Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313335333932.roa
File: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (raw, json)
Hash identifier: fGOsLQpuq7w+Mlth5Jlzw6zSul9g+K81meekR3kD4oA=
Subject key identifier: EA:D1:CA:F9:26:23:CF:E4:A3:56:80:04:89:03:79:90:4B:1F:1E:26
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 2C127073EA2E3DFE01D260964E3E82EB5BB162E2
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313335333932.roa
Signing time: Fri 03 Oct 2025 12:55:08 +0000
ROA not before: Fri 03 Oct 2025 12:50:08 +0000
ROA not after: Fri 02 Oct 2026 12:55:08 +0000
asID: 135392
IP address blocks: 93.95.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:12:70:73:ea:2e:3d:fe:01:d2:60:96:4e:3e:82:eb:5b:b1:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Oct 3 12:50:08 2025 GMT
Not After : Oct 2 12:55:08 2026 GMT
Subject: CN=EAD1CAF92623CFE4A3568004890379904B1F1E26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:d2:98:ae:48:6a:ec:51:1e:46:03:05:40:
ae:0c:2f:b8:b5:6d:21:c3:80:cc:90:86:19:d6:49:
b8:14:22:6c:bf:3f:38:ea:42:71:46:c4:f4:c3:99:
f8:5d:80:6a:33:2e:90:d3:2e:15:cf:7e:f3:46:20:
cf:a2:e8:9b:d6:20:74:9c:d8:56:6d:3d:fe:e6:2d:
c6:1c:a8:9f:fc:0d:4e:8c:c3:ae:56:d9:75:40:2b:
e2:92:d1:65:87:48:b7:0a:c9:fc:56:3d:6d:0e:e2:
bf:9d:a8:1a:ae:a5:19:00:ce:ea:f7:52:22:b7:f3:
93:04:66:94:53:44:91:17:cb:7f:89:01:50:fc:bb:
f1:f5:7b:96:ac:6e:ac:81:d2:21:76:38:62:ce:5f:
9a:2b:d5:6d:90:a7:29:49:98:e3:e0:1e:4c:15:fc:
40:85:ed:73:f9:9f:1f:28:07:74:17:87:fb:68:77:
6e:5a:b6:42:6a:11:a4:98:4d:0b:19:3d:7b:99:76:
b8:71:71:76:b1:be:09:bf:47:00:9b:b9:0e:e0:77:
6a:51:da:c9:1d:2f:24:69:5e:68:81:7b:6e:4a:5d:
86:94:60:3d:d3:26:ee:43:ad:c1:59:cc:c8:39:d0:
92:f8:cb:a0:1b:ea:4b:45:a1:a3:33:dc:4d:57:13:
c1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D1:CA:F9:26:23:CF:E4:A3:56:80:04:89:03:79:90:4B:1F:1E:26
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131352e302f32342d3234203d3e20313335333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:00:a7:bd:ef:29:d7:38:1a:65:25:88:69:9c:0d:51:8a:19:
91:7b:1e:c9:67:ea:da:ee:00:f3:5b:f9:b2:e6:54:bb:7b:3c:
f7:1a:30:ea:4b:2e:b2:e6:75:69:92:08:c3:97:62:2b:50:54:
e0:29:06:cb:9f:e7:7b:5d:75:e9:4f:47:7d:c2:4b:3e:2c:e2:
07:94:ec:3b:b8:67:d0:04:65:1f:5f:d2:5c:54:d0:5e:eb:34:
55:99:b1:e8:bb:1d:3f:6b:ba:f8:78:29:19:83:88:56:d6:17:
e7:f0:2f:36:ff:9a:80:59:ef:9d:50:bf:93:66:b9:e2:86:91:
f2:e8:9f:c4:40:83:3f:88:d6:c1:46:7b:82:57:c5:8c:ae:ce:
96:6c:b9:75:9b:a0:c5:54:39:85:4a:76:b9:91:fc:28:86:1f:
ac:22:88:d2:b9:2d:1a:69:bc:fd:d6:41:30:c5:18:e3:25:0b:
c3:56:8a:1a:c1:db:40:f1:b7:6a:75:f7:13:cd:e7:dc:fe:fb:
8e:21:42:a9:70:c2:8a:64:34:a7:a6:d2:b7:ec:56:ba:49:cd:
93:7a:7c:0b:08:72:31:e0:83:df:ef:ae:0d:d6:2d:c1:02:35:
7c:84:60:f4:08:06:2b:88:5a:f7:d0:47:be:d8:d2:97:9c:cb:
54:ff:04:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:52 2025 by rpki-client