Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138332e302f32342d3234203d3e203331313033.roa
File: 39352e3136392e3138332e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: 7MwjcLUeB23qBJgTnOZa08dWcA8yZ//9mzCspNxJbuc=
Subject key identifier: 4F:5A:55:07:8C:71:BA:A2:F7:8D:E9:C0:01:BA:32:3F:F6:42:AE:FA
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 5C13298CC0E8FF6D18A670B92C0DBAE78605904E
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138332e302f32342d3234203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 10:46:59 +0000
ROA not before: Fri 03 Apr 2026 10:41:59 +0000
ROA not after: Fri 02 Apr 2027 10:46:59 +0000
asID: 31103
IP address blocks: 95.169.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:13:29:8c:c0:e8:ff:6d:18:a6:70:b9:2c:0d:ba:e7:86:05:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 10:41:59 2026 GMT
Not After : Apr 2 10:46:59 2027 GMT
Subject: CN=4F5A55078C71BAA2F78DE9C001BA323FF642AEFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:4f:bd:02:c2:ee:c7:dc:a5:fb:61:ff:a2:
13:6b:a5:c7:87:6f:58:3b:08:2c:5c:9b:cc:0d:fe:
9e:3c:14:da:17:bf:02:f8:97:0d:07:3e:6c:f4:e3:
33:3a:3b:f6:7b:7c:c3:a7:e5:3e:d4:ec:6a:bc:e2:
1c:cf:8d:cd:ad:d5:70:e1:ed:06:5f:25:1c:3c:50:
98:4f:a5:9d:97:d1:50:39:66:d8:e9:91:69:3f:b2:
05:dc:0e:61:39:ec:90:e6:39:a7:ab:b6:c7:93:f0:
40:d4:1e:de:78:85:7f:88:77:da:ea:a8:a2:9c:05:
3d:11:01:e5:52:12:49:a4:ba:fd:89:a4:25:9b:53:
9b:b5:4f:84:96:ff:07:ed:24:cf:e1:a1:54:16:bf:
90:4f:1c:3f:89:a8:b9:8d:cc:9c:92:07:3d:0a:a1:
cd:bc:52:26:2a:e7:31:f2:90:87:5f:d9:af:f8:02:
33:41:f0:d4:dd:a1:5f:51:00:3a:c2:6f:b6:48:56:
f1:7d:fc:77:bb:69:51:8e:da:5b:11:cc:7c:4d:c8:
26:2c:79:eb:a9:f8:61:cc:4d:4f:a9:19:b8:45:83:
03:a7:47:5f:3a:af:6f:56:99:12:97:0d:f2:8a:a6:
d0:58:89:f8:2f:46:93:a2:a2:93:f6:b8:86:08:74:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:55:07:8C:71:BA:A2:F7:8D:E9:C0:01:BA:32:3F:F6:42:AE:FA
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138332e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.183.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d0:1d:20:04:22:05:73:3c:45:a6:b6:3d:6f:37:1c:7f:dc:
f8:55:85:92:a4:6d:6d:e1:8f:11:09:9e:eb:1e:fe:a4:d5:53:
73:1c:37:09:34:f2:93:3c:db:40:6d:3c:29:fc:fc:69:1a:0f:
54:81:7f:b7:05:06:cd:a2:ba:bb:65:37:2c:2d:a1:57:91:73:
06:77:8f:88:90:64:cd:a8:17:08:13:53:e9:3a:d7:df:9c:29:
e8:74:71:64:55:52:ec:56:83:1e:90:31:6b:a2:24:bd:52:83:
dc:85:b0:e1:9d:1e:3a:3b:c2:87:35:46:74:47:2c:12:3a:fd:
f3:76:f3:8c:56:a6:2f:70:90:c0:f6:1a:28:7d:55:74:c9:d9:
f4:1b:c1:83:9f:cb:39:dd:d6:89:b7:da:0c:27:24:af:bb:19:
8c:22:7b:d9:9e:b2:cb:15:f8:15:4b:dc:ba:95:5d:e7:29:ed:
2b:ba:8e:ba:f5:72:0e:c3:c1:b9:8f:f2:ad:e2:25:53:bc:f4:
db:6d:26:68:df:ba:99:ce:3b:bc:45:cb:16:19:96:11:9b:b2:
55:91:a0:3c:2d:fb:11:dd:57:79:96:f3:e6:b8:33:f4:27:a6:
b2:14:ca:de:5d:41:5b:0f:ad:3c:f0:72:42:f2:dc:e0:3f:76:
6c:e9:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:41:54 2026 by rpki-client