Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323035383836.roa
File: 39352e3136392e3137362e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: Ye5oESXCRY2g5M03WnZbP/eesnvLLC31xpacfnELuyo=
Subject key identifier: 45:FF:6D:DC:D5:21:25:C3:EA:04:60:FE:89:7C:E7:03:FE:39:00:96
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 75E142D489D1ADDFB8C44322A580719A10029662
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323035383836.roa
Signing time: Sat 18 Oct 2025 09:16:40 +0000
ROA not before: Sat 18 Oct 2025 09:11:40 +0000
ROA not after: Sat 17 Oct 2026 09:16:40 +0000
asID: 205886
IP address blocks: 95.169.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e1:42:d4:89:d1:ad:df:b8:c4:43:22:a5:80:71:9a:10:02:96:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Oct 18 09:11:40 2025 GMT
Not After : Oct 17 09:16:40 2026 GMT
Subject: CN=45FF6DDCD52125C3EA0460FE897CE703FE390096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:dd:ff:6a:01:40:7c:37:ee:55:fb:e0:98:
8c:29:2c:2c:10:d3:7e:03:d9:a5:49:fe:8d:b4:ca:
7e:b5:01:ee:35:79:ae:c3:5f:59:c3:de:4e:92:a8:
d0:67:1e:c5:ad:d0:bc:a2:c3:de:6a:46:7e:32:21:
a6:00:42:39:97:af:57:88:5f:a0:37:64:b6:7e:23:
a1:3b:d0:33:07:61:17:a2:6a:0a:6e:e7:25:c8:84:
83:e3:7c:9e:33:45:2c:d5:ee:a9:c6:7b:31:d8:2c:
58:f0:bc:7b:fd:a9:7e:1a:59:96:9a:75:95:3a:36:
6e:91:7a:f7:87:2a:e4:ec:6f:68:6f:e6:bc:ff:dd:
6e:54:76:0a:49:d5:b5:be:a6:eb:84:ba:46:02:0f:
9d:0b:28:92:04:d8:fe:48:78:22:de:8f:91:6e:f5:
6c:35:bf:d2:74:57:ed:f4:66:20:29:dd:f1:29:30:
62:18:b8:6a:3b:27:ab:3e:0b:d9:36:61:65:20:75:
16:4c:e8:44:e6:f1:d8:cb:10:b6:28:9e:ff:18:8a:
3b:fb:f0:14:f8:f1:6f:3e:38:e5:56:bd:17:b1:45:
9d:58:0e:cd:37:42:a0:a0:cb:66:9d:cf:f9:59:9d:
1c:da:f3:0f:c6:d4:a5:0a:be:fe:11:da:b1:1b:1a:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:6D:DC:D5:21:25:C3:EA:04:60:FE:89:7C:E7:03:FE:39:00:96
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137362e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.176.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e8:dd:7d:71:4a:05:1d:db:ba:1e:9b:e8:da:22:b3:cc:64:
2a:e9:bd:6e:8b:3f:ee:62:4c:79:ae:2f:4f:25:fe:6d:11:e1:
6e:93:d6:34:71:b5:5b:53:fc:d4:15:74:4e:92:c5:ee:bd:65:
ef:81:85:81:2b:38:3a:e2:60:b0:94:d8:81:12:81:3e:61:f4:
0b:9f:91:cc:fa:c2:a4:2b:f8:56:c8:73:5c:2a:59:d0:1d:b9:
26:9c:49:af:e1:d7:a8:9d:c9:44:85:5b:cc:13:e8:a8:bf:63:
16:a7:ae:ee:d5:b5:a1:c6:38:59:93:2d:1c:66:cd:76:81:eb:
45:02:3c:43:46:65:2c:2a:88:26:85:6e:62:82:71:8b:da:c5:
4f:b9:9f:e7:f0:eb:32:de:44:f0:8e:b9:b7:2c:57:e9:42:a9:
81:be:21:4b:04:33:9b:e4:1f:d2:09:d3:ac:53:8f:62:10:66:
49:9e:93:15:63:7b:39:a6:be:00:0f:ac:93:e0:ee:ca:7b:e7:
e3:a8:71:d7:f4:ab:57:d5:2e:ca:47:11:4f:e6:7b:4b:b0:5b:
b0:e8:dd:47:7e:67:cb:51:69:8e:76:a5:af:c7:b6:5c:c8:9c:
3a:e3:37:b8:65:f6:82:74:06:e7:3d:c9:ba:89:71:25:5d:c3:
93:81:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:08 2025 by rpki-client