Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e20313532333234.roa
File: 39352e3136392e3137322e302f32342d3234203d3e20313532333234.roa (raw, json)
Hash identifier: BaqaXvgMhI25/GB7nTxxOCm26XrM2fP0X9wqfN8+nak=
Subject key identifier: 4F:04:70:47:88:3E:47:8E:B2:6E:05:D4:B5:FB:55:E0:16:AF:78:D6
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 6BDD7F84B7CE1D5DF7FA7A09EF921E08BAAB86B0
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e20313532333234.roa
Signing time: Wed 23 Sep 2026 07:13:30 +0000
ROA not before: Wed 23 Sep 2026 07:08:30 +0000
ROA not after: Wed 22 Sep 2027 07:13:30 +0000
asID: 152324
IP address blocks: 95.169.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:dd:7f:84:b7:ce:1d:5d:f7:fa:7a:09:ef:92:1e:08:ba:ab:86:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Sep 23 07:08:30 2026 GMT
Not After : Sep 22 07:13:30 2027 GMT
Subject: CN=4F047047883E478EB26E05D4B5FB55E016AF78D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:92:a3:02:fa:56:32:7b:f4:b9:24:d9:2b:
a3:58:18:d1:39:43:d3:72:07:d2:1f:67:9a:cc:c5:
34:32:47:28:ba:f9:c6:08:0c:6e:87:7b:cb:6e:4b:
db:a1:d5:f5:67:ee:aa:65:62:23:8d:55:dd:02:75:
db:9d:60:0e:52:2d:2b:a2:f6:b0:9c:d9:f4:a8:a8:
e9:93:28:cf:84:51:68:fe:5e:e9:27:55:5b:3b:65:
03:c1:88:e1:ab:ee:c4:fb:7f:da:0b:24:2e:4d:c2:
04:07:38:ea:fb:3e:99:4a:44:8c:5e:93:19:29:a9:
6e:ae:8b:f6:2d:af:e2:28:32:e3:91:63:47:fb:e8:
e4:b2:8d:7b:f7:1b:04:a0:22:1f:e9:76:0e:a1:2d:
b9:60:a0:09:67:14:00:e3:4d:a9:dc:77:e0:8a:d1:
ef:1f:45:b0:38:5a:fe:b3:cc:2c:d7:ea:27:b4:f6:
58:38:b4:c2:29:d3:1b:e3:9f:79:b4:bf:e3:33:fd:
02:26:3c:7d:4a:90:cd:19:7f:71:4d:04:5a:14:3b:
f7:4d:17:66:0b:c9:d3:89:29:6b:bf:60:87:7e:36:
66:ea:38:13:d8:f8:6c:a6:83:b2:97:eb:4e:a7:93:
e0:1d:cd:24:29:aa:5e:dc:1c:9a:9f:79:45:a4:ba:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:70:47:88:3E:47:8E:B2:6E:05:D4:B5:FB:55:E0:16:AF:78:D6
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137322e302f32342d3234203d3e20313532333234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b8:6d:6c:58:b8:ca:9c:52:c6:f1:ba:a3:99:d9:17:9a:a9:
8a:39:ab:77:b4:49:33:5d:85:cb:24:f0:e9:2d:3e:83:6d:92:
0d:e7:5e:cb:43:ef:8b:c8:95:e9:8a:7c:5b:08:33:3a:01:4e:
3a:82:b7:94:b4:2d:7a:1b:4d:5c:93:67:8e:f8:51:fe:cc:75:
e6:dc:d1:f0:d2:62:fb:c8:e0:eb:2d:2a:f7:96:6c:7d:e4:9b:
e7:9d:41:b7:00:2e:e5:ef:9b:87:78:16:61:ea:4e:d5:9c:e8:
19:a0:49:b5:de:3c:8e:20:27:94:ec:38:58:52:69:55:3b:e7:
4c:42:ed:cc:3f:1a:23:f3:1a:92:e1:47:d5:e9:72:9e:b0:52:
e1:7a:af:5c:b6:29:72:87:89:19:65:b7:e0:72:0d:90:9e:c1:
9d:2c:67:f3:56:0d:3d:4d:74:ad:47:5d:58:03:71:a0:f3:e0:
56:59:db:e2:29:5e:91:e9:18:61:44:6f:bf:1f:1b:85:b2:f5:
e8:9a:b0:3a:90:c7:74:45:08:3c:c7:c1:b3:3a:ed:5a:d4:be:
58:5d:f6:44:e8:47:c1:1c:72:76:3f:50:34:0b:d9:f8:ba:e2:
4c:c9:7e:75:1b:3e:e5:3f:3d:b0:58:0e:d3:d1:32:65:4e:d2:
61:a5:74:b3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUa91/hLfOHV33+noJ75IeCLqrhrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjA5MjMwNzA4MzBaFw0yNzA5MjIwNzEzMzBaMDMxMTAvBgNV
BAMTKDRGMDQ3MDQ3ODgzRTQ3OEVCMjZFMDVENEI1RkI1NUUwMTZBRjc4RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLJKjAvpWMnv0uSTZK6NYGNE5
Q9NyB9IfZ5rMxTQyRyi6+cYIDG6He8tuS9uh1fVn7qplYiONVd0CddudYA5SLSui
9rCc2fSoqOmTKM+EUWj+XuknVVs7ZQPBiOGr7sT7f9oLJC5NwgQHOOr7PplKRIxe
kxkpqW6ui/Ytr+IoMuORY0f76OSyjXv3GwSgIh/pdg6hLblgoAlnFADjTancd+CK
0e8fRbA4Wv6zzCzX6ie09lg4tMIp0xvjn3m0v+Mz/QImPH1KkM0Zf3FNBFoUO/dN
F2YLydOJKWu/YId+NmbqOBPY+Gymg7KX606nk+AdzSQpql7cHJqfeUWkutQJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTwRwR4g+R46ybgXUtftV4BaveNYwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqawwDQYJKoZIhvcNAQELBQADggEBACi4bWxYuMqcUsbxuqOZ2ReaqYo5q3e0
STNdhcsk8OktPoNtkg3nXstD74vIlemKfFsIMzoBTjqCt5S0LXobTVyTZ474Uf7M
debc0fDSYvvI4OstKveWbH3km+edQbcALuXvm4d4FmHqTtWc6BmgSbXePI4gJ5Ts
OFhSaVU750xC7cw/GiPzGpLhR9Xpcp6wUuF6r1y2KXKHiRllt+ByDZCewZ0sZ/NW
DT1NdK1HXVgDcaDz4FZZ2+IpXpHpGGFEb78fG4Wy9eiasDqQx3RFCDzHwbM67VrU
vlhd9kToR8EccnY/UDQL2fi64kzJfnUbPuU/PbBYDtPRMmVO0mGldLM=
-----END CERTIFICATE-----
Generated at Sat Oct 3 10:55:40 2026 by rpki-client