Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7ZgcCpYFR8HMsnY8UXDNPfwnRDp4xij9/4U/GxNHhy8=
Subject key identifier: 6C:21:21:07:C8:64:1F:41:41:76:23:0B:A1:0F:AE:AA:43:D5:1D:88
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 0A4FDCBEBD611355EE02C9474E6FF768C55ACDC1
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 10:37:20 +0000
ROA not before: Sun 20 Sep 2026 10:32:20 +0000
ROA not after: Sun 19 Sep 2027 10:37:20 +0000
asID: 834
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4f:dc:be:bd:61:13:55:ee:02:c9:47:4e:6f:f7:68:c5:5a:cd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 20 10:32:20 2026 GMT
Not After : Sep 19 10:37:20 2027 GMT
Subject: CN=6C212107C8641F414176230BA10FAEAA43D51D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:79:78:0e:57:b7:1a:78:c6:42:8e:fb:80:47:
29:59:23:3c:dd:2c:a7:1e:7e:52:bd:7f:2c:27:be:
c2:fe:cf:68:4b:e8:7e:9e:85:60:38:41:fb:7a:a2:
73:74:cb:d8:bb:8f:19:4c:0e:fb:72:ee:89:b2:71:
b6:86:bb:29:03:3f:42:36:15:92:ac:34:98:ad:eb:
56:68:86:07:b7:7c:52:b3:c7:f1:33:ac:5d:ac:d3:
c0:93:4f:e5:09:70:cd:a2:f7:37:32:18:e4:d3:5a:
54:c3:7d:40:cf:8a:9f:5e:0c:8b:13:77:f9:c3:b7:
8b:83:f4:2a:65:8a:06:fe:bc:24:3e:8d:d2:77:3c:
29:72:e6:4c:a4:40:77:63:f7:3d:34:35:5c:2b:58:
55:0d:53:49:96:fd:c0:32:c6:ac:e6:82:44:18:e2:
9b:00:b8:3c:73:88:f8:ab:b6:f0:31:f5:f2:8f:d1:
f8:a6:7c:7b:43:1d:75:c0:16:59:00:24:5c:0a:3f:
7b:0e:63:aa:73:6d:fc:1a:15:43:f8:28:6c:d5:be:
3a:3d:6c:29:f5:1b:3d:f2:4f:ce:a5:14:99:7c:61:
08:c2:e9:4f:6f:70:48:8d:27:4a:12:41:0b:81:d4:
b8:c9:10:43:94:ff:b6:e2:d6:3b:65:c6:27:16:c9:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:21:07:C8:64:1F:41:41:76:23:0B:A1:0F:AE:AA:43:D5:1D:88
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ff:c4:b8:40:46:a5:6d:48:22:92:04:49:aa:48:91:c2:7a:
5f:dd:fc:68:8c:65:6d:77:4b:19:28:a1:06:1c:62:22:d6:eb:
b6:dc:4e:f2:79:57:78:7b:9b:77:67:59:5f:a8:f0:1e:c4:0a:
a3:df:57:a8:65:88:6a:15:22:e1:fb:a8:10:6e:8c:81:3a:50:
39:fb:c4:36:12:51:38:0e:e8:ce:ca:f9:12:35:ac:d5:91:e6:
f1:b5:da:00:95:45:4c:5f:64:83:d8:80:8e:2c:8b:f9:28:78:
6f:08:f2:40:4e:69:fb:3b:e3:b5:da:85:2b:9c:7f:ae:64:bb:
b4:0f:a1:ca:be:6e:cd:b8:2b:f5:81:79:3e:a1:39:8a:fa:55:
32:5c:91:f0:26:5c:ec:26:b8:a4:cf:69:5f:9b:c7:93:e9:2a:
1e:2a:80:c2:1c:32:00:9b:07:1d:7b:58:6b:fe:19:e3:46:02:
c1:13:8d:1e:c2:39:d7:a0:91:b8:ad:a4:fb:1c:c4:f0:87:97:
60:45:20:03:e5:d5:c5:3c:d4:1c:46:06:e6:8f:d3:a8:a4:7b:
24:f5:0e:ae:76:1e:0f:44:0d:0d:e8:53:b0:82:9f:cc:e2:ae:
0c:82:3e:61:90:4c:13:d2:47:3e:f1:4a:f1:05:e1:c0:de:ac:
ed:1a:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:39:11 2026 by rpki-client