Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136312e302f32342d3234203d3e203331313033.roa
File: 39352e3136392e3136312e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: m4Um1BmjOTUf/Kb4LjS3+PSv1Axx5p/vP5z6FzbFZqQ=
Subject key identifier: 74:9F:E5:6D:2F:74:E1:17:F8:ED:4F:14:40:32:94:A5:74:E8:5A:4D
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 19DE68EA5E7D340EE1A2DA7D035208BC3B58D360
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136312e302f32342d3234203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 10:46:59 +0000
ROA not before: Fri 03 Apr 2026 10:41:59 +0000
ROA not after: Fri 02 Apr 2027 10:46:59 +0000
asID: 31103
IP address blocks: 95.169.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:de:68:ea:5e:7d:34:0e:e1:a2:da:7d:03:52:08:bc:3b:58:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 10:41:59 2026 GMT
Not After : Apr 2 10:46:59 2027 GMT
Subject: CN=749FE56D2F74E117F8ED4F14403294A574E85A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:e0:3b:f9:18:50:dd:ef:23:b1:ea:5e:e6:
8f:ae:79:2e:0b:ce:02:e3:c7:2f:aa:e5:86:0b:c3:
3e:3d:0c:a1:32:11:fc:ff:7b:2a:2c:1c:d2:05:dd:
45:6e:e0:b9:8f:2c:93:f6:2d:62:2b:e4:06:99:06:
2d:b6:ca:2c:1a:a4:58:21:0a:31:d1:0e:04:1a:ae:
16:28:fb:06:b2:3d:87:4f:7f:e8:51:95:21:ff:5e:
d6:8a:5e:95:0d:85:07:7e:f7:53:38:cb:fe:a7:f2:
a8:64:5b:ba:99:26:46:f8:00:95:e9:88:dc:6e:5c:
68:2e:ea:c5:80:4d:fd:66:9f:b2:9f:55:60:82:6a:
c8:5d:8a:02:79:41:77:18:81:d3:43:9f:e4:63:3a:
b1:1c:ae:0c:1b:92:20:78:cf:c1:20:1a:16:f5:d9:
37:b3:e3:71:98:ea:0f:44:f6:f9:a9:93:58:e7:94:
7b:55:51:ec:18:8d:96:c3:bd:00:34:24:8d:d7:14:
ab:80:c8:f5:89:0a:85:3e:96:0c:1e:e6:dc:b3:ec:
99:32:0a:b8:55:f8:4a:5e:12:98:ea:68:ba:5d:3b:
d4:a6:a2:3e:80:95:36:04:d1:fb:9a:14:81:2a:13:
0c:de:de:86:4f:5b:18:c2:18:0c:0f:5e:48:25:7a:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:E5:6D:2F:74:E1:17:F8:ED:4F:14:40:32:94:A5:74:E8:5A:4D
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136312e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:00:e6:5e:32:8d:27:08:5d:1d:de:38:9e:ae:46:30:8b:95:
79:0e:3e:e9:bb:83:9a:72:c1:51:2d:76:38:69:96:b9:21:84:
74:a9:06:55:72:83:be:cc:15:83:1f:37:23:c2:b9:6f:54:8d:
c3:1d:27:40:b5:fc:7e:a0:44:e2:d3:2c:90:2c:bf:e2:c0:86:
c3:fd:0d:b3:bf:e8:d4:84:e9:09:4c:0f:95:31:02:81:39:65:
40:de:c0:f3:0f:06:4b:90:01:0b:2b:51:dc:32:48:4f:3a:8a:
0c:5d:b3:8b:1c:e6:c0:ed:bf:e5:35:bf:1f:6b:58:69:d3:42:
f4:f5:54:2b:a3:62:d0:ea:ea:b1:55:ed:2f:54:83:f2:d4:7f:
99:9e:92:c5:01:ee:99:15:cb:b6:af:f3:10:c1:1d:90:f7:37:
d5:f8:fb:5f:44:70:c4:a6:91:06:1a:20:fc:84:cd:f1:7d:c1:
11:24:5e:52:de:8b:43:bd:ab:c1:01:ac:69:0b:ad:a6:8d:30:
27:da:f8:37:a1:46:ec:81:76:3e:e5:8e:8e:b6:16:95:d9:14:
80:69:21:c5:44:9b:93:44:29:ec:9a:76:ec:b0:8d:f2:47:15:
1c:05:51:15:75:cb:05:bd:e7:4e:ba:80:99:02:ec:f1:56:ee:
8a:f0:dd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:27 2026 by rpki-client