Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138382e302f32342d3234203d3e203331313033.roa
File: 39352e3136392e3138382e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: rndZnup1kWPGfWxOG3Zr2kX43Hisn62xWe/m5w9mu2c=
Subject key identifier: DA:C7:8E:34:BC:C4:19:3E:D6:EB:3F:A5:99:AD:1F:F3:8E:38:DF:B5
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 32257DF29637B5BAA46A56F470887CA32662920B
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138382e302f32342d3234203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 10:46:58 +0000
ROA not before: Fri 03 Apr 2026 10:41:58 +0000
ROA not after: Fri 02 Apr 2027 10:46:58 +0000
asID: 31103
IP address blocks: 95.169.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:25:7d:f2:96:37:b5:ba:a4:6a:56:f4:70:88:7c:a3:26:62:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 10:41:58 2026 GMT
Not After : Apr 2 10:46:58 2027 GMT
Subject: CN=DAC78E34BCC4193ED6EB3FA599AD1FF38E38DFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:5d:dd:ae:c1:0c:ed:66:ee:32:ce:2a:18:
9c:e7:5a:73:fc:b6:30:ac:fb:0a:0c:5c:9a:35:06:
14:88:e4:fc:72:8e:92:9e:53:c8:9a:9e:18:25:7f:
31:94:1f:b1:57:75:11:ab:19:32:5e:ed:c3:e7:51:
60:12:db:07:41:84:3f:a1:52:97:a0:19:1d:01:e9:
a0:b9:bc:05:f8:b9:b0:a4:ee:16:3f:9e:8e:d1:49:
1a:27:d0:42:f2:f4:ab:36:5f:62:af:32:c5:ea:ef:
38:88:4d:c2:40:e3:60:79:a6:d7:77:89:09:84:a7:
4e:5e:62:e8:ca:c4:1a:26:de:2d:c6:c0:67:92:c1:
6e:83:a8:b7:a6:3b:ff:8c:01:07:84:0b:8a:bc:04:
b7:c0:49:3e:5f:6d:ea:a1:67:cf:97:7c:22:fa:27:
8b:e3:25:bc:db:49:da:b3:9a:55:8f:b1:a6:d6:87:
52:fc:89:bc:bd:6a:f0:66:a0:69:ef:f2:52:db:a2:
07:85:10:7c:a4:e5:ce:78:c7:aa:b3:ab:1b:e7:10:
fa:7e:7f:a8:b1:e8:f4:a6:8a:ad:cc:43:d4:8c:28:
b0:85:88:45:ae:88:80:2b:51:23:e9:16:06:1f:27:
54:d4:34:1d:87:7c:b5:5b:70:58:77:d6:27:4e:43:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:8E:34:BC:C4:19:3E:D6:EB:3F:A5:99:AD:1F:F3:8E:38:DF:B5
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138382e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.188.0/24
Signature Algorithm: sha256WithRSAEncryption
52:92:66:70:73:23:13:6d:24:88:e1:66:72:15:fe:7a:2b:33:
f8:1e:36:9b:b4:06:15:5c:57:5e:41:56:38:01:ba:31:e6:a8:
19:1b:2b:c4:cb:8a:a5:fd:ef:a4:49:82:13:a0:a2:62:55:21:
30:e2:19:15:c0:87:02:c2:50:20:75:f4:79:17:bb:ec:19:ce:
c8:28:ea:89:9b:1e:17:d9:f2:b2:0b:b3:d1:15:15:75:70:fa:
b9:37:cc:30:64:dd:d5:7a:bd:db:e7:78:38:61:96:64:56:55:
45:64:64:44:79:15:b1:cf:55:43:56:75:b7:34:04:ee:ae:9b:
31:e4:af:6d:39:7f:a7:4d:34:92:2c:cf:77:fd:d1:67:93:be:
6e:be:06:19:b2:55:5c:cd:7f:2a:ad:b8:c7:a2:03:43:c4:fb:
d9:88:2e:d8:e3:23:2c:f2:df:48:12:c7:7a:3b:42:75:c9:20:
66:04:0f:14:09:72:15:4c:24:b3:57:4b:98:f2:c7:32:e3:bb:
d2:df:09:37:c0:9d:99:28:92:dd:78:2e:c2:fd:15:9e:0b:d2:
69:28:d6:7f:b0:55:92:75:6d:0f:ba:57:0a:d9:37:2c:b3:e8:
8c:30:01:96:bb:7e:e1:9a:c2:2e:23:55:45:1c:25:de:a6:31:
47:ce:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:23 2026 by rpki-client