Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
File: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (raw, json)
Hash identifier: 2vGx/b+IMIujTVU8vkd3QqlGb4NKBcI4SPBsQqJxXFU=
Subject key identifier: 08:34:F6:77:80:F1:57:A3:EF:21:67:B1:23:C7:34:73:78:82:EE:91
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7BACA8EC7C458F50948BAAF74E864A53B03345FA
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
Signing time: Tue 14 Oct 2025 05:13:32 +0000
ROA not before: Tue 14 Oct 2025 05:08:32 +0000
ROA not after: Tue 13 Oct 2026 05:13:32 +0000
asID: 23865
IP address blocks: 95.169.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ac:a8:ec:7c:45:8f:50:94:8b:aa:f7:4e:86:4a:53:b0:33:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 14 05:08:32 2025 GMT
Not After : Oct 13 05:13:32 2026 GMT
Subject: CN=0834F67780F157A3EF2167B123C734737882EE91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:cf:f6:b7:d3:e4:ca:cc:17:78:7a:4f:b2:
f9:4e:a1:b3:2d:d0:70:74:b9:f1:89:2c:96:1f:4f:
d2:b1:00:3b:d1:8d:72:26:d1:9a:23:00:40:15:7d:
f5:f8:dc:95:60:ba:e3:d6:0c:29:55:12:54:cd:a5:
86:d9:c3:6f:76:a0:5e:66:1e:b2:3f:25:fc:9d:b3:
08:2e:08:4a:e8:e3:55:48:20:ef:56:b7:95:88:9e:
93:00:b3:42:63:f2:a0:55:af:4f:c3:41:ff:df:5c:
c8:d4:11:eb:33:a9:0a:f3:47:a2:f8:40:fb:a9:c0:
7f:7c:01:44:74:f1:ec:30:f3:1b:f1:a9:f9:25:72:
27:a9:37:ba:bc:71:db:0b:17:57:af:7b:7c:2f:27:
22:2d:8f:1d:de:3a:0e:4b:58:32:a2:59:68:a7:8e:
75:f9:0b:5f:6e:3e:e4:6b:5c:00:1d:6f:75:57:b5:
34:be:45:4b:2f:76:9e:86:a9:ef:8d:d6:5e:d2:4b:
0f:50:09:93:ce:17:95:1a:8d:8f:39:1f:0d:c2:5d:
d0:1f:4a:ba:9c:2f:56:56:4e:9d:f1:be:07:3b:04:
71:b3:d8:23:5e:cf:2e:24:ac:c7:36:89:92:3f:c9:
5d:f5:54:8c:d5:0d:c4:cb:41:ff:1f:3f:74:4e:9a:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:F6:77:80:F1:57:A3:EF:21:67:B1:23:C7:34:73:78:82:EE:91
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5d:f5:c3:0d:47:8b:98:6f:19:4f:38:a2:62:c9:da:1a:17:
e1:a8:5e:b8:a9:22:8a:3b:7c:a9:ec:9d:16:12:d4:33:be:bc:
3a:fa:61:a7:ae:66:27:02:61:fb:12:8d:ec:d1:68:42:e5:dd:
35:de:d1:6d:2d:dd:03:36:8d:28:ae:fc:46:a6:d7:d6:51:4b:
b4:d1:b5:a9:b7:3e:f0:fd:84:ab:83:5d:73:71:ba:b3:d9:d3:
5f:59:9d:f1:49:61:8c:9f:67:41:e9:ab:c8:d5:5f:55:9c:d9:
b1:11:b2:27:70:c7:c1:0f:35:a5:1f:9c:27:96:94:66:5b:16:
70:6a:56:61:9e:80:2a:25:80:93:ed:e6:b0:d6:79:73:08:b6:
c9:5a:9b:64:ed:c2:2c:90:c7:92:b4:8f:ff:44:10:89:99:d9:
0f:c2:0c:16:c9:e0:00:94:dd:4a:28:30:bf:4d:f8:e5:fd:ee:
b6:fb:0c:be:33:db:61:af:ff:96:aa:8d:47:50:3c:a4:e6:b7:
4a:10:72:cd:b1:8c:fd:ae:db:a9:35:93:cb:82:5f:61:28:bd:
be:cc:6e:f5:11:b5:45:0b:4e:af:37:09:dd:31:ef:79:6e:09:
7a:b1:bb:dd:b3:66:a5:09:ea:99:49:00:fc:b2:df:96:26:e4:
d2:b4:d5:d6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUe6yo7HxFj1CUi6r3ToZKU7AzRfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNTEwMTQwNTA4MzJaFw0yNjEwMTMwNTEzMzJaMDMxMTAvBgNV
BAMTKDA4MzRGNjc3ODBGMTU3QTNFRjIxNjdCMTIzQzczNDczNzg4MkVFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKs/2t9PkyswXeHpPsvlOobMt
0HB0ufGJLJYfT9KxADvRjXIm0ZojAEAVffX43JVguuPWDClVElTNpYbZw292oF5m
HrI/JfydswguCEro41VIIO9Wt5WInpMAs0Jj8qBVr0/DQf/fXMjUEeszqQrzR6L4
QPupwH98AUR08eww8xvxqfklciepN7q8cdsLF1eve3wvJyItjx3eOg5LWDKiWWin
jnX5C19uPuRrXAAdb3VXtTS+RUsvdp6Gqe+N1l7SSw9QCZPOF5UajY85Hw3CXdAf
SrqcL1ZWTp3xvgc7BHGz2CNezy4krMc2iZI/yV31VIzVDcTLQf8fP3ROmlLRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUCDT2d4DxV6PvIWexI8c0c3iC7pEwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzgzNjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
X6muMA0GCSqGSIb3DQEBCwUAA4IBAQBgXfXDDUeLmG8ZTziiYsnaGhfhqF64qSKK
O3yp7J0WEtQzvrw6+mGnrmYnAmH7Eo3s0WhC5d013tFtLd0DNo0orvxGptfWUUu0
0bWptz7w/YSrg11zcbqz2dNfWZ3xSWGMn2dB6avI1V9VnNmxEbIncMfBDzWlH5wn
lpRmWxZwalZhnoAqJYCT7eaw1nlzCLbJWptk7cIskMeStI//RBCJmdkPwgwWyeAA
lN1KKDC/Tfjl/e62+wy+M9thr/+Wqo1HUDyk5rdKEHLNsYz9rtupNZPLgl9hKL2+
zG71EbVFC06vNwndMe95bgl6sbvds2alCeqZSQD8st+WJuTStNXW
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:35:27 2025 by rpki-client