Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138312e302f32342d3234203d3e203331313033.roa
File: 39352e3136392e3138312e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: 8J61SmXxhRHMHfUJnlu6B4NGLsTA9tkOu7nJte9l2p4=
Subject key identifier: F3:91:35:5A:A5:93:F2:0F:31:54:EB:C6:F6:B6:80:33:FA:98:20:1F
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 586F5A6F1DD47DF4A07ED861080C4B6D4C9DF259
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138312e302f32342d3234203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 10:46:59 +0000
ROA not before: Fri 03 Apr 2026 10:41:59 +0000
ROA not after: Fri 02 Apr 2027 10:46:59 +0000
asID: 31103
IP address blocks: 95.169.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6f:5a:6f:1d:d4:7d:f4:a0:7e:d8:61:08:0c:4b:6d:4c:9d:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 10:41:59 2026 GMT
Not After : Apr 2 10:46:59 2027 GMT
Subject: CN=F391355AA593F20F3154EBC6F6B68033FA98201F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:bc:de:f3:8d:9a:ac:df:75:da:c5:94:72:
d5:25:6e:14:d1:e6:6a:f4:f5:dd:87:ad:62:ac:96:
fe:de:f4:68:05:1a:45:3a:ae:0e:fb:bf:4f:49:ea:
62:ed:98:ea:32:49:95:2d:e5:b0:54:8b:85:f8:e7:
30:55:c4:68:5c:16:dc:a5:7f:33:77:13:82:c5:e2:
15:a9:1f:26:24:91:c8:88:b1:15:85:2a:bb:7b:71:
a0:33:a5:98:eb:a0:12:f3:ec:d4:f6:13:52:d9:47:
96:bd:2a:2e:5c:c0:b3:60:31:35:8f:99:72:4e:1a:
00:3a:bf:79:0e:a3:3c:95:5d:3b:cf:94:f9:0d:6a:
51:72:d5:54:3b:61:c8:e9:5a:eb:1f:4f:79:05:e6:
bb:e3:db:ec:75:b5:0e:51:73:fa:f5:02:07:92:28:
e5:f4:c4:b4:19:c9:1e:8c:89:88:ae:bd:13:d6:c6:
78:88:38:a5:8c:73:6b:ae:d2:8e:06:18:cc:3f:5e:
e0:a7:db:15:81:60:20:fb:81:a8:4b:70:17:fb:04:
b5:70:76:7e:72:1c:c3:89:e7:0c:02:85:53:38:05:
02:65:8c:73:5a:2e:58:0b:69:fa:96:52:e2:a5:02:
c7:1b:5a:82:3e:8f:5f:e6:1c:8d:ab:96:fe:c1:c0:
b3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:91:35:5A:A5:93:F2:0F:31:54:EB:C6:F6:B6:80:33:FA:98:20:1F
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138312e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.181.0/24
Signature Algorithm: sha256WithRSAEncryption
42:87:e3:1e:27:74:12:6c:b8:07:83:33:e3:ff:65:94:b1:3b:
b5:e8:7d:37:17:f0:a2:13:79:7f:96:fa:43:bc:6d:96:d5:a2:
59:39:05:7b:b4:83:70:0c:9f:00:a4:e1:7b:32:b1:6a:7c:62:
e2:03:bb:33:99:42:67:e9:d6:28:84:6c:f2:ef:d9:ec:e3:74:
8a:37:88:5a:04:43:f8:95:66:43:57:0e:d9:02:b2:43:24:08:
7a:56:54:9f:fd:26:c6:f7:33:4f:4d:ad:7f:f5:a2:8f:60:7b:
37:76:a0:6a:0b:3a:cb:83:c8:29:e5:e9:6f:6f:84:aa:47:28:
d2:2c:96:75:8d:97:e3:93:f9:88:13:74:84:09:45:8d:4f:7f:
45:9e:a2:86:89:5f:05:60:30:e8:21:f8:59:b8:4e:20:5e:91:
44:a7:0b:92:1c:c2:65:fd:90:f9:0f:c1:7f:a6:41:16:45:6a:
28:fa:6d:ab:7c:08:b8:fd:e6:0b:62:11:aa:03:2f:06:d2:14:
83:4a:68:c5:9f:82:cd:46:cf:84:e4:3e:65:43:58:a2:4c:10:
35:8f:ee:43:e5:57:0b:68:08:c9:60:7e:72:11:7c:85:a1:c3:
86:53:de:4b:f3:96:ee:d9:98:43:8e:06:9c:18:00:45:57:81:
87:f7:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:47:57 2026 by rpki-client