Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e2039333034.roa
File: 39332e39352e3131322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: zUwgNrj8/Pqn6SSwkBw/pyrAcW11nb3rzQwJkkprQBw=
Subject key identifier: 01:F8:59:5D:1E:CB:17:E0:3F:6C:37:A3:1F:EF:5D:95:38:6A:B9:86
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 442EC3C24E7546DB91CDCA29715DF726F2783B82
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e2039333034.roa
Signing time: Fri 27 Jun 2025 17:43:10 +0000
ROA not before: Fri 27 Jun 2025 17:38:10 +0000
ROA not after: Fri 26 Jun 2026 17:43:10 +0000
asID: 9304
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2e:c3:c2:4e:75:46:db:91:cd:ca:29:71:5d:f7:26:f2:78:3b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jun 27 17:38:10 2025 GMT
Not After : Jun 26 17:43:10 2026 GMT
Subject: CN=01F8595D1ECB17E03F6C37A31FEF5D95386AB986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:06:76:81:68:b9:b4:97:5e:24:10:d8:a7:
3d:f2:88:54:67:9a:4b:98:53:45:e9:4b:da:aa:00:
1d:57:a9:c2:99:ba:c8:df:b2:17:bb:13:bb:fe:0c:
34:41:25:4c:26:7b:44:72:44:13:72:a2:02:c2:bc:
2f:ec:a8:6d:d2:52:ca:84:9a:8c:92:0c:54:1a:6a:
71:38:85:f0:25:fb:e1:7f:de:28:c0:b2:29:bd:d7:
c8:ec:b8:2b:b2:3f:4e:d2:8d:75:d3:08:1a:bc:9f:
cb:85:b2:1c:cc:92:8a:a0:55:70:98:5e:44:a3:45:
2a:d6:48:f0:65:0f:b8:4e:e0:f8:b0:a9:d0:26:95:
1e:45:17:ae:69:8f:7a:84:15:66:cc:3d:18:b0:93:
2c:94:d6:15:2b:e9:ee:a7:70:b2:91:d3:46:75:03:
8f:e8:74:01:5a:23:10:c0:1f:e3:6d:be:c9:4d:63:
f7:55:82:6d:24:c3:a9:31:1b:d5:60:1d:13:7b:a0:
09:40:be:0d:2c:b8:d3:a3:33:60:2c:74:4c:47:9f:
ef:4e:34:a1:c9:93:8d:47:c9:90:2e:a1:ec:1a:37:
e7:17:bc:f2:3a:21:b9:2f:2f:d4:ca:87:1f:57:bf:
36:2c:26:2e:08:72:ce:79:e5:26:9b:fe:bd:fe:30:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:59:5D:1E:CB:17:E0:3F:6C:37:A3:1F:EF:5D:95:38:6A:B9:86
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:23:14:f4:ba:df:e5:68:f9:3a:bb:e7:f0:8b:27:a3:2a:80:
56:86:e0:c9:c4:98:80:2d:58:4c:cf:ea:0d:56:2a:95:e1:6c:
cf:9e:e4:cf:4f:80:31:95:b8:1e:a8:03:ae:e8:0b:7b:57:73:
08:1c:ad:52:e7:36:5e:ff:88:75:0f:08:2d:0c:11:91:e8:6e:
35:67:21:9e:48:23:85:b4:a1:43:98:09:df:16:09:0b:3f:92:
c5:c2:c8:54:44:cb:55:7e:1a:be:51:01:dd:42:e9:cc:b0:a6:
f5:d1:66:37:23:4a:c9:04:e3:76:fb:4b:00:c0:6c:dd:6b:ab:
67:64:46:6b:75:af:54:f2:ae:02:17:a8:2d:47:e4:de:a9:47:
2d:8b:ba:b4:d2:91:73:12:31:01:00:90:83:44:c5:6d:c7:d6:
c0:0e:77:a7:8b:9e:90:d2:cf:19:be:e9:ca:ae:8a:ea:03:6e:
a9:87:32:81:7e:95:7b:ba:6c:a4:44:f5:2e:d6:2f:2f:7d:7b:
70:e4:0c:44:1d:01:e3:c2:c6:91:f5:c8:49:62:60:85:9a:88:
3b:74:77:7f:b4:ef:c2:a6:fd:c5:47:5b:6f:b3:af:9d:74:45:
c3:9d:8a:bd:7e:ca:b5:c7:cb:63:6d:9d:cf:08:d2:f6:8f:4f:
7f:60:73:d6
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURC7Dwk51RtuRzcopcV33JvJ4O4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNTA2MjcxNzM4MTBaFw0yNjA2MjYxNzQzMTBaMDMxMTAvBgNV
BAMTKDAxRjg1OTVEMUVDQjE3RTAzRjZDMzdBMzFGRUY1RDk1Mzg2QUI5ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/wZ2gWi5tJdeJBDYpz3yiFRn
mkuYU0XpS9qqAB1XqcKZusjfshe7E7v+DDRBJUwme0RyRBNyogLCvC/sqG3SUsqE
moySDFQaanE4hfAl++F/3ijAsim918jsuCuyP07SjXXTCBq8n8uFshzMkoqgVXCY
XkSjRSrWSPBlD7hO4PiwqdAmlR5FF65pj3qEFWbMPRiwkyyU1hUr6e6ncLKR00Z1
A4/odAFaIxDAH+NtvslNY/dVgm0kw6kxG9VgHRN7oAlAvg0suNOjM2AsdExHn+9O
NKHJk41HyZAuoewaN+cXvPI6IbkvL9TKhx9XvzYsJi4Ics555Sab/r3+MHxLAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUAfhZXR7LF+A/bDejH+9dlThquYYwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdX3Aw
DQYJKoZIhvcNAQELBQADggEBAOAjFPS63+Vo+Tq75/CLJ6MqgFaG4MnEmIAtWEzP
6g1WKpXhbM+e5M9PgDGVuB6oA67oC3tXcwgcrVLnNl7/iHUPCC0MEZHobjVnIZ5I
I4W0oUOYCd8WCQs/ksXCyFREy1V+Gr5RAd1C6cywpvXRZjcjSskE43b7SwDAbN1r
q2dkRmt1r1TyrgIXqC1H5N6pRy2LurTSkXMSMQEAkINExW3H1sAOd6eLnpDSzxm+
6cquiuoDbqmHMoF+lXu6bKRE9S7WLy99e3DkDEQdAePCxpH1yEliYIWaiDt0d3+0
78Km/cVHW2+zr510RcOdir1+yrXHy2Ntnc8I0vaPT39gc9Y=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:18 2025 by rpki-client