Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa
File: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (raw, json)
Hash identifier: LG+b3uRwvmpGUgwNoweoVUDnxkxpA6GOoF5C8LOcswA=
Subject key identifier: BB:81:F3:96:84:23:76:DF:7C:E6:C9:75:BD:F9:BA:1F:24:84:09:05
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 68CFAB9E022F0C0F2386D930E1B874FECA916C35
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa
Signing time: Thu 01 Oct 2026 15:49:35 +0000
ROA not before: Thu 01 Oct 2026 15:44:35 +0000
ROA not after: Thu 30 Sep 2027 15:49:35 +0000
asID: 202656
IP address blocks: 95.169.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cf:ab:9e:02:2f:0c:0f:23:86:d9:30:e1:b8:74:fe:ca:91:6c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 1 15:44:35 2026 GMT
Not After : Sep 30 15:49:35 2027 GMT
Subject: CN=BB81F396842376DF7CE6C975BDF9BA1F24840905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:98:90:c5:3f:83:73:ff:72:1c:e7:47:6d:a2:
cb:46:ef:02:45:61:9e:37:f2:b1:e1:55:09:dc:5b:
6d:fe:f9:ef:0c:e1:40:27:f6:de:1f:26:81:85:b7:
cb:52:17:fa:21:70:14:9f:29:3f:d8:6a:be:6e:ef:
c7:62:a0:eb:fe:5c:c2:c6:30:20:13:c8:f1:f4:7e:
db:95:a4:f3:01:b3:54:d4:65:ed:be:ae:0e:1d:5c:
17:ca:2c:bb:33:f7:9c:55:12:af:89:68:a5:e3:ce:
c9:b7:c9:f7:1f:03:4e:67:ec:4a:d5:40:ed:96:b3:
2a:bb:bd:b3:09:1a:5e:60:2b:38:c2:08:aa:96:c7:
04:3a:6d:6b:2a:c1:e9:f8:d2:ec:23:f1:0c:a6:19:
b7:ee:3a:86:18:29:00:73:99:27:9a:3e:d1:61:7f:
86:e3:e9:22:76:dc:10:5c:09:75:06:3a:f1:5a:52:
ab:34:5b:09:ad:2a:cb:89:90:e6:15:d1:2c:63:fa:
c7:4e:ed:b3:c2:7b:bf:db:58:a5:8d:a5:10:d3:e7:
e8:fa:0a:ce:e8:65:62:d5:e9:3e:5c:0b:53:f6:f5:
42:2d:ff:ac:4b:1e:4f:ca:a8:7a:ab:1b:89:1b:ba:
ad:39:91:9c:d1:6a:a9:aa:65:2b:ca:d8:d0:87:a4:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:81:F3:96:84:23:76:DF:7C:E6:C9:75:BD:F9:BA:1F:24:84:09:05
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.165.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a1:73:34:22:52:ac:36:13:ca:b8:ba:62:da:bc:bb:31:c6:
e6:35:a9:4b:33:f0:f9:57:95:b7:3d:28:dd:77:57:09:6d:56:
d1:89:aa:27:84:cb:c0:e7:8c:04:2c:39:ab:ec:af:19:15:49:
a2:3a:fb:57:df:6a:99:ba:41:06:e2:20:b0:a4:27:f2:7f:de:
df:9e:33:f3:3f:89:84:fd:6e:15:5c:ff:33:9d:ff:8a:2d:0a:
76:37:44:53:9d:f6:6f:71:ed:28:38:0a:b4:f6:4b:c5:de:12:
f0:fd:2e:50:64:35:dc:3a:0f:02:2f:1e:d3:15:f8:16:02:41:
73:ec:2e:80:25:ac:31:7b:dc:ae:92:41:29:87:1d:0a:82:ab:
f7:c0:4e:05:8d:d9:5d:6d:af:e0:90:8d:44:70:0a:6c:9e:4f:
7d:eb:1a:93:58:73:5f:2a:66:d1:a5:87:06:9e:aa:0c:58:ec:
de:63:8d:cb:f6:3f:fe:6c:cc:0c:d8:8a:88:08:28:c7:ef:9c:
a8:ad:9f:19:73:81:53:69:ec:55:fd:ce:1b:95:d7:19:82:4c:
47:c0:16:b0:8f:50:db:10:f6:3f:3f:48:f6:f7:56:79:12:59:
82:87:b4:9a:54:b1:2b:10:e8:e9:e5:5f:f4:47:5f:71:4b:2c:
10:db:f9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:31:36 2026 by rpki-client