Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20323130373332.roa
File: 39332e39352e3131322e302f32342d3234203d3e20323130373332.roa (raw, json)
Hash identifier: PX19irLQHpIFWltGzv3XYJnikwfnyHbTOA1bjEAIlcw=
Subject key identifier: AD:30:9A:98:4F:F4:51:DC:4F:E1:1A:FE:F4:39:7E:15:97:8F:63:B1
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 5902C0B4D323CFEE18920DF1F69DCED6E16F5D91
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20323130373332.roa
Signing time: Tue 22 Sep 2026 16:29:53 +0000
ROA not before: Tue 22 Sep 2026 16:24:53 +0000
ROA not after: Tue 21 Sep 2027 16:29:53 +0000
asID: 210732
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:02:c0:b4:d3:23:cf:ee:18:92:0d:f1:f6:9d:ce:d6:e1:6f:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Sep 22 16:24:53 2026 GMT
Not After : Sep 21 16:29:53 2027 GMT
Subject: CN=AD309A984FF451DC4FE11AFEF4397E15978F63B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:5a:1a:58:7a:d4:c7:5b:b1:5f:23:c7:81:
14:0c:d2:ec:8c:77:1d:36:53:88:8d:c5:92:3c:53:
3d:43:c3:84:fa:65:4d:d5:36:3c:43:0b:f7:da:92:
3f:67:57:ae:05:4e:2f:85:3f:ce:e6:f3:40:83:8b:
ba:e9:97:5f:e6:f9:8e:b6:07:74:6f:c1:8b:5d:d8:
73:49:93:14:f3:98:60:21:7c:d8:ae:b6:f0:8b:74:
40:1f:6a:59:a4:94:fb:7c:27:f1:dd:0c:50:9a:80:
be:27:81:9c:9c:e0:dd:d3:d3:12:aa:c0:ea:02:f3:
f2:d6:f9:f3:0d:b1:11:6d:28:22:14:91:54:23:54:
89:41:08:96:ae:42:cf:81:2d:16:d3:c7:d4:f0:4d:
29:07:e9:5e:78:b6:37:8a:7f:18:fc:e5:a0:12:27:
21:78:15:6c:bc:8e:60:e7:d6:99:71:d0:19:62:eb:
86:66:62:9e:e5:46:f2:07:fd:aa:bd:d0:f5:b2:76:
05:f2:63:2c:fc:1e:79:07:86:4a:06:a0:be:43:3e:
59:58:9b:b0:12:32:3d:50:b7:2e:c0:c8:88:ad:9b:
37:38:7f:46:0c:44:b6:2e:1b:e7:3d:ac:44:86:fb:
9b:1a:c8:c7:21:e7:c2:6e:fe:75:b7:86:86:8e:c4:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:9A:98:4F:F4:51:DC:4F:E1:1A:FE:F4:39:7E:15:97:8F:63:B1
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20323130373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a0:6c:4e:58:ee:36:92:2e:9a:0b:a5:4f:47:b2:53:fe:2b:
22:96:02:7a:e0:5c:79:2f:94:37:42:10:44:92:ba:fb:fb:92:
66:c8:55:e2:7e:c9:db:b3:09:03:f6:51:d9:1f:e6:d0:31:aa:
9c:8f:f7:d8:55:3a:4f:3a:30:ea:7e:5c:b4:02:ff:8b:47:0a:
f4:59:4b:28:c7:ce:5d:2b:ac:76:bb:ec:6b:77:26:91:c8:a4:
16:6b:49:ad:70:49:4c:01:53:11:1e:93:37:c3:c1:f8:ad:c5:
dd:ea:9e:46:30:7a:4a:d5:91:92:3d:3c:ec:2b:c2:c9:bb:e3:
0e:b0:f3:50:08:d6:08:fc:70:a8:e1:72:ef:2d:1c:15:4c:89:
85:cb:80:b2:8b:eb:ba:85:4b:7c:b2:ed:7f:09:88:b7:dd:c8:
24:56:11:9e:ac:e7:b8:75:f0:38:66:90:7e:57:4d:30:0f:11:
bc:70:da:83:1e:57:cb:7b:4f:a6:c5:c4:b2:4e:90:81:18:52:
33:fa:f1:c5:ca:46:73:e8:40:20:ef:1d:05:77:ea:13:a7:07:
2c:37:70:21:15:ef:65:e9:d4:ff:95:a0:4e:41:6c:64:62:0b:
50:f4:f3:51:72:2a:b1:9a:6d:7c:9c:5d:7f:ed:d8:dd:d9:3e:
5f:b8:8a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:25 2026 by rpki-client