:a3:61:c4:35:
a1:94:b5:d7:f9:d6:df:3e:3a:06:4c:27:46:02:f6:
e4:b4:0a:d1:a7:8b:6e:48:bd:80:d3:dd:25:01:24:
e2:c9:d6:ea:77:ee:06:78:b4:01:bd:65:d8:62:49:
da:7d:1e:dc:1f:58:9b:eb:7d:37:c3:de:88:40:bf:
7b:2e:f9:7b:a7:a6:8d:c8:c1:e0:8b:8d:e3:72:52:
8d:52:84:20:e2:4c:a8:a2:66:97:a4:79:89:4c:f7:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:D6:AE:63:F3:09:D8:76:95:73:04:28:55:6D:FB:02:C8:0C:DF
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e1:3f:61:ce:79:d2:29:be:21:c2:83:03:24:05:ae:b1:17:
54:7f:a1:8b:37:20:f1:be:b4:a6:d9:87:86:ee:80:ac:e0:1d:
6b:0a:0b:49:49:26:26:c1:c3:e3:ee:1c:d4:85:f5:76:5b:58:
a9:cc:2e:09:fb:b4:37:02:fe:28:52:ea:ba:d7:c6:1f:df:8a:
46:70:7a:45:35:d6:61:47:23:2d:46:43:d4:fb:aa:6f:30:25:
95:d9:6d:28:5f:03:c3:af:2a:26:05:5d:4c:b0:0a:29:5c:5b:
91:5f:68:37:7b:b5:2a:ae:c8:8b:ad:85:e3:8a:06:2f:9b:65:
a7:f6:21:ce:7a:eb:c6:c7:6a:6b:23:e6:85:68:13:f2:0b:98:
6e:c7:f5:f4:96:b4:92:ed:28:51:9d:3f:4b:9d:75:b4:4c:cc:
ec:b0:b9:5a:b3:65:40:f3:af:0e:35:40:2b:e8:f0:90:f7:cc:
9e:c3:50:05:e5:f7:4b:a2:40:3a:da:30:52:a0:42:93:83:4f:
1a:46:39:c4:eb:02:36:80:7f:10:5f:ef:70:77:94:fa:d1:48:
21:e4:06:3b:48:1f:29:9d:d9:7d:a4:68:23:c8:19:b1:d6:12:
21:02:58:f2:64:b5:c7:6f:08:30:81:6c:f0:9e:1f:80:b8:54:
f6:ac:52:45
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUVyZ24pVkL91ueVOUOFj04Aeos2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNjA5MjAwNjI4MzlaFw0yNzA5MTkwNjMzMzlaMDMxMTAvBgNV
BAMTKDc1RDBENkFFNjNGMzA5RDg3Njk1NzMwNDI4NTU2REZCMDJDODBDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCToJG4bnNGsy3qcBDieKHYRl8o
Vwdp5ZIVKgNHswDtP8yjtvDyrZtj/lUoIlFV1lp8tegr+K8GaM7fYbBWbfrN7MTp
BllxIZZOAdpL15CxUxF0K+Bk6wY1GFJKv72dwsa2shvO67rPtdMlq6VLqDEjguY3
I3RFOzfHiACD8QQnOJa1Stgdhd8WpnoVcWD6rzBiMzayndv44wDd7K5Mp6xxo2HE
NaGUtdf51t8+OgZMJ0YC9uS0CtGni25IvYDT3SUBJOLJ1up37gZ4tAG9ZdhiSdp9
HtwfWJvrfTfD3ohAv3su+Xunpo3IweCLjeNyUo1ShCDiTKiiZpekeYlM96ipAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUddDWrmPzCdh2lXMEKFVt+wLIDN8wHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV9yMA0G
CSqGSIb3DQEBCwUAA4IBAQBg4T9hznnSKb4hwoMDJAWusRdUf6GLNyDxvrSm2YeG
7oCs4B1rCgtJSSYmwcPj7hzUhfV2W1ipzC4J+7Q3Av4oUuq618Yf34pGcHpFNdZh
RyMtRkPU+6pvMCWV2W0oXwPDryomBV1MsAopXFuRX2g3e7UqrsiLrYXjigYvm2Wn
9iHOeuvGx2prI+aFaBPyC5hux/X0lrSS7ShRnT9LnXW0TMzssLlas2VA868ONUAr
6PCQ98yew1AF5fdLokA62jBSoEKTg08aRjnE6wI2gH8QX+9wd5T60Ugh5AY7SB8p
ndl9pGgjyBmx1hIhAljyZLXHbwgwgWzwnh+AuFT2rFJF
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:26:27 2026 by rpki-client