Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20313530323933.roa
File: 39332e39352e3131332e302f32342d3234203d3e20313530323933.roa (raw, json)
Hash identifier: sFKJ+/43Q0TDsK2fITN6YuDzrhvf9oDqMZEN2TxnHz4=
Subject key identifier: 2F:08:E0:58:02:E4:EC:EE:DE:22:9A:85:AA:3D:18:23:05:13:DA:36
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 7EF50A0AE09ECD4DAC538125FF9B7858100EA82F
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20313530323933.roa
Signing time: Tue 24 Mar 2026 06:47:02 +0000
ROA not before: Tue 24 Mar 2026 06:42:02 +0000
ROA not after: Tue 23 Mar 2027 06:47:02 +0000
asID: 150293
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f5:0a:0a:e0:9e:cd:4d:ac:53:81:25:ff:9b:78:58:10:0e:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Mar 24 06:42:02 2026 GMT
Not After : Mar 23 06:47:02 2027 GMT
Subject: CN=2F08E05802E4ECEEDE229A85AA3D18230513DA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:d4:08:21:15:be:5f:70:32:52:05:71:0b:
84:bb:f2:3c:d9:b6:91:9a:64:50:e8:49:7b:14:04:
d7:f0:c8:3b:bc:76:0f:e8:ae:b2:74:78:2f:4b:5c:
41:ee:e0:2c:c2:4e:de:15:bd:8e:3e:67:93:55:05:
cf:07:39:3a:ae:a2:e8:17:30:fd:90:53:dc:08:fe:
51:72:ba:95:47:04:42:10:78:94:1f:e3:f9:6e:8d:
ad:1c:d0:f3:ea:e6:cd:04:f1:fc:fc:03:73:83:4b:
0e:84:2f:3a:ed:59:f1:cb:b7:47:d9:3d:b8:46:ff:
0a:9d:3c:a1:e9:63:0a:91:ef:35:1b:87:45:bc:5b:
65:b4:a2:45:81:8a:63:f0:10:e9:ed:5f:68:11:3d:
a4:79:4f:38:a7:74:85:bb:ab:89:86:f5:7f:c4:7f:
a6:09:8d:fb:0a:04:37:c6:91:e0:9a:3f:13:26:c0:
6e:33:23:2a:62:9a:6f:8c:56:0c:3e:91:f4:4c:07:
ad:e3:ee:ca:40:f1:fc:42:e8:2a:42:76:ec:20:b5:
17:ea:8f:2b:8b:be:95:2d:07:b1:b9:4c:73:05:73:
49:5b:98:9a:1e:f8:59:1e:b7:21:31:49:76:69:47:
1e:a0:f9:0d:12:ec:a4:54:99:df:90:74:40:3d:de:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:08:E0:58:02:E4:EC:EE:DE:22:9A:85:AA:3D:18:23:05:13:DA:36
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20313530323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
53:75:35:e7:91:6e:32:ad:1c:dc:0c:63:3f:0a:a5:80:9e:36:
52:81:6d:34:26:a0:12:71:17:58:97:9a:73:b5:21:95:e4:1a:
6c:78:c4:2c:e4:33:69:57:dc:6b:6a:3c:53:3f:da:5e:d1:70:
f4:eb:8d:51:5a:0b:5f:c2:e5:ce:36:aa:97:b2:f0:0b:39:23:
3d:4c:26:96:05:c0:0f:73:a6:3b:2b:12:49:da:1b:98:5a:54:
5b:f1:93:68:81:39:a2:b7:15:5a:80:49:62:7f:0d:74:44:b3:
4d:b6:f8:67:15:f9:99:e9:03:97:b5:02:a0:e1:72:1d:5b:d0:
b4:8d:c7:4d:14:7e:ee:63:10:68:51:da:dc:f9:65:69:2a:83:
9f:d1:4d:14:10:ae:99:29:a4:45:78:d0:2d:6e:81:e5:3e:b6:
41:d8:64:c4:3a:50:b4:db:a2:5e:61:2f:29:a3:63:a9:5b:86:
cb:4e:3c:90:68:93:b2:69:fb:59:a4:ee:ba:eb:56:db:e1:a3:
b9:04:1e:60:f6:31:7e:ba:0f:3f:ac:59:d8:84:86:ce:e8:bb:
31:4c:ac:c9:e0:e8:59:f8:d4:35:d0:dd:1a:c5:b0:b7:04:d3:
0a:3c:6b:f8:cf:c5:44:db:99:df:40:58:15:cb:7a:5f:84:25:
40:af:a2:7b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfvUKCuCezU2sU4El/5t4WBAOqC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNjAzMjQwNjQyMDJaFw0yNzAzMjMwNjQ3MDJaMDMxMTAvBgNV
BAMTKDJGMDhFMDU4MDJFNEVDRUVERTIyOUE4NUFBM0QxODIzMDUxM0RBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQV9QIIRW+X3AyUgVxC4S78jzZ
tpGaZFDoSXsUBNfwyDu8dg/orrJ0eC9LXEHu4CzCTt4VvY4+Z5NVBc8HOTquougX
MP2QU9wI/lFyupVHBEIQeJQf4/luja0c0PPq5s0E8fz8A3ODSw6ELzrtWfHLt0fZ
PbhG/wqdPKHpYwqR7zUbh0W8W2W0okWBimPwEOntX2gRPaR5TzindIW7q4mG9X/E
f6YJjfsKBDfGkeCaPxMmwG4zIypimm+MVgw+kfRMB63j7spA8fxC6CpCduwgtRfq
jyuLvpUtB7G5THMFc0lbmJoe+FketyExSXZpRx6g+Q0S7KRUmd+QdEA93mZjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQULwjgWALk7O7eIpqFqj0YIwUT2jYwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
XV9xMA0GCSqGSIb3DQEBCwUAA4IBAQBTdTXnkW4yrRzcDGM/CqWAnjZSgW00JqAS
cRdYl5pztSGV5BpseMQs5DNpV9xrajxTP9pe0XD0641RWgtfwuXONqqXsvALOSM9
TCaWBcAPc6Y7KxJJ2huYWlRb8ZNogTmitxVagElifw10RLNNtvhnFfmZ6QOXtQKg
4XIdW9C0jcdNFH7uYxBoUdrc+WVpKoOf0U0UEK6ZKaRFeNAtboHlPrZB2GTEOlC0
26JeYS8po2OpW4bLTjyQaJOyaftZpO6661bb4aO5BB5g9jF+ug8/rFnYhIbO6Lsx
TKzJ4OhZ+NQ10N0axbC3BNMKPGv4z8VE25nfQFgVy3pfhCVAr6J7
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:23 2026 by rpki-client