Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136362e302f32342d3234203d3e203633313530.roa
File: 39352e3136392e3136362e302f32342d3234203d3e203633313530.roa (raw, json)
Hash identifier: tHP/BoFWA+ucF3HSQnOh3xg2Du0Kpyf1XPIrZTrlIgw=
Subject key identifier: 5D:1B:9A:45:81:71:D3:B8:AC:02:CF:60:2F:49:EB:C9:CD:1A:2D:15
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 06D09F24415CEEDC3B6C15DC7F6AC48D52DC3726
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136362e302f32342d3234203d3e203633313530.roa
Signing time: Sat 12 Sep 2026 09:49:35 +0000
ROA not before: Sat 12 Sep 2026 09:44:35 +0000
ROA not after: Sat 11 Sep 2027 09:49:35 +0000
asID: 63150
IP address blocks: 95.169.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d0:9f:24:41:5c:ee:dc:3b:6c:15:dc:7f:6a:c4:8d:52:dc:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Sep 12 09:44:35 2026 GMT
Not After : Sep 11 09:49:35 2027 GMT
Subject: CN=5D1B9A458171D3B8AC02CF602F49EBC9CD1A2D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:9b:fc:1e:0e:71:82:1c:10:e6:38:22:ad:
33:4d:de:70:03:ae:b3:f6:3b:69:17:d2:fe:7c:69:
b4:4e:18:ba:08:42:0b:c8:00:c3:f5:7f:44:85:88:
f5:c1:4b:29:f6:16:05:11:13:db:b6:03:fa:8b:ea:
8f:4e:63:ec:83:f3:c2:98:02:76:95:60:30:32:30:
d5:f1:a7:30:45:c2:8e:fb:3f:51:0d:41:03:ad:78:
c7:e3:ab:0a:b0:0f:2c:5b:8e:84:39:5a:79:9f:dc:
9d:1a:c7:20:1d:4e:ee:d6:55:e6:94:c1:f2:a4:fc:
91:fc:eb:43:f0:0e:6e:04:42:5e:f7:9a:a1:37:39:
ee:4a:35:85:d2:11:72:96:67:0d:fb:1f:22:b6:34:
d6:5e:2e:65:04:bc:45:03:26:fa:8c:93:14:9e:50:
15:cc:63:66:cd:84:1b:8d:c8:b5:ee:76:73:eb:bd:
dd:1e:78:fe:cc:3f:17:4f:be:e4:1c:d7:40:5b:f3:
2f:23:d8:c7:5b:5a:f3:48:b1:73:a1:56:25:dd:a6:
28:c1:7f:50:20:fc:62:05:3c:71:61:c1:07:6d:3b:
16:d0:43:35:37:15:b8:24:7c:1c:27:00:d3:86:2a:
03:dd:c4:6e:12:c3:b6:15:7a:b9:f6:49:83:c3:34:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1B:9A:45:81:71:D3:B8:AC:02:CF:60:2F:49:EB:C9:CD:1A:2D:15
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136362e302f32342d3234203d3e203633313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.166.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c1:2e:f3:f7:a6:44:7f:44:ad:24:98:92:4b:2a:e6:81:f6:
20:17:93:96:92:5d:ea:14:57:f4:20:f5:3c:a9:36:3a:ac:6d:
c3:4a:53:e0:f9:47:49:f5:0d:67:2f:82:21:7d:2a:b4:fd:c6:
ba:34:0c:65:8d:d4:20:b6:6e:96:89:cb:eb:96:62:75:5b:f0:
be:95:8b:4e:94:83:c2:b2:8a:90:7f:56:73:34:e9:e2:a6:8b:
f5:e1:98:60:63:0d:7c:bb:7f:7f:26:fd:ed:b8:e4:a0:93:79:
95:62:d3:ab:fe:67:30:14:ab:8d:4e:63:7c:b1:07:5d:e2:f1:
fa:58:48:f3:c4:db:f9:b0:57:ac:c7:e2:cc:11:23:50:16:74:
a8:07:7d:94:1c:1d:8a:69:be:35:36:74:08:10:1a:c6:af:65:
83:f8:2b:81:43:2d:aa:f7:5d:1b:0c:8f:88:52:be:a1:8a:dd:
25:d4:04:48:f4:d0:84:c7:1d:80:14:90:db:ee:9d:26:fc:8b:
7e:36:bf:ef:d5:35:cd:d2:6c:46:b6:cc:a9:d2:cf:3b:8d:85:
a6:94:29:b8:42:eb:1f:cf:59:5d:66:f7:a7:eb:0d:7b:93:6f:
a5:dd:b5:7f:0b:1f:50:51:de:ef:45:77:1f:63:ee:8d:55:7a:
8f:8a:7e:06
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBtCfJEFc7tw7bBXcf2rEjVLcNyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjA5MTIwOTQ0MzVaFw0yNzA5MTEwOTQ5MzVaMDMxMTAvBgNV
BAMTKDVEMUI5QTQ1ODE3MUQzQjhBQzAyQ0Y2MDJGNDlFQkM5Q0QxQTJEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSpv8Hg5xghwQ5jgirTNN3nAD
rrP2O2kX0v58abROGLoIQgvIAMP1f0SFiPXBSyn2FgURE9u2A/qL6o9OY+yD88KY
AnaVYDAyMNXxpzBFwo77P1ENQQOteMfjqwqwDyxbjoQ5Wnmf3J0axyAdTu7WVeaU
wfKk/JH860PwDm4EQl73mqE3Oe5KNYXSEXKWZw37HyK2NNZeLmUEvEUDJvqMkxSe
UBXMY2bNhBuNyLXudnPrvd0eeP7MPxdPvuQc10Bb8y8j2MdbWvNIsXOhViXdpijB
f1Ag/GIFPHFhwQdtOxbQQzU3FbgkfBwnANOGKgPdxG4Sw7YVern2SYPDNItdAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUXRuaRYFx07isAs9gL0nryc0aLRUwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM2
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzEzNTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
X6mmMA0GCSqGSIb3DQEBCwUAA4IBAQAIwS7z96ZEf0StJJiSSyrmgfYgF5OWkl3q
FFf0IPU8qTY6rG3DSlPg+UdJ9Q1nL4IhfSq0/ca6NAxljdQgtm6WicvrlmJ1W/C+
lYtOlIPCsoqQf1ZzNOnipov14ZhgYw18u39/Jv3tuOSgk3mVYtOr/mcwFKuNTmN8
sQdd4vH6WEjzxNv5sFesx+LMESNQFnSoB32UHB2Kab41NnQIEBrGr2WD+CuBQy2q
910bDI+IUr6hit0l1ARI9NCExx2AFJDb7p0m/It+Nr/v1TXN0mxGtsyp0s87jYWm
lCm4Qusfz1ldZven6w17k2+l3bV/Cx9QUd7vRXcfY+6NVXqPin4G
-----END CERTIFICATE-----
Generated at Mon Sep 28 23:29:54 2026 by rpki-client