Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e203136313235.roa
File: 39352e3136392e3136342e302f32342d3234203d3e203136313235.roa (raw, json)
Hash identifier: aj4OUZvoJq+U0AKwuK7Sp8plgctJ6Yuvqf3ESjh7Rqw=
Subject key identifier: 9E:9A:BA:63:32:64:EA:96:9A:4F:35:55:F0:20:58:C6:DB:44:12:3D
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 23E52FAA40C6DC9456B781A4557140BCCB74805D
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e203136313235.roa
Signing time: Wed 22 Oct 2025 20:55:09 +0000
ROA not before: Wed 22 Oct 2025 20:50:09 +0000
ROA not after: Wed 21 Oct 2026 20:55:09 +0000
asID: 16125
IP address blocks: 95.169.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e5:2f:aa:40:c6:dc:94:56:b7:81:a4:55:71:40:bc:cb:74:80:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 22 20:50:09 2025 GMT
Not After : Oct 21 20:55:09 2026 GMT
Subject: CN=9E9ABA633264EA969A4F3555F02058C6DB44123D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:17:de:d1:89:87:f5:0a:d6:35:bb:e6:b3:
72:d7:00:2f:73:6f:81:94:83:4c:ba:88:26:48:64:
8e:4b:13:e2:30:82:57:cd:c8:36:cb:18:d8:45:4e:
81:ae:dc:e1:2d:dc:bb:a7:16:4b:22:f2:72:49:d1:
b1:4d:7f:d4:f3:1b:c9:62:85:1d:02:bc:d2:76:ef:
28:03:2e:98:b7:f6:c3:63:8c:76:35:10:97:d6:03:
7e:99:1a:f9:50:3e:06:36:29:75:c1:6b:2a:73:02:
dd:d4:87:af:9c:ed:e0:b1:3e:98:e9:b0:b8:d9:e3:
99:b0:86:b1:41:b7:c9:9a:ad:fc:b7:c7:0c:b3:35:
90:e5:c7:f5:4d:45:ef:df:18:98:37:3c:20:b1:06:
51:31:d9:d7:f9:60:6d:92:9c:50:b6:5e:46:cb:77:
7e:44:98:05:9d:0d:03:af:37:0b:c2:4c:34:e7:d1:
53:98:4b:86:54:d6:33:40:66:8f:5b:65:a3:2d:0d:
cd:9b:9b:e5:29:c2:87:ff:90:26:8c:44:2d:ad:9a:
55:cd:35:26:15:29:b5:35:65:80:cb:d9:34:89:c2:
57:f5:45:22:2f:b1:a9:be:47:af:6f:3b:e5:15:95:
d8:36:6f:5e:47:f8:e0:ad:cc:76:f3:b1:f6:da:b8:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9A:BA:63:32:64:EA:96:9A:4F:35:55:F0:20:58:C6:DB:44:12:3D
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136342e302f32342d3234203d3e203136313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:40:c8:c0:de:74:df:20:86:e7:9e:75:0e:f0:ed:d0:73:fe:
3b:8e:55:7b:28:39:70:e9:4f:d1:a8:38:23:1e:fe:51:5a:1e:
81:68:01:f2:cb:8f:a3:88:e2:4b:2a:20:9d:f4:c5:9e:40:36:
42:8d:fb:08:d7:80:04:6a:cf:86:83:92:9d:65:68:5b:d2:fe:
d7:28:33:f2:b9:ff:0f:b6:ca:9c:f8:c2:27:e8:26:ae:a5:b6:
a4:26:0f:c7:25:12:02:1b:08:4f:f9:d1:63:83:38:b5:66:e5:
72:6e:3a:bd:53:76:7d:f6:95:5f:1c:24:3b:ba:fe:8f:77:54:
38:e5:a7:ab:77:16:a0:aa:3a:ea:8f:ab:a4:ec:40:9e:54:13:
19:fc:79:ba:82:70:b8:3c:42:1f:50:24:3a:cb:49:3f:a3:9d:
74:5f:3f:dd:62:2b:9d:b3:df:60:9f:87:18:9a:c7:c8:ab:82:
32:cd:ed:2d:cc:55:5a:b0:50:85:27:ce:d8:ef:66:92:20:d2:
43:c1:cd:64:8c:6f:82:b1:e6:17:fa:55:84:3b:28:6c:8e:a5:
77:77:e0:9a:42:f1:e7:ac:3e:9c:d1:3b:60:af:4b:6f:f3:ee:
f2:b7:be:99:27:09:f2:62:13:e9:ff:67:0d:3e:60:b4:18:51:
89:99:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:20:23 2025 by rpki-client