Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203631333137.roa
File: 39352e3136392e3136372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 8fDs55QSGeJaoFELZQTBEvuZ3rSvV82sv/l57gaFbH0=
Subject key identifier: 28:94:1D:FD:AF:CE:F5:5D:FC:32:70:85:09:FD:39:88:14:D7:BE:5E
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 084AA1A186B1F297B19BAB4F8C3B5BACEDB12536
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203631333137.roa
Signing time: Wed 06 May 2026 22:47:11 +0000
ROA not before: Wed 06 May 2026 22:42:11 +0000
ROA not after: Wed 05 May 2027 22:47:11 +0000
asID: 61317
IP address blocks: 95.169.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4a:a1:a1:86:b1:f2:97:b1:9b:ab:4f:8c:3b:5b:ac:ed:b1:25:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 6 22:42:11 2026 GMT
Not After : May 5 22:47:11 2027 GMT
Subject: CN=28941DFDAFCEF55DFC32708509FD398814D7BE5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:00:be:1d:d3:a7:35:28:f3:e2:bc:c7:0c:
13:a0:4c:16:bb:f8:5a:41:01:cb:33:54:5b:95:96:
e8:f6:ad:73:f1:1b:08:59:91:fd:76:56:4f:43:2c:
7e:96:35:6b:ce:aa:6c:12:21:8e:3d:6c:59:4b:a7:
97:e4:59:eb:b0:fa:b9:f1:25:8d:50:1b:59:c8:67:
2a:ca:24:90:b2:ef:af:5c:d8:a0:f0:e8:b5:49:0b:
72:da:3c:34:ec:31:80:c6:aa:64:bb:3f:ad:80:89:
a3:01:75:28:73:a4:bd:77:dd:75:f3:f2:c2:43:49:
89:49:57:75:c2:46:16:87:7f:58:03:2e:97:87:1d:
87:50:06:31:2f:9f:32:bb:96:fd:b4:38:cb:d4:4c:
57:d8:5f:fc:1e:48:81:98:b3:1f:65:ab:fe:46:0b:
fe:b1:a0:f9:0e:99:6e:8f:05:a6:b2:39:68:b7:77:
3f:be:aa:af:9b:57:67:8c:f9:f5:f9:3e:d9:22:83:
8b:53:00:60:99:8a:fd:a8:5b:1a:ab:c9:ce:ae:29:
2b:1c:ee:13:db:34:e8:3d:74:2d:fb:19:91:54:a5:
0f:32:61:15:a6:c5:40:73:77:17:57:00:61:23:b1:
9e:37:b4:6a:4f:57:9d:11:01:02:90:db:81:6f:40:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:1D:FD:AF:CE:F5:5D:FC:32:70:85:09:FD:39:88:14:D7:BE:5E
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3136372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b1:c5:a9:08:aa:73:23:af:51:8d:da:b3:92:8a:06:cd:0e:
f3:3d:75:13:7e:6c:67:7a:57:9c:df:d0:6e:00:56:43:b3:70:
17:43:71:0a:f8:a8:9e:85:34:61:4a:4d:b0:b5:f6:62:cf:84:
b9:ea:e7:1a:29:05:7d:3f:e9:36:09:a1:ae:a4:a9:c5:21:f8:
2e:38:64:e4:4c:62:0b:aa:13:14:07:a2:c1:1e:b8:f6:c7:7a:
b0:e5:08:aa:4f:85:4f:d4:75:6c:32:43:be:be:f6:bb:2c:fc:
f0:ee:99:98:04:f4:81:64:63:28:bc:04:a8:67:e5:80:e1:82:
aa:5c:bb:9d:e8:c0:b1:3a:06:19:fe:05:ff:22:64:89:ca:a7:
52:65:d0:39:ae:25:d5:c2:b9:60:8e:a4:7e:d0:17:4b:90:dc:
dc:80:a4:95:2a:dd:60:3f:03:e1:f9:63:ab:41:ea:c2:88:70:
7f:6c:57:da:dd:90:4a:65:33:f8:12:12:69:3b:12:35:e9:0d:
d7:8c:4b:3e:8a:1e:10:4b:2c:98:f4:be:69:9a:af:eb:3c:11:
02:fc:b9:b2:42:45:bf:ad:66:fe:7e:9f:03:74:39:13:ae:c2:
db:63:59:21:6c:bb:22:32:94:94:b5:83:69:26:82:b9:ea:05:
bc:ae:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:54 2026 by rpki-client