Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20313437323038.roa
File: 39332e39352e3131362e302f32342d3234203d3e20313437323038.roa (raw, json)
Hash identifier: VQw3xwT3qwaoiTp+ohl+Ab4wtG5O6EYzNSMXJr70CM0=
Subject key identifier: F2:B7:64:D0:D8:0C:DB:51:C8:0F:E7:E2:A9:C2:EE:76:B5:29:18:06
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 0862ABEE62250EC3FCA39040E9284ED52D887FD6
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20313437323038.roa
Signing time: Sun 19 Jul 2026 11:45:31 +0000
ROA not before: Sun 19 Jul 2026 11:40:31 +0000
ROA not after: Sun 18 Jul 2027 11:45:31 +0000
asID: 147208
IP address blocks: 93.95.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:62:ab:ee:62:25:0e:c3:fc:a3:90:40:e9:28:4e:d5:2d:88:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jul 19 11:40:31 2026 GMT
Not After : Jul 18 11:45:31 2027 GMT
Subject: CN=F2B764D0D80CDB51C80FE7E2A9C2EE76B5291806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:d8:dd:12:3e:3c:a7:b5:2b:88:17:48:df:
89:84:24:54:7e:ca:b4:f4:df:ec:cc:65:ef:8e:e1:
8c:61:4f:25:45:37:4d:13:8e:48:99:66:28:f4:19:
15:08:20:67:ac:a8:a2:d3:88:a0:37:e2:88:f2:1a:
d9:51:c9:39:de:a2:47:94:12:60:07:72:09:48:05:
75:76:1f:ed:3f:a0:fb:ff:d0:72:e6:ea:49:9f:36:
92:17:f7:ed:f3:88:2f:df:99:a5:bd:f1:ae:b1:f0:
72:60:23:e9:4a:f4:31:10:74:ff:54:d4:fe:f2:52:
19:b0:3b:cb:85:ff:98:fb:ff:17:e5:d6:b9:15:99:
fc:17:21:ff:50:a9:de:b2:fb:18:8b:e9:cf:b7:f8:
be:b6:e8:6b:b4:8e:61:64:b0:a4:a9:af:8d:44:b1:
61:43:fa:df:a9:a0:4d:8a:f8:f7:a6:ea:f6:94:7d:
88:db:4f:cf:eb:5d:d1:af:7b:e7:99:24:6b:f9:a9:
c8:b3:a8:84:c6:5e:dd:13:93:fe:98:9c:ca:53:e9:
7e:b2:55:01:54:74:03:23:68:13:b7:26:c5:6e:6e:
fc:b7:a7:f2:38:ef:78:ba:6f:4d:eb:9b:ad:54:e3:
ca:6f:5b:87:3c:9c:82:36:a1:b4:27:bd:9c:e1:4c:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:64:D0:D8:0C:DB:51:C8:0F:E7:E2:A9:C2:EE:76:B5:29:18:06
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131362e302f32342d3234203d3e20313437323038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.116.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:8d:04:40:eb:95:5e:c8:44:96:c2:00:15:ce:51:5d:d7:12:
1e:2c:8c:c8:fd:2e:66:bf:00:6e:8d:af:28:fb:2f:40:32:be:
32:3b:70:2c:c2:08:e2:d3:0a:f3:dc:12:0b:9f:c1:74:12:47:
29:5b:bc:44:29:99:6d:e9:a0:ef:88:a8:26:fb:f1:7e:a7:14:
d2:9b:fa:19:9e:7e:9c:af:78:a4:4c:02:83:07:d8:62:ff:23:
8e:c3:09:f8:2b:f1:11:f2:cd:3f:a5:b2:1d:a8:b2:95:d5:57:
d6:09:e5:12:d1:25:7d:27:35:d5:ef:e5:38:b4:f3:99:43:20:
f3:b7:0f:e9:31:2b:33:59:b5:6d:05:b6:c8:70:91:06:bb:ae:
fd:58:a7:0d:c3:7b:23:17:82:e2:d1:12:1e:43:0e:ab:d9:8e:
36:5b:6b:85:2c:5b:6a:56:e5:71:39:1f:87:c0:95:90:97:92:
cf:cf:85:7e:66:64:93:be:f9:92:74:82:43:e2:7d:c5:cb:ef:
c6:de:10:16:1c:9c:ee:e4:68:8d:b6:6b:70:2b:da:0f:4a:fa:
0c:c1:fa:21:2a:53:7b:71:87:04:43:fc:c6:f2:56:63:ac:7a:
e9:23:e1:ce:ec:c6:ab:48:83:dd:08:82:7c:66:f2:00:35:30:
39:45:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:36 2026 by rpki-client