Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20313335373534.roa
File: 39352e3136392e3136342e302f32342d3234203d3e20313335373534.roa (raw, json)
Hash identifier: 2W9ToTnoe8XLpHxBHwOe7TL3WXuh+gZbq4QqnG9vJe4=
Subject key identifier: 1A:BC:FC:40:FB:46:19:5C:4A:CF:B1:02:B1:01:85:80:AF:70:F1:06
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7E54178AC9E0BDB3C777D87BA0C52313A1567C42
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20313335373534.roa
Signing time: Fri 12 Jun 2026 08:40:36 +0000
ROA not before: Fri 12 Jun 2026 08:35:36 +0000
ROA not after: Fri 11 Jun 2027 08:40:36 +0000
asID: 135754
IP address blocks: 95.169.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:54:17:8a:c9:e0:bd:b3:c7:77:d8:7b:a0:c5:23:13:a1:56:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 12 08:35:36 2026 GMT
Not After : Jun 11 08:40:36 2027 GMT
Subject: CN=1ABCFC40FB46195C4ACFB102B1018580AF70F106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:57:06:83:ed:bf:3b:c3:8b:cd:77:32:d1:
4f:f1:f2:a6:3a:0c:07:ed:3c:a0:ea:2b:d0:cb:13:
d6:22:3b:86:92:54:0f:21:ef:56:26:65:28:f9:8a:
36:45:c4:c2:e3:73:b1:e8:9b:0c:5f:bb:07:eb:20:
4c:99:8a:ce:f0:92:7c:1c:44:da:85:6f:83:02:73:
a0:09:ed:d4:94:24:03:c6:78:1a:f5:2d:48:6d:5a:
2e:9c:5b:7b:5d:88:be:d8:fa:11:74:33:fc:1c:33:
51:b9:11:83:6b:f9:b3:0c:f7:51:ae:19:85:f9:d4:
23:e3:80:ae:e9:a7:64:4f:03:79:2a:6c:36:92:b4:
75:aa:0d:33:97:a2:2e:89:fe:e9:62:9c:4c:d6:ad:
29:31:cf:c8:43:f1:cd:8f:d2:c1:9b:ba:7b:23:dd:
54:76:72:88:61:e1:e4:64:9e:d1:ad:1b:83:5b:3a:
96:85:62:82:ca:a5:d1:71:ed:88:84:b4:bf:0c:7d:
a0:1b:52:c0:b8:43:42:5b:08:40:59:65:bd:ce:28:
64:24:3b:fa:42:b1:7a:11:92:30:d6:d2:fb:cc:76:
82:d5:52:20:fc:42:e7:dd:b9:25:f8:5b:d4:a5:8a:
d3:e9:c5:28:e2:de:9d:b8:e0:ce:5b:db:fb:37:47:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:FC:40:FB:46:19:5C:4A:CF:B1:02:B1:01:85:80:AF:70:F1:06
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e20313335373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bd:c0:d5:91:85:53:00:44:f9:7c:af:b2:99:2f:b5:80:a5:
fb:0f:2a:70:32:71:13:0d:9a:8e:b7:5f:9c:89:c1:6a:bf:84:
01:51:7a:a2:69:32:b7:a7:d8:eb:76:30:c6:94:22:14:f4:b0:
68:2e:7b:b1:a7:a5:5b:29:98:7b:89:58:7d:f0:94:38:a9:b8:
c2:06:05:48:69:f8:0b:59:ba:dd:1d:87:84:37:4a:d6:c6:df:
bd:c3:c8:21:92:a0:1d:b7:90:ce:1f:9e:21:36:c0:16:8d:61:
cd:a2:71:16:92:c2:1b:c9:e6:7b:43:2c:ec:ee:ee:70:92:67:
b6:43:41:55:72:30:5c:17:8b:1d:21:07:2b:c8:71:8d:6d:fe:
e6:8d:b7:95:b6:29:2e:f2:b0:ed:3d:f7:5b:fc:cf:61:28:31:
9a:00:9c:0d:26:9f:cb:9a:c1:a8:c0:48:29:2c:96:53:8e:72:
c9:1f:10:6c:b7:5e:02:00:ad:93:f0:68:68:f8:c1:6a:56:7e:
f0:46:f7:bc:0a:65:6b:cd:2c:f3:97:d1:29:ae:a3:38:42:9e:
59:90:d8:61:27:4b:fc:d4:ff:24:a5:22:f7:04:a9:3c:79:9c:
93:ff:5a:98:e8:de:0a:53:36:9e:2a:3e:6c:68:4b:fa:5c:6f:
7d:a7:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:52:53 2026 by rpki-client