Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e2039333034.roa
File: 39332e39352e3131342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: AmPh9mqd0gwKu0juVvtCR9BPch+T6TfO2inFFXmyRM4=
Subject key identifier: 76:2E:AC:D4:49:62:26:66:47:4A:DC:40:53:C3:61:BA:0F:E3:A9:7F
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 351357B3DEF48902F9F83CA0630BF1C1F00AC7F4
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e2039333034.roa
Signing time: Mon 04 Aug 2025 13:49:46 +0000
ROA not before: Mon 04 Aug 2025 13:44:46 +0000
ROA not after: Mon 03 Aug 2026 13:49:46 +0000
asID: 9304
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:13:57:b3:de:f4:89:02:f9:f8:3c:a0:63:0b:f1:c1:f0:0a:c7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Aug 4 13:44:46 2025 GMT
Not After : Aug 3 13:49:46 2026 GMT
Subject: CN=762EACD449622666474ADC4053C361BA0FE3A97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:92:21:d2:93:5d:f8:b5:15:5d:49:39:8f:
3a:23:45:34:da:84:8d:6f:74:42:6d:5f:16:bb:80:
35:c7:76:8e:19:b8:8e:11:a8:ed:dc:02:93:30:80:
30:4a:c9:fd:ec:0e:d4:86:d0:5d:0e:be:0d:43:b5:
6f:aa:f1:e8:f1:b5:e4:59:35:7b:ed:24:03:24:10:
d7:2f:68:6e:2b:39:04:46:3f:c4:6a:5f:88:ca:c2:
b6:16:75:62:35:97:74:ab:43:40:a6:5d:a8:71:f9:
dc:81:55:9e:92:28:1f:b8:da:90:d7:97:8b:5e:55:
ca:e1:be:76:84:78:b8:9a:c9:87:19:a0:6c:f0:ce:
63:1c:07:3f:3a:41:a8:d0:06:09:0f:af:64:a9:e5:
ff:51:bb:3c:e4:d8:38:6e:42:f0:e4:63:62:ea:f7:
c4:08:58:18:e3:8d:8c:16:ed:a9:96:ab:55:31:fb:
6a:9b:79:56:c4:64:0e:8a:fc:dc:fc:c2:72:fd:4a:
c4:fc:fe:0b:c1:3b:cb:96:bb:ca:aa:63:6f:cf:50:
9d:35:1b:63:ee:5b:af:64:f9:1e:a5:e9:de:ce:3c:
f1:ad:23:60:46:de:cf:fb:cc:0d:f8:8b:3c:64:65:
ed:10:5b:ef:ff:c6:39:8d:33:25:05:14:28:42:81:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2E:AC:D4:49:62:26:66:47:4A:DC:40:53:C3:61:BA:0F:E3:A9:7F
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2e:c5:25:e9:d9:18:a4:7b:1d:38:9a:26:44:a8:df:9c:3a:
1f:3e:9b:88:25:c5:6b:e7:21:80:69:46:49:c6:c8:51:35:2c:
27:17:c8:27:dd:c8:1b:29:87:4b:cd:f6:5e:84:e5:44:cc:9b:
aa:41:8d:7c:30:13:7c:c5:6b:1b:cf:c7:90:05:49:f7:46:06:
6c:e8:b1:50:02:7a:a3:cc:fc:ae:e3:a3:a5:b1:13:29:27:3d:
b4:4e:0b:c3:12:97:dd:65:58:e8:88:b9:4f:db:36:e8:7c:5e:
0d:2b:c3:61:57:f6:06:a4:24:f8:21:c9:2e:3e:3e:50:e2:de:
65:db:22:94:29:48:f9:27:16:cb:b3:d0:c4:2f:d2:c5:61:17:
e7:e5:05:1d:b2:21:4d:24:2b:36:d9:c5:ca:b5:8f:64:62:ce:
7a:7a:60:80:4a:6b:6c:18:34:9d:f2:16:75:fd:4b:d0:4e:58:
bc:1f:76:39:ec:d0:3a:3f:f7:15:b2:17:37:3b:f8:d0:25:c2:
17:1d:dc:28:4e:66:ab:10:ff:f9:b5:60:91:a4:92:90:d9:df:
33:f7:08:0c:53:f2:57:53:c4:64:d0:be:06:c5:43:be:23:f8:
9e:9a:dd:57:18:b7:30:bc:c0:98:a0:1f:f5:3b:0e:67:b8:d0:
7b:c6:f1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:39 2025 by rpki-client