Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa
File: 39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa (raw, json)
Hash identifier: Y3yWrlCcBduEqP+x2uVjELBYkUL1NaUhLPealMI045M=
Subject key identifier: 6B:E1:B3:8E:24:D8:24:84:EF:D6:8E:4A:ED:0D:B8:66:9E:32:44:9E
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 129D88A603D0D6572F52C806107B4294D9C8B2A1
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa
Signing time: Thu 30 Oct 2025 14:55:11 +0000
ROA not before: Thu 30 Oct 2025 14:50:11 +0000
ROA not after: Thu 29 Oct 2026 14:55:11 +0000
asID: 202656
IP address blocks: 95.169.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9d:88:a6:03:d0:d6:57:2f:52:c8:06:10:7b:42:94:d9:c8:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 30 14:50:11 2025 GMT
Not After : Oct 29 14:55:11 2026 GMT
Subject: CN=6BE1B38E24D82484EFD68E4AED0DB8669E32449E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:11:5b:76:f1:f1:85:c4:7b:53:cd:86:09:
63:e1:c0:0c:b3:f3:d9:41:fb:d9:f5:90:fb:3d:be:
ab:6f:47:08:6b:6f:20:23:29:fc:25:c0:d3:9a:d9:
fe:ba:54:43:6c:8c:aa:f0:be:f3:32:dc:88:0e:c0:
3f:07:1c:68:ba:cb:8b:1b:58:18:42:22:e8:ae:97:
88:c6:09:5a:d3:a4:a8:c3:3a:a6:09:7a:11:fc:c3:
9f:31:42:20:a6:13:20:15:1a:bf:b8:9c:ec:60:d5:
e4:1d:ad:3e:85:f1:de:d6:0a:14:99:df:5c:de:2b:
24:42:f7:b6:dd:c3:44:3d:9e:1f:31:8e:d7:19:bf:
33:83:bc:28:b1:b1:2c:88:cc:57:6f:86:3e:63:0b:
cc:bd:b8:ff:3f:0d:73:b9:86:1b:20:32:47:37:a5:
17:20:35:b2:aa:15:e3:12:e5:21:e3:6d:89:6b:40:
89:b1:c7:2a:b3:2d:bf:b6:7a:fd:18:24:e6:6c:2f:
b9:99:a3:0b:1b:5f:fe:6a:22:ec:d4:9d:3a:47:7d:
06:46:f7:e2:bf:1a:9f:60:35:ed:c2:12:89:ad:9c:
2b:42:20:bc:0a:b6:09:14:f3:08:bf:1d:98:ef:1d:
d1:4f:62:6a:45:93:7d:ea:ef:9c:81:63:1b:5f:e1:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E1:B3:8E:24:D8:24:84:EF:D6:8E:4A:ED:0D:B8:66:9E:32:44:9E
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136352e302f32342d3234203d3e20323032363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:45:0e:88:15:af:6d:de:44:4b:98:4e:68:fc:3f:98:36:e6:
57:65:dd:62:61:f7:61:59:c4:94:28:0e:41:2d:12:fa:d0:4c:
e4:64:fc:0c:65:fc:38:c7:85:1e:01:18:ab:5a:70:92:55:d5:
57:19:58:ab:8e:59:b1:40:9d:ef:dd:45:27:46:ae:9a:1f:dc:
62:df:07:87:c1:2c:d6:a6:ac:ef:ef:a4:3f:b1:dc:5a:83:fa:
9f:e0:00:77:26:ba:5c:f3:a2:60:af:a2:fe:51:a0:ea:58:ba:
29:ca:91:bf:a7:05:71:ca:80:e1:8e:5f:c5:b9:57:85:69:ae:
30:9a:30:b5:bd:f3:2b:b9:5c:39:e3:ce:5c:d9:53:6d:88:69:
27:0a:dc:85:3a:99:95:01:85:0a:f0:fa:13:27:e7:f9:72:ec:
a1:1a:bc:db:d1:ba:2a:bd:2d:ec:88:db:a3:f9:95:56:66:d6:
e2:f8:48:dc:14:98:09:16:de:64:a0:f1:84:1b:ee:8b:38:64:
9c:38:a4:01:7e:93:58:f8:fe:37:38:fc:93:02:54:1c:87:35:
7a:54:c1:2a:bd:de:4b:37:31:72:b6:5f:a0:40:b8:3e:41:69:
42:0a:cd:43:b3:7c:68:cd:5e:b5:38:c9:c0:17:8f:42:1c:2f:
1f:46:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:19:52 2025 by rpki-client