Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138342e302f32322d3232203d3e203331313033.roa
File: 39352e3136392e3138342e302f32322d3232203d3e203331313033.roa (raw, json)
Hash identifier: AiGSiDOUoe6ad9r1CFRgSRyrPJp1yOIDif/gu6E2Rmk=
Subject key identifier: 6E:15:AF:40:F4:4C:2A:44:91:C9:08:0F:61:1E:B1:BA:DF:24:50:62
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 08E978FF6B79924CB7970A2CABCD73B6EDFA4750
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138342e302f32322d3232203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 10:46:58 +0000
ROA not before: Fri 03 Apr 2026 10:41:58 +0000
ROA not after: Fri 02 Apr 2027 10:46:58 +0000
asID: 31103
IP address blocks: 95.169.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e9:78:ff:6b:79:92:4c:b7:97:0a:2c:ab:cd:73:b6:ed:fa:47:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 10:41:58 2026 GMT
Not After : Apr 2 10:46:58 2027 GMT
Subject: CN=6E15AF40F44C2A4491C9080F611EB1BADF245062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:17:09:b3:ea:6b:05:c0:92:89:da:ba:93:
27:79:46:75:05:ac:8b:80:94:00:40:0f:c8:41:80:
25:06:06:f5:f3:d0:cb:04:0b:09:13:76:05:cd:8b:
9f:00:e2:c1:82:63:05:34:01:fd:1b:13:d8:d6:04:
60:8c:1d:13:d1:2f:4c:85:23:76:0e:a7:aa:9a:c9:
29:f9:9e:d8:60:69:9c:2d:4a:cb:e6:88:c8:27:1a:
c7:86:4a:fe:c5:18:3e:60:03:58:cf:1c:03:cd:9d:
d5:ef:ca:34:08:9b:ac:30:8d:0f:42:f5:a8:5a:60:
7b:39:f3:ae:04:44:a1:b8:ca:94:8f:8a:d1:8e:b7:
81:3e:81:c6:e6:d2:7f:91:94:7d:e3:df:21:28:b8:
42:b5:f8:82:92:8c:5e:05:45:35:bd:36:69:b0:be:
e1:21:18:75:2f:19:3c:a9:9d:c0:56:bd:cd:4f:9d:
b3:cd:9b:7b:aa:20:e6:d8:c6:3a:d4:71:86:91:c7:
eb:61:9b:3e:e6:8d:9c:28:21:60:08:aa:7a:72:79:
c0:0e:a2:2a:03:47:bb:31:f9:5a:8b:f4:cf:02:0b:
1c:bc:ef:af:8c:49:3f:e6:be:e3:9d:7f:eb:fe:59:
63:c8:48:24:5e:24:70:dd:7b:c0:43:ff:29:21:9a:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:15:AF:40:F4:4C:2A:44:91:C9:08:0F:61:1E:B1:BA:DF:24:50:62
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138342e302f32322d3232203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:16:6a:fe:ae:30:db:14:2e:dd:d1:70:e8:9e:26:83:9b:b2:
8b:7c:5f:c9:57:d0:10:9f:19:94:4a:d0:f0:1f:d0:a6:5b:9c:
a7:2e:94:0a:c7:6a:4f:63:7a:7b:07:ce:95:04:f3:3c:8d:6c:
93:95:75:9b:66:4f:49:90:4a:cf:1a:0f:ed:76:b5:51:07:6d:
57:a4:e4:31:22:8e:a6:ab:52:20:99:3d:50:23:c3:3c:db:b9:
d7:15:d1:9a:df:41:67:c1:46:26:d3:c2:13:18:ee:b0:40:27:
cf:c9:1e:98:36:c8:57:87:7d:b9:a4:2e:0b:b0:6f:68:dc:48:
96:98:4e:a7:eb:40:7e:b3:5f:73:39:2e:4f:04:d6:3a:4a:82:
ce:a0:48:a1:9a:5f:df:bf:3b:73:ed:2d:f7:cb:ea:f0:bf:61:
9f:a9:32:bc:6f:8c:06:c5:67:33:67:18:aa:a4:7a:05:ac:99:
6b:ce:5c:45:41:33:a9:c7:a5:a4:53:29:75:8c:ac:f6:24:94:
a2:93:76:b8:c8:78:4b:15:ee:e6:2a:fb:bc:50:e8:e6:f9:92:
1a:fc:ba:31:85:71:d6:07:4f:f6:8d:73:52:3d:30:1a:9c:7e:
f6:8f:6e:c8:d5:e2:b9:13:e4:2a:51:f0:c0:3e:41:95:b1:17:
bc:b8:ce:89
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCOl4/2t5kky3lwosq81ztu36R1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjA0MDMxMDQxNThaFw0yNzA0MDIxMDQ2NThaMDMxMTAvBgNV
BAMTKDZFMTVBRjQwRjQ0QzJBNDQ5MUM5MDgwRjYxMUVCMUJBREYyNDUwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuFRcJs+prBcCSidq6kyd5RnUF
rIuAlABAD8hBgCUGBvXz0MsECwkTdgXNi58A4sGCYwU0Af0bE9jWBGCMHRPRL0yF
I3YOp6qaySn5nthgaZwtSsvmiMgnGseGSv7FGD5gA1jPHAPNndXvyjQIm6wwjQ9C
9ahaYHs5864ERKG4ypSPitGOt4E+gcbm0n+RlH3j3yEouEK1+IKSjF4FRTW9Nmmw
vuEhGHUvGTypncBWvc1PnbPNm3uqIObYxjrUcYaRx+thmz7mjZwoIWAIqnpyecAO
oioDR7sx+VqL9M8CCxy876+MST/mvuOdf+v+WWPISCReJHDde8BD/ykhmmztAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUbhWvQPRMKkSRyQgPYR6xut8kUGIwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM4
MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMzMxMzEzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
X6m4MA0GCSqGSIb3DQEBCwUAA4IBAQCcFmr+rjDbFC7d0XDoniaDm7KLfF/JV9AQ
nxmUStDwH9CmW5ynLpQKx2pPY3p7B86VBPM8jWyTlXWbZk9JkErPGg/tdrVRB21X
pOQxIo6mq1IgmT1QI8M827nXFdGa30FnwUYm08ITGO6wQCfPyR6YNshXh325pC4L
sG9o3EiWmE6n60B+s19zOS5PBNY6SoLOoEihml/fvztz7S33y+rwv2GfqTK8b4wG
xWczZxiqpHoFrJlrzlxFQTOpx6WkUyl1jKz2JJSik3a4yHhLFe7mKvu8UOjm+ZIa
/LoxhXHWB0/2jXNSPTAanH72j27I1eK5E+QqUfDAPkGVsRe8uM6J
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:54 2026 by rpki-client