Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e2035303635.roa
File: 39352e3136392e3136332e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: JpuEF0ephfoLAmDX8MxjtzasgCsiSynxwG0xVvE05ak=
Subject key identifier: 79:5B:C9:E4:67:3E:96:2B:48:73:D9:C6:C7:36:61:FD:33:21:08:52
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 290C4B6C09A0978B6460850F02BBC1E60163E015
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e2035303635.roa
Signing time: Tue 03 Feb 2026 14:55:36 +0000
ROA not before: Tue 03 Feb 2026 14:50:36 +0000
ROA not after: Tue 02 Feb 2027 14:55:36 +0000
asID: 5065
IP address blocks: 95.169.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0c:4b:6c:09:a0:97:8b:64:60:85:0f:02:bb:c1:e6:01:63:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Feb 3 14:50:36 2026 GMT
Not After : Feb 2 14:55:36 2027 GMT
Subject: CN=795BC9E4673E962B4873D9C6C73661FD33210852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:87:44:06:f1:7e:15:cc:0e:61:b9:d9:e7:
f6:01:f4:82:25:58:89:76:fb:f8:08:a1:33:21:e9:
f3:b3:35:40:c3:b8:09:e3:30:24:32:79:e8:1b:d4:
e7:18:66:14:df:9d:32:ca:e9:40:bf:52:a7:ba:19:
d2:35:9a:b7:47:0f:e8:bf:9d:3b:3b:2c:2b:85:07:
9d:07:7c:51:6b:ca:06:67:3d:3f:65:cd:7a:c9:e5:
48:78:af:85:37:fa:fa:b6:7a:f5:a4:0d:ff:bc:10:
69:be:19:7b:2c:94:8b:a4:d9:0b:bd:0c:40:d5:a3:
e0:0b:e0:9a:2c:66:57:b5:5b:06:71:c5:2b:9e:34:
47:33:19:9b:6b:b2:a9:79:f2:bf:99:89:56:91:b4:
37:35:e0:7e:04:ea:cf:8d:87:67:a8:40:91:c9:52:
d3:3a:19:8b:00:2a:a7:ad:f6:16:bd:79:1e:5b:61:
da:bf:03:3e:2c:16:6a:a1:55:89:8d:fa:4c:bb:cd:
b0:d4:37:f0:da:9c:50:54:9e:4f:fa:9f:33:23:90:
c9:33:49:56:54:ac:28:31:4d:57:59:cf:e9:3a:4d:
06:4c:60:6c:f8:70:3b:62:14:e1:9f:c3:b3:a4:fc:
38:1e:2f:79:b4:51:4a:34:ef:d4:8d:47:b9:3d:17:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:C9:E4:67:3E:96:2B:48:73:D9:C6:C7:36:61:FD:33:21:08:52
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136332e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:96:87:95:ae:23:6d:34:7a:89:f5:17:37:60:6d:b9:b1:3f:
ad:ac:8b:0c:e6:b3:0c:30:3c:22:45:02:17:6d:9d:eb:73:04:
06:ac:8f:30:b8:3f:4d:ad:1a:d7:b4:64:98:90:2b:36:7f:a0:
78:87:b4:a4:27:b5:9c:67:6a:1d:ca:75:e9:4d:29:fa:ec:6f:
4d:e1:94:05:52:b8:01:9c:09:81:74:6b:fc:9b:ef:b3:dc:8c:
44:56:c4:d0:c5:81:5a:43:43:fc:17:4f:91:8b:a1:9c:52:97:
2a:57:91:8f:56:1d:e7:51:65:2d:d6:54:4f:c1:9b:42:26:4c:
9e:87:b9:06:db:29:0a:7a:38:96:ca:6a:40:fc:84:70:23:b7:
65:8e:8c:16:c8:53:cd:48:d1:e5:4c:58:86:47:4f:b4:bd:65:
94:fe:ec:c4:5c:f5:30:f8:67:2a:2c:12:83:44:3a:47:23:43:
25:cf:8f:a4:62:1f:c5:93:3e:e5:0c:8c:76:a2:76:2a:0b:9c:
28:fd:36:64:a6:c4:ca:bb:83:29:c9:c9:b2:e2:da:4b:ca:04:
96:45:69:3e:b0:6c:be:51:89:21:cd:79:6c:83:52:14:b2:79:
8e:7b:8f:ab:ae:a4:f6:24:12:d4:25:97:a8:45:e5:a3:16:43:
08:53:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:13 2026 by rpki-client