Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
File: 39332e39352e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CM3wE9oMOmtHvDjQgnEFIh/koUTAh6A0vP9wAJbGTDU=
Subject key identifier: D0:D4:21:43:C2:64:87:E9:6E:7A:AC:3D:09:7E:3D:44:CE:57:EF:D0
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 575A6F9A7060EC6D57A2F4F0FA0D37B7FD00E99C
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
Signing time: Sat 11 Jul 2026 07:01:30 +0000
ROA not before: Sat 11 Jul 2026 06:56:30 +0000
ROA not after: Sat 10 Jul 2027 07:01:30 +0000
asID: 834
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5a:6f:9a:70:60:ec:6d:57:a2:f4:f0:fa:0d:37:b7:fd:00:e9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jul 11 06:56:30 2026 GMT
Not After : Jul 10 07:01:30 2027 GMT
Subject: CN=D0D42143C26487E96E7AAC3D097E3D44CE57EFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:05:97:16:1f:87:9d:47:d0:77:a1:17:e0:
60:60:57:39:2b:76:9b:6c:9b:ec:7c:11:0c:13:9b:
e2:c5:1f:ac:98:88:74:2e:5a:50:1f:29:25:2b:32:
57:24:69:b0:69:70:0c:97:b3:83:c4:bb:e0:6f:76:
c7:4b:7d:b0:c7:73:c6:f3:4b:5d:f1:df:d4:5f:35:
a4:b3:20:98:6c:fe:07:09:22:51:62:a3:52:82:09:
02:7d:df:b1:95:60:38:52:77:d7:da:14:24:a4:82:
5a:38:a9:ee:b2:98:d1:4c:30:68:48:02:e6:52:1c:
e7:dc:f1:55:65:f8:37:fd:e3:94:c1:d4:0c:78:7e:
b6:1e:c6:58:11:ef:ec:4c:35:ef:2e:17:12:37:cf:
e6:13:c1:11:57:3f:50:a3:ee:8d:3a:38:2c:36:35:
8b:d9:2d:82:a7:7c:a9:f1:f3:7f:ef:e3:51:80:a8:
cd:34:df:e9:28:86:5d:cb:eb:1a:14:ce:90:e6:a8:
29:3d:39:99:c0:c4:e8:b7:c6:0a:de:37:73:57:ce:
a4:e9:f2:b6:b8:1f:95:dc:ac:23:5a:30:e8:06:ad:
92:07:e7:4f:ec:48:c9:00:a2:c5:8f:df:0d:e2:da:
31:e2:01:b7:9f:12:10:b9:e9:21:e1:15:39:97:86:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D4:21:43:C2:64:87:E9:6E:7A:AC:3D:09:7E:3D:44:CE:57:EF:D0
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:8a:f1:30:ad:81:8c:89:08:69:79:56:c2:85:56:22:a0:d5:
1e:52:38:0d:24:1a:32:57:96:68:c0:62:7e:b0:cb:93:01:1b:
f1:9f:08:2c:fb:d3:e9:36:3b:62:39:71:44:05:07:d0:79:ce:
9b:28:37:39:73:7a:c5:f0:22:4b:08:34:e1:44:38:d9:2b:7e:
5a:48:aa:8d:10:35:0b:5c:9e:6a:73:8d:ab:04:8b:73:17:2a:
83:7b:28:7a:90:c7:fc:03:b4:40:9d:25:53:43:5e:d4:39:9a:
03:e9:89:7c:16:8e:86:eb:aa:44:20:df:7b:d1:71:30:05:39:
07:0d:2f:6a:c3:b3:4f:ed:f8:aa:b9:cc:d0:75:cd:f0:56:ce:
1b:6c:68:aa:05:37:a9:8b:77:e0:0e:c7:94:12:b8:95:3f:fc:
27:3b:93:86:c3:56:be:d6:2e:1e:fe:46:01:e3:50:cf:74:26:
cc:3f:30:e5:3c:b7:3e:81:27:f8:0d:ea:7a:26:94:e6:11:6f:
79:6c:8e:ce:07:a0:98:8f:81:f7:4f:bc:5f:ff:ff:d5:25:a5:
73:e6:7b:e6:87:06:73:f6:76:2a:3e:0b:31:30:c1:d4:84:34:
99:42:57:60:0d:1c:37:bd:e5:5b:fb:a5:69:8b:31:47:da:c8:
7a:0c:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:09 2026 by rpki-client