Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20313532333234.roa
File: 39352e3136392e3137302e302f32342d3234203d3e20313532333234.roa (raw, json)
Hash identifier: pw9FQ2kcMAGKgbAQmpzBIlTZv9uKnBVNYRt0e50Ksck=
Subject key identifier: FC:0A:3D:3B:78:E4:EC:2F:B2:59:89:A0:4A:C3:8C:39:93:9C:C8:5E
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 22F1649CD5E3896CE70690647D9C85A16AE8FCF9
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20313532333234.roa
Signing time: Wed 23 Sep 2026 07:13:30 +0000
ROA not before: Wed 23 Sep 2026 07:08:30 +0000
ROA not after: Wed 22 Sep 2027 07:13:30 +0000
asID: 152324
IP address blocks: 95.169.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f1:64:9c:d5:e3:89:6c:e7:06:90:64:7d:9c:85:a1:6a:e8:fc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Sep 23 07:08:30 2026 GMT
Not After : Sep 22 07:13:30 2027 GMT
Subject: CN=FC0A3D3B78E4EC2FB25989A04AC38C39939CC85E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:b1:12:f5:90:f4:26:a8:ee:e2:0c:25:9d:
d7:a7:b7:00:40:c2:54:f3:a9:d0:0c:58:a9:7a:c5:
32:c1:32:b3:5c:d6:97:7f:88:05:7c:18:d2:27:c4:
5f:69:a7:05:dc:d6:93:f9:60:6c:2f:8e:69:b2:e0:
ff:52:6f:03:8b:eb:93:ff:31:c9:3d:5e:2c:87:da:
d2:24:d8:43:ce:00:f4:10:d6:58:9b:ec:37:b2:a1:
ff:86:f9:eb:e6:05:30:3d:49:aa:a3:e3:30:bf:99:
f7:c4:f7:aa:e6:ab:9d:95:7c:08:81:c3:c6:5b:38:
4e:42:c6:52:6e:30:17:71:18:28:3d:76:f4:26:8f:
b2:e2:eb:70:92:b4:c3:b7:3e:b1:e8:78:91:9d:b3:
48:4e:41:4c:f4:93:4d:51:65:b4:ae:d2:8c:12:01:
a6:69:db:ee:ae:81:05:49:76:c9:45:6d:9b:c5:8b:
59:8f:5f:cf:78:2e:fe:18:92:83:b3:df:be:b0:86:
47:66:00:01:e1:aa:88:58:63:e0:9c:c6:c0:e3:60:
1a:53:d0:bb:8f:ec:86:4f:aa:2e:df:81:2e:18:78:
08:0e:fd:20:27:6c:6e:31:a4:b3:5f:a7:e8:25:2f:
a8:a2:21:af:8a:4d:71:b4:81:4d:40:05:d6:45:05:
4d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:3D:3B:78:E4:EC:2F:B2:59:89:A0:4A:C3:8C:39:93:9C:C8:5E
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137302e302f32342d3234203d3e20313532333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.170.0/24
Signature Algorithm: sha256WithRSAEncryption
23:99:5c:9e:36:0f:a1:93:a1:ac:89:a7:90:c5:bb:12:44:29:
3e:f7:c6:ea:31:16:87:bc:44:6c:57:f2:af:08:16:10:7a:2e:
f9:10:66:28:86:fb:3e:60:c6:00:05:f6:e1:e4:65:f4:36:fa:
00:b3:0b:f9:11:65:77:fa:8d:5d:55:85:2b:0e:8c:2f:dd:8c:
4e:a5:4a:34:70:b1:61:89:e1:b0:ce:3f:0a:93:e9:e5:76:8c:
3c:01:6d:50:52:54:4a:5e:bf:6c:83:3f:f4:19:21:39:07:d6:
06:14:c7:6e:b9:0b:fd:88:94:a8:37:b8:1f:44:a0:97:46:75:
4b:b3:73:c0:a7:db:d6:11:fa:0c:75:95:01:a0:98:06:ee:d2:
00:c4:7d:bb:12:7e:d5:aa:0b:ac:a2:de:74:90:7a:a8:37:4e:
dd:03:b2:f9:f4:7e:b2:df:fd:0d:fe:1c:4d:26:ef:94:49:63:
08:2a:d3:0b:2c:f3:0f:ff:01:b2:4b:36:5c:bc:74:79:cf:14:
37:5f:10:64:78:e2:bc:14:80:ce:9e:ed:c2:a9:da:82:7e:26:
31:90:71:8d:85:44:99:6f:88:6a:a4:23:d2:d0:1d:42:7b:ce:
2f:27:65:aa:99:fd:5d:8a:46:fd:79:5d:7c:5e:2e:dc:ba:2c:
f4:87:1e:44
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIvFknNXjiWznBpBkfZyFoWro/PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjA5MjMwNzA4MzBaFw0yNzA5MjIwNzEzMzBaMDMxMTAvBgNV
BAMTKEZDMEEzRDNCNzhFNEVDMkZCMjU5ODlBMDRBQzM4QzM5OTM5Q0M4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20bES9ZD0Jqju4gwlndentwBA
wlTzqdAMWKl6xTLBMrNc1pd/iAV8GNInxF9ppwXc1pP5YGwvjmmy4P9SbwOL65P/
Mck9XiyH2tIk2EPOAPQQ1lib7Deyof+G+evmBTA9Saqj4zC/mffE96rmq52VfAiB
w8ZbOE5CxlJuMBdxGCg9dvQmj7Li63CStMO3PrHoeJGds0hOQUz0k01RZbSu0owS
AaZp2+6ugQVJdslFbZvFi1mPX894Lv4YkoOz376whkdmAAHhqohYY+CcxsDjYBpT
0LuP7IZPqi7fgS4YeAgO/SAnbG4xpLNfp+glL6iiIa+KTXG0gU1ABdZFBU0/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/Ao9O3jk7C+yWYmgSsOMOZOcyF4wHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqaowDQYJKoZIhvcNAQELBQADggEBACOZXJ42D6GToayJp5DFuxJEKT73xuox
Foe8RGxX8q8IFhB6LvkQZiiG+z5gxgAF9uHkZfQ2+gCzC/kRZXf6jV1VhSsOjC/d
jE6lSjRwsWGJ4bDOPwqT6eV2jDwBbVBSVEpev2yDP/QZITkH1gYUx265C/2IlKg3
uB9EoJdGdUuzc8Cn29YR+gx1lQGgmAbu0gDEfbsSftWqC6yi3nSQeqg3Tt0Dsvn0
frLf/Q3+HE0m75RJYwgq0wss8w//AbJLNly8dHnPFDdfEGR44rwUgM6e7cKp2oJ+
JjGQcY2FRJlviGqkI9LQHUJ7zi8nZaqZ/V2KRv15XXxeLty6LPSHHkQ=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:09:53 2026 by rpki-client