Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa
File: 39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: /RLbW4auKS2K3rv8HhDP+gP154Hco62R6zxtZ7i34qM=
Subject key identifier: 4D:F3:1A:BE:B4:BF:A5:E9:BF:EC:B3:D0:03:2D:9B:B4:E2:E3:F6:F8
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 3556216917758D1F25867DF70C5768D23AA82961
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa
Signing time: Mon 09 Jun 2025 02:54:09 +0000
ROA not before: Mon 09 Jun 2025 02:49:09 +0000
ROA not after: Mon 08 Jun 2026 02:54:09 +0000
asID: 142146
IP address blocks: 95.169.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:56:21:69:17:75:8d:1f:25:86:7d:f7:0c:57:68:d2:3a:a8:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 9 02:49:09 2025 GMT
Not After : Jun 8 02:54:09 2026 GMT
Subject: CN=4DF31ABEB4BFA5E9BFECB3D0032D9BB4E2E3F6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:69:91:71:81:d1:69:48:20:d9:1b:ba:24:
6d:50:0c:6f:3e:83:86:11:19:e8:43:8a:5a:38:22:
88:60:4e:73:aa:1b:e2:a5:ba:3e:af:50:04:8f:a8:
c7:5f:f6:94:06:e6:38:24:17:e1:20:d5:14:36:41:
76:6b:ca:6b:a7:ca:71:8b:86:77:e9:d5:df:a1:c5:
97:1b:95:cb:1a:51:1e:2c:c5:a8:16:81:fe:18:58:
6b:22:a3:0f:24:91:a5:a0:34:e9:dd:52:f8:e9:f1:
8e:ec:7e:d6:9f:94:99:27:80:dd:9b:86:01:09:ec:
00:ae:a5:a2:5b:fe:bd:e5:af:54:e5:61:04:ef:e8:
03:02:97:35:0a:cc:c3:e3:0c:c2:88:77:57:47:8b:
32:65:85:6b:79:0e:08:26:f0:70:bf:3d:14:2d:55:
bc:0e:b1:03:54:b0:d0:2b:9f:9a:cc:6c:0c:d0:b0:
3d:e2:c3:c7:24:a2:67:49:2f:29:bf:fb:88:f5:e5:
dc:5f:a3:07:94:d2:ab:c8:52:99:8c:aa:5a:7a:1c:
ca:cd:f3:52:05:d1:2e:75:b2:00:b3:01:dc:a4:8d:
18:2c:4c:e7:98:ad:29:1e:3a:9b:07:b0:5f:72:b3:
49:c5:f4:c4:23:1b:be:5e:24:22:de:3d:18:7d:04:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:1A:BE:B4:BF:A5:E9:BF:EC:B3:D0:03:2D:9B:B4:E2:E3:F6:F8
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136382e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.168.0/24
Signature Algorithm: sha256WithRSAEncryption
61:88:c0:fc:31:6f:37:16:f3:d1:b4:c3:91:e5:21:cd:27:2c:
86:b2:60:56:86:c8:a0:41:85:85:5d:93:3a:10:36:80:3a:82:
32:18:dc:9a:e2:72:e5:a3:6e:40:18:72:6f:98:a4:4b:11:da:
e7:f2:10:c3:46:2c:4c:86:82:75:12:18:b3:ad:b1:51:56:64:
f9:7d:64:31:cd:dc:34:ac:00:75:1f:e7:ed:72:74:8d:de:d2:
5d:db:0f:49:b5:17:e4:b2:ae:46:7c:3a:07:6e:37:cd:15:87:
87:c1:c5:50:cc:db:dc:a6:b1:84:08:d2:07:e3:a8:7c:32:a8:
96:71:68:ca:8e:05:20:c7:eb:32:61:fb:ac:0a:0c:09:e9:02:
51:83:c1:56:8d:c7:fc:a1:f6:c2:a3:89:c5:08:c3:6e:d2:91:
54:3c:4e:cc:2d:b0:2a:5d:ee:97:6b:4e:4d:84:e6:8c:22:df:
d7:49:38:aa:1e:14:a8:eb:95:df:9c:35:b7:25:fa:71:90:58:
4b:a2:e5:51:d1:50:d2:da:4b:fd:98:0d:b0:c7:98:f7:52:8d:
a7:04:7c:76:bf:c7:38:32:5f:7a:4f:9c:fd:ec:d3:44:0f:66:
70:e2:89:7f:ea:35:94:67:ca:8a:86:5d:26:18:bb:42:fc:e5:
e0:a5:1c:d2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNVYhaRd1jR8lhn33DFdo0jqoKWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNTA2MDkwMjQ5MDlaFw0yNjA2MDgwMjU0MDlaMDMxMTAvBgNV
BAMTKDRERjMxQUJFQjRCRkE1RTlCRkVDQjNEMDAzMkQ5QkI0RTJFM0Y2RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFmmRcYHRaUgg2Ru6JG1QDG8+
g4YRGehDilo4IohgTnOqG+Kluj6vUASPqMdf9pQG5jgkF+Eg1RQ2QXZrymunynGL
hnfp1d+hxZcblcsaUR4sxagWgf4YWGsiow8kkaWgNOndUvjp8Y7sftaflJkngN2b
hgEJ7ACupaJb/r3lr1TlYQTv6AMClzUKzMPjDMKId1dHizJlhWt5Dggm8HC/PRQt
VbwOsQNUsNArn5rMbAzQsD3iw8ckomdJLym/+4j15dxfoweU0qvIUpmMqlp6HMrN
81IF0S51sgCzAdykjRgsTOeYrSkeOpsHsF9ys0nF9MQjG75eJCLePRh9BAcdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTfMavrS/pem/7LPQAy2btOLj9vgwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM2
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMTM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqagwDQYJKoZIhvcNAQELBQADggEBAGGIwPwxbzcW89G0w5HlIc0nLIayYFaG
yKBBhYVdkzoQNoA6gjIY3JricuWjbkAYcm+YpEsR2ufyEMNGLEyGgnUSGLOtsVFW
ZPl9ZDHN3DSsAHUf5+1ydI3e0l3bD0m1F+SyrkZ8OgduN80Vh4fBxVDM29ymsYQI
0gfjqHwyqJZxaMqOBSDH6zJh+6wKDAnpAlGDwVaNx/yh9sKjicUIw27SkVQ8Tswt
sCpd7pdrTk2E5owi39dJOKoeFKjrld+cNbcl+nGQWEui5VHRUNLaS/2YDbDHmPdS
jacEfHa/xzgyX3pPnP3s00QPZnDiiX/qNZRnyoqGXSYYu0L85eClHNI=
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:45:20 2025 by rpki-client