Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e203239303636.roa
File: 39352e3136392e3137392e302f32342d3234203d3e203239303636.roa (raw, json)
Hash identifier: yywcvcHzn7dSwO3+wHqBp+CW/a8ZhBlrFbEf1UnM8Hk=
Subject key identifier: 49:C3:56:FF:F9:55:E7:95:DB:AF:AA:EB:B6:7E:AB:30:20:27:01:AF
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 01DAA4FDBB3AF0A1751DDD57B87F8E324210D940
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e203239303636.roa
Signing time: Thu 12 Jun 2025 09:54:09 +0000
ROA not before: Thu 12 Jun 2025 09:49:09 +0000
ROA not after: Thu 11 Jun 2026 09:54:09 +0000
asID: 29066
IP address blocks: 95.169.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:da:a4:fd:bb:3a:f0:a1:75:1d:dd:57:b8:7f:8e:32:42:10:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 12 09:49:09 2025 GMT
Not After : Jun 11 09:54:09 2026 GMT
Subject: CN=49C356FFF955E795DBAFAAEBB67EAB30202701AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:ad:ad:fb:0a:3b:ef:89:39:84:01:bd:d6:
bf:b6:58:a3:57:8b:f2:f1:a0:86:76:5b:64:ea:52:
3b:6c:f7:99:a4:b4:d7:40:fc:6d:c2:f5:b6:0f:e7:
81:bd:93:da:7c:74:27:73:7f:78:53:55:d3:60:4d:
63:14:07:bc:a2:7d:df:9d:f8:5b:a6:07:95:8b:20:
00:27:dd:b4:74:9b:35:50:7d:51:74:cc:7d:3e:20:
7f:9a:df:c1:78:43:86:c0:55:40:a3:3a:3f:11:ba:
df:c2:e8:d8:d4:ca:ca:97:c7:19:00:be:5a:36:4b:
6e:ef:3c:0d:16:70:07:16:71:32:a1:e2:48:ca:6a:
45:93:1f:da:3b:7a:5b:5e:4f:02:76:6f:71:99:89:
59:90:8c:47:80:bb:56:78:6d:f4:e9:a0:92:9b:9a:
26:25:a2:d0:0e:35:e6:89:24:ed:ce:fe:1e:86:44:
51:9d:70:64:28:40:58:62:66:88:e4:fa:fc:37:f0:
e4:cf:ee:3b:ad:a0:5d:35:cc:26:f4:5b:fe:cd:cd:
32:4e:f6:15:26:52:1e:fe:1a:cf:ec:8c:23:40:ef:
8a:72:4f:56:46:4c:84:ad:96:5a:1c:72:8c:e7:ed:
14:2b:bf:26:6a:d5:54:19:06:1b:a9:96:40:0b:ea:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C3:56:FF:F9:55:E7:95:DB:AF:AA:EB:B6:7E:AB:30:20:27:01:AF
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137392e302f32342d3234203d3e203239303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:66:3c:0e:39:90:05:2a:8b:05:37:c1:13:d9:d7:00:f4:e3:
ca:0e:eb:c4:ee:20:fc:5e:b6:60:30:4e:b2:eb:05:63:15:3c:
40:32:6b:ce:e5:e8:01:9e:80:6b:17:57:5e:90:d2:c7:ba:18:
cd:9c:6d:a3:b9:47:a7:d0:2f:d0:be:56:4a:66:1a:be:43:8b:
db:a0:61:c8:54:a6:11:97:96:b0:55:ed:e7:e5:29:42:a8:f4:
41:33:a4:d0:6c:3a:f9:a4:e4:02:39:bd:ca:f4:d8:62:b4:ee:
0c:ea:78:1f:8c:34:ec:eb:21:7c:7b:ff:b6:47:3b:81:8f:6e:
c8:db:98:63:60:65:ae:1c:c9:cf:fe:8d:a4:1b:ae:e0:5c:79:
3b:5f:f4:c0:c3:86:f4:88:d1:0c:d3:35:46:e9:8b:f5:a8:f7:
7d:3f:01:f6:f0:30:ac:6d:c5:54:a8:68:83:90:84:1e:c2:db:
4a:02:c8:f2:07:5d:71:d8:62:cd:30:40:a5:07:d7:63:08:92:
51:a4:08:84:59:98:ec:91:f6:97:22:e0:c1:40:c1:70:a2:44:
4f:03:c3:9b:a3:58:d2:75:e7:a8:4e:42:40:bb:c3:0d:dc:6f:
29:f0:95:38:4c:aa:58:f2:be:6e:c7:b3:32:e5:45:4c:a8:82:
59:4f:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:57 2025 by rpki-client