Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e203231383539.roa
File: 39332e39352e3131372e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: Un+iljfa6BQzZnEghHopYhiwkN2j6KkmFMitjF4eFLQ=
Subject key identifier: 19:54:DF:DB:77:69:84:EB:50:D6:1A:FB:3A:E7:EC:01:EF:8C:49:2A
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3B80F8E508C6D5A22B659242256D80133B39B335
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e203231383539.roa
Signing time: Thu 07 Aug 2025 06:46:51 +0000
ROA not before: Thu 07 Aug 2025 06:41:51 +0000
ROA not after: Thu 06 Aug 2026 06:46:51 +0000
asID: 21859
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:80:f8:e5:08:c6:d5:a2:2b:65:92:42:25:6d:80:13:3b:39:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Aug 7 06:41:51 2025 GMT
Not After : Aug 6 06:46:51 2026 GMT
Subject: CN=1954DFDB776984EB50D61AFB3AE7EC01EF8C492A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:d4:17:9b:8f:14:a5:ce:1e:23:93:0d:e8:
c4:f0:58:76:b6:b0:02:81:50:04:69:37:ae:17:a5:
07:21:a0:61:06:7c:4a:d8:44:88:50:dc:8c:36:e3:
e1:4c:a0:7d:b7:d6:2b:fa:e9:39:b4:8d:e3:ec:b8:
b7:92:44:53:8d:4c:a3:16:ef:09:66:c8:45:bf:5b:
64:a3:8a:2a:96:6f:e9:2b:eb:fa:9d:85:c8:54:3a:
57:69:6b:3f:ed:08:e9:d7:73:b6:25:a8:d5:3f:9e:
59:2c:78:9d:14:8c:f4:74:32:b8:a3:eb:2b:b1:5b:
0e:bd:02:3d:38:b0:8c:ce:8e:51:f1:df:ae:33:47:
4f:f5:42:9b:5a:9c:e8:b7:ef:4f:b1:fa:16:90:77:
7d:45:31:a7:94:95:76:8a:50:3e:49:d6:5b:1f:5c:
ee:00:ec:cc:45:74:e5:b9:38:db:15:96:43:64:b4:
04:39:25:8c:57:22:4d:61:61:b5:99:42:11:da:f5:
98:d5:36:aa:83:84:a6:6f:21:fc:fc:16:75:5d:8f:
ae:05:55:62:3f:fa:3a:6b:85:28:a4:ff:cc:e1:91:
62:9b:0b:3d:d0:24:1d:b8:da:b0:cc:d2:a4:72:0a:
d5:bc:93:dd:09:28:a6:fc:a0:44:90:82:3b:be:a7:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:DF:DB:77:69:84:EB:50:D6:1A:FB:3A:E7:EC:01:EF:8C:49:2A
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b5:0a:ae:18:70:fd:3f:60:9b:29:69:41:ce:f4:8f:81:c6:
e4:65:95:9a:c6:60:1e:d8:48:c3:1e:1d:1b:44:4c:2f:ab:e3:
6a:ed:06:2b:6c:14:00:a4:a7:4d:70:ff:6d:dc:0b:5f:11:fd:
91:60:f6:a2:9f:8a:e4:a1:67:e6:1f:c4:eb:1f:d0:d5:8b:c2:
24:b9:7f:58:f8:e5:3c:99:76:39:94:bc:fc:bd:cd:20:0c:cf:
d5:0d:d3:37:ec:aa:15:d7:22:22:bd:a3:f5:bc:f3:ba:c2:1d:
89:19:cf:3f:b6:25:be:f2:8a:18:91:8b:8e:86:98:b8:1d:49:
23:99:99:63:60:c2:10:17:da:92:28:26:ab:30:89:21:df:ae:
c5:53:aa:f4:05:09:d8:67:01:38:43:19:e2:11:cd:e0:b9:a4:
6e:64:b1:ff:b9:00:ff:ba:53:16:f1:7e:2f:b6:0c:03:49:f9:
e8:de:bc:b2:ff:b4:92:b4:79:7c:82:32:14:44:a9:54:a5:1e:
ec:e1:54:51:2c:14:e4:95:0b:c1:1e:2f:5a:ad:66:2a:b8:89:
7d:72:3f:2e:40:94:c2:ff:a2:12:e4:92:83:76:87:7d:fe:9b:
c8:0d:c7:1c:94:fd:5b:f8:05:de:2b:44:ac:e3:db:ce:8a:9a:
ab:ef:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:07 2025 by rpki-client