Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8VgwWSsnsM9p/J2+q6Eb6nFU9lWBzTkvoQCsZ4F1sbs=
Subject key identifier: B0:57:41:D8:D6:33:37:60:CC:F8:1E:8B:EE:55:6F:C1:19:3B:3B:90
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 32CB1A82AA0120695218E33A0835B6AD907C70DB
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20383334.roa
Signing time: Wed 08 Jul 2026 16:12:23 +0000
ROA not before: Wed 08 Jul 2026 16:07:23 +0000
ROA not after: Wed 07 Jul 2027 16:12:23 +0000
asID: 834
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:1a:82:aa:01:20:69:52:18:e3:3a:08:35:b6:ad:90:7c:70:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jul 8 16:07:23 2026 GMT
Not After : Jul 7 16:12:23 2027 GMT
Subject: CN=B05741D8D6333760CCF81E8BEE556FC1193B3B90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:f0:b2:0b:c6:4d:0b:e0:5b:63:15:b8:6c:
17:42:30:57:dd:60:41:66:32:5c:39:50:5f:66:fd:
0b:ef:c2:75:aa:4a:23:62:08:d7:a6:49:0c:48:be:
b7:1e:c6:fb:9e:4d:55:8e:f6:5c:a5:be:31:bd:c3:
78:5b:b9:10:5d:b7:b6:8f:e9:45:f9:03:86:96:18:
dd:9e:25:45:15:2e:d6:21:e0:01:dd:c9:09:c7:b0:
1b:ed:10:ed:bb:63:1c:76:3f:6c:bd:10:72:70:fd:
9a:b0:84:1e:60:3b:d2:1e:98:d0:04:b3:8a:6b:ca:
b7:72:f9:ad:55:fb:86:13:7f:92:b6:0a:a6:ea:e1:
94:b3:d5:40:67:07:15:2f:60:8f:67:00:7a:17:43:
32:56:0b:d5:fe:a2:86:9d:e5:ef:27:e0:94:be:7c:
e6:56:03:ce:1b:3b:32:52:d1:71:2b:42:17:60:b5:
da:66:81:19:89:75:17:25:04:83:56:93:03:62:f2:
54:1f:b9:4e:27:fa:59:f3:01:70:12:47:b8:0c:c0:
75:59:88:36:7a:98:ee:09:4e:fc:59:c6:a9:8d:a9:
ba:5d:72:47:43:ff:e4:17:27:b5:7c:60:87:46:ab:
70:cb:a7:dd:4a:c8:57:00:8b:b5:ed:af:f0:30:c0:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:41:D8:D6:33:37:60:CC:F8:1E:8B:EE:55:6F:C1:19:3B:3B:90
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2f:bb:59:60:ca:e1:7f:22:cb:15:6e:2e:5b:98:01:0d:7a:
e3:99:dc:ec:fa:44:f3:f4:3d:c7:4e:5a:2a:73:09:3c:d7:98:
43:ad:48:a2:0d:e7:8e:11:b2:cb:5a:1c:9b:09:c9:ca:84:b8:
7c:b3:6b:16:44:af:df:b7:80:6e:e4:72:9b:f4:36:fc:d8:c2:
31:b9:f7:e8:a3:f1:74:f0:b5:49:4e:be:87:ef:6f:d9:1d:58:
27:f4:b8:97:30:ee:56:f4:c0:1e:9b:da:fd:3f:a7:8e:ed:d1:
59:46:30:ba:70:b6:91:f2:bd:8b:fc:70:17:69:66:40:b5:2b:
18:1b:6e:e7:f2:e8:4f:65:93:6b:9b:28:ee:e0:63:40:18:6e:
17:9e:89:99:a9:0f:c3:b6:ff:54:33:f2:53:d3:54:52:69:bd:
3b:42:3c:67:e1:c4:a1:36:dd:2f:3d:15:de:ec:d9:0d:5a:b9:
1c:b2:10:ee:ff:0d:82:d5:9f:02:13:26:ce:71:bf:aa:d7:ef:
68:01:19:5b:f5:99:61:a2:5e:29:f2:c8:d6:71:75:19:8a:61:
dc:aa:58:e5:4e:6f:bf:4e:ba:f2:28:75:09:2c:b1:9b:8a:3d:
8d:a2:87:2a:c7:55:f9:ba:b3:84:b4:e0:09:cc:47:c7:aa:da:
e9:ac:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:06 2026 by rpki-client