Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e203239303636.roa
File: 39352e3136392e3137312e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier: 21lAGTMtlp02tGYNtgPFkN8EZsIZjuO0nYo5r8q+krI=
Subject key identifier: B6:63:14:F6:57:56:28:14:D4:3F:DC:A1:79:18:13:A5:21:8C:25:66
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7B81EC886D1E6F37610E65F41826417273D251D6
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e203239303636.roa
Signing time: Thu 12 Jun 2025 09:54:09 +0000
ROA not before: Thu 12 Jun 2025 09:49:09 +0000
ROA not after: Thu 11 Jun 2026 09:54:09 +0000
asID: 29066
IP address blocks: 95.169.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:81:ec:88:6d:1e:6f:37:61:0e:65:f4:18:26:41:72:73:d2:51:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 12 09:49:09 2025 GMT
Not After : Jun 11 09:54:09 2026 GMT
Subject: CN=B66314F657562814D43FDCA1791813A5218C2566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:5c:2d:b4:91:78:a9:65:c8:49:3b:ce:f0:
fb:17:f9:97:b3:73:10:61:f2:7e:48:1f:df:d4:4e:
b0:bb:05:59:f9:7d:40:91:bd:4c:34:40:45:0d:34:
a2:0f:d2:c9:a7:69:3f:20:e3:3c:f7:18:d8:1c:1a:
f5:2b:b1:a9:54:9d:14:69:a7:b6:b9:29:0b:ff:ae:
f0:2f:86:11:f8:ae:a4:33:a3:88:4b:fa:50:f3:13:
0a:7a:d6:55:5b:03:1a:83:fa:b6:22:61:3c:51:0a:
b4:1d:6e:86:ec:c5:f6:f2:be:f7:c2:8a:22:70:7a:
09:75:77:b1:b5:f9:b2:b5:5d:08:b1:6a:31:f4:d7:
ae:b7:d0:75:56:56:f8:51:f6:50:64:6f:c4:aa:93:
70:27:3a:db:ba:48:9b:93:3d:42:3b:64:93:fc:03:
70:11:97:2c:6d:99:f8:c7:94:ed:15:4b:97:01:cb:
29:ec:f7:c0:f9:28:3e:7b:72:80:51:88:40:35:53:
4a:c4:2e:a6:9b:0a:47:c3:ad:13:c6:1e:c3:e9:b5:
e6:8a:ad:fa:4d:14:b4:2e:e1:5d:e8:97:3f:bd:df:
92:00:c4:0e:5c:bc:7f:ff:20:06:87:61:87:bc:62:
c6:ed:14:ae:26:78:9c:a3:8b:c0:d4:e9:c4:77:c2:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:63:14:F6:57:56:28:14:D4:3F:DC:A1:79:18:13:A5:21:8C:25:66
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137312e302f32342d3234203d3e203239303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ad:12:5f:01:87:2f:75:4e:1a:c3:5a:8c:29:58:69:8b:17:
6b:e1:8f:00:1d:5a:b2:2a:6f:c1:16:54:6c:1a:c3:b5:12:3b:
af:88:af:ad:8b:07:0e:57:a4:05:04:d5:35:e1:51:17:cc:96:
50:bd:ef:0b:b6:07:da:53:7a:dd:1e:7a:6d:ac:af:17:d2:b9:
d8:97:ee:49:dd:93:04:bf:7f:c0:50:b4:0f:d8:44:47:7e:05:
e6:87:41:37:90:61:a8:46:4a:c3:03:82:9b:ac:d5:82:2c:b6:
1f:2e:01:b9:ec:c5:87:64:86:2f:d9:e0:2b:b2:64:37:34:41:
e7:c8:6d:f3:aa:e0:db:d1:a9:bc:93:69:3c:4e:90:c4:54:f5:
c1:87:68:d7:91:ff:90:9c:cd:09:3e:6b:be:65:cd:ef:27:cd:
17:cd:7a:46:50:76:c3:93:3e:10:8d:f2:ab:dd:ba:f0:81:f2:
0f:9c:44:48:8f:de:e0:be:b2:d1:99:70:bd:ec:f5:e5:b3:6b:
2f:88:28:de:d5:49:de:8d:d3:93:37:5f:dd:de:d0:a1:41:ea:
a0:cc:da:d8:be:ca:f5:8a:91:ef:fc:59:dc:6c:f6:7b:12:63:
5b:90:f5:7e:37:a0:be:20:76:9b:94:82:f3:c4:cd:84:93:05:
c5:69:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:14:49 2025 by rpki-client