Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IsnU6ukDDEIOI5GUZtNKQeXqnu0yVtwPD36tnVnbVrI=
Subject key identifier: CD:FC:71:65:9C:39:B1:45:12:69:CB:17:21:C2:0F:12:D2:19:A4:EA
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 6E3AE4863800C39F9D4DAC2BB3F98DB400D0E34E
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
Signing time: Tue 14 Jul 2026 15:46:55 +0000
ROA not before: Tue 14 Jul 2026 15:41:55 +0000
ROA not after: Tue 13 Jul 2027 15:46:55 +0000
asID: 834
IP address blocks: 93.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:3a:e4:86:38:00:c3:9f:9d:4d:ac:2b:b3:f9:8d:b4:00:d0:e3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jul 14 15:41:55 2026 GMT
Not After : Jul 13 15:46:55 2027 GMT
Subject: CN=CDFC71659C39B1451269CB1721C20F12D219A4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:17:bf:18:43:3f:99:b5:c0:ea:20:36:f7:
98:6b:68:c0:65:74:e7:45:49:2b:62:53:0e:05:31:
15:0d:53:99:8d:fe:37:3b:d0:c4:5a:e0:58:6a:bf:
6b:56:e3:ef:2d:74:08:9e:5c:72:b0:65:48:16:31:
1b:43:97:f0:b7:e6:34:2b:5c:0d:26:46:46:20:18:
52:b9:cb:da:73:b0:10:df:18:0a:94:31:ab:70:9e:
a4:0a:60:67:22:2d:8f:49:bc:a8:2c:44:ae:6d:bf:
31:11:81:aa:03:34:41:90:52:d1:f8:57:5e:e0:c6:
60:bd:ab:29:8e:0d:31:f5:93:3b:88:e6:56:1d:3d:
7f:87:30:06:b6:ff:a2:46:84:91:57:1c:b0:56:c4:
7f:a3:15:a2:12:b4:d6:cc:8d:2d:5a:0f:be:ce:65:
9b:b8:bb:44:2b:52:5a:21:24:89:b4:af:fc:89:a2:
8f:29:2d:5d:6e:e4:d4:89:04:52:5e:cb:69:31:2a:
73:ee:62:aa:bd:ad:8d:ae:ac:33:f2:33:a5:20:cd:
dd:26:4d:81:75:b6:89:87:78:ae:29:5a:b3:0f:63:
e7:e4:d9:ea:8e:9e:8b:9b:d1:f0:bb:df:c0:e0:b0:
f3:d2:f7:24:bb:91:61:66:b5:91:0d:f6:cd:b0:48:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:71:65:9C:39:B1:45:12:69:CB:17:21:C2:0F:12:D2:19:A4:EA
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
59:35:69:a8:ba:29:e2:1d:68:4e:42:5d:c4:08:bb:08:d0:35:
17:33:29:df:16:ab:52:0d:fb:11:6a:3e:e5:60:86:99:26:4f:
17:3e:bb:60:df:5b:85:64:c8:b3:f1:c3:b6:11:20:4d:b0:f2:
10:74:09:5b:19:55:e7:69:e2:11:7a:21:73:dc:8f:6e:bc:4d:
a0:d1:a5:8f:74:d5:db:b2:6e:2a:c8:56:80:72:4d:47:e4:f5:
4d:d7:64:68:b4:2d:04:29:4c:9f:82:ca:88:0f:7f:40:42:23:
8a:f6:e1:de:b8:34:95:76:e1:b5:6b:42:9e:3e:8c:7c:ce:d4:
d8:d8:84:dd:e9:8c:1d:b7:64:e9:dc:1a:e4:46:70:fc:c5:6e:
c0:d6:e2:2f:21:44:73:0c:5d:61:39:a1:85:53:5b:fa:00:39:
d0:68:b9:df:46:d1:7b:f3:a1:17:d8:34:7b:56:f4:fb:1c:a4:
fc:81:03:98:21:ea:6d:ee:6d:6b:08:c0:e7:30:72:5e:5f:95:
bc:12:47:01:e2:b4:1f:f6:55:e9:b8:f7:fd:08:b6:f9:91:13:
92:b5:9c:aa:88:b9:fc:78:a2:43:59:19:56:35:91:a4:1a:92:
3f:83:57:a8:0d:45:67:3b:e3:6a:81:6c:24:13:9b:46:8f:ef:
f8:e0:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:12 2026 by rpki-client