Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa
File: 39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa (raw, json)
Hash identifier: M5z9Sux3PcsEPFPTOYmSmjuZyXZMxe8g6i7N2xLS1OI=
Subject key identifier: FD:1B:BF:5B:08:FF:AC:8F:DD:FC:32:D6:CF:24:A6:CB:82:3A:C0:53
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 2076BFE56A0CB1E741DAD5F92281465F3AB60623
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa
Signing time: Mon 23 Jun 2025 08:54:11 +0000
ROA not before: Mon 23 Jun 2025 08:49:11 +0000
ROA not after: Mon 22 Jun 2026 08:54:11 +0000
asID: 213250
IP address blocks: 95.169.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:76:bf:e5:6a:0c:b1:e7:41:da:d5:f9:22:81:46:5f:3a:b6:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Jun 23 08:49:11 2025 GMT
Not After : Jun 22 08:54:11 2026 GMT
Subject: CN=FD1BBF5B08FFAC8FDDFC32D6CF24A6CB823AC053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ae:19:91:d4:ce:84:65:97:66:fb:05:46:5e:
b0:f2:68:ef:54:06:0b:f9:a3:dd:f3:f5:f0:2f:0d:
c2:70:52:29:d0:da:2c:ba:e7:b7:3a:e0:df:32:3c:
4c:20:cb:63:e2:73:67:dd:bb:f6:84:e3:aa:07:35:
6f:01:9f:65:86:de:d2:2c:d6:77:e5:c3:d4:df:c7:
fc:96:e3:16:69:e7:dd:e5:40:e9:f3:b3:2d:c3:fa:
24:99:79:34:6e:77:e2:45:87:64:03:fc:0d:18:b6:
a6:02:d1:04:ad:d7:5a:4c:6e:aa:22:ba:21:8c:44:
43:e2:35:00:ec:bf:17:ac:0b:a3:8b:00:d7:ea:53:
af:bd:b8:69:a4:9c:30:e6:b2:70:b9:8f:91:f3:b2:
4e:d5:c9:f0:b4:06:17:20:e2:8e:dd:03:b8:4b:b0:
4c:bc:2f:3d:5b:88:87:cb:8e:eb:44:47:dd:33:c7:
5b:a2:35:2b:81:e0:03:6a:ae:46:d1:dc:d7:87:a2:
3c:95:b0:e5:ab:bf:c4:06:61:e2:63:64:af:b9:4b:
1d:19:e3:38:bd:22:40:00:89:cb:f9:a4:f1:78:c0:
09:e1:eb:4a:a6:46:27:36:e6:c1:c9:79:7e:6c:ec:
ef:65:68:20:69:d5:d3:e1:21:22:9f:c5:24:d4:28:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:BF:5B:08:FF:AC:8F:DD:FC:32:D6:CF:24:A6:CB:82:3A:C0:53
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137372e302f32342d3234203d3e20323133323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.177.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ec:86:d5:08:cc:8a:b7:05:ef:d3:16:45:3d:43:df:0a:f1:
98:ab:e6:7c:eb:33:ed:fa:87:9e:bf:3b:a2:ff:3b:83:5d:b9:
4f:67:10:f2:e7:1e:05:29:ea:42:01:f6:79:2f:47:c2:2b:5c:
05:94:12:cd:77:13:09:76:99:67:52:60:cb:dc:37:16:7b:27:
fb:e4:ac:39:15:8a:00:b4:a2:16:30:09:8c:37:02:67:9c:9a:
37:d3:7c:02:66:36:0c:0b:c4:18:e8:a5:00:39:0c:55:39:9d:
47:e0:1a:7e:77:a7:71:53:1a:b3:22:d6:99:bc:40:a9:8f:f3:
4a:1a:4b:4b:13:dc:f0:b7:88:1e:88:f5:5b:b8:29:22:d7:d1:
95:ba:bb:a8:27:3c:bd:4b:5d:9b:0f:15:32:01:bf:7e:9c:ae:
b5:5e:ec:9f:85:49:5d:5a:47:50:8b:0d:05:0c:01:a9:db:7c:
b4:19:f8:be:a0:c8:a6:bd:2d:a5:c6:7c:41:c8:fa:8c:fc:4b:
3f:75:b7:fe:e8:57:e6:2c:06:4f:29:0b:26:26:6b:ca:a1:29:
47:83:e7:9e:6b:6c:cd:8b:f0:0f:dd:e9:83:a6:21:86:bb:d8:
36:f8:43:d4:97:09:70:a5:42:c5:1d:3e:d8:03:60:ae:1d:0f:
d7:9d:ef:81
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIHa/5WoMsedB2tX5IoFGXzq2BiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNTA2MjMwODQ5MTFaFw0yNjA2MjIwODU0MTFaMDMxMTAvBgNV
BAMTKEZEMUJCRjVCMDhGRkFDOEZEREZDMzJENkNGMjRBNkNCODIzQUMwNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNrhmR1M6EZZdm+wVGXrDyaO9U
Bgv5o93z9fAvDcJwUinQ2iy657c64N8yPEwgy2Pic2fdu/aE46oHNW8Bn2WG3tIs
1nflw9Tfx/yW4xZp593lQOnzsy3D+iSZeTRud+JFh2QD/A0YtqYC0QSt11pMbqoi
uiGMREPiNQDsvxesC6OLANfqU6+9uGmknDDmsnC5j5Hzsk7VyfC0Bhcg4o7dA7hL
sEy8Lz1biIfLjutER90zx1uiNSuB4ANqrkbR3NeHojyVsOWrv8QGYeJjZK+5Sx0Z
4zi9IkAAicv5pPF4wAnh60qmRic25sHJeX5s7O9laCBp1dPhISKfxSTUKKMTAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/Ru/Wwj/rI/d/DLWzySmy4I6wFMwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzkzNTJlMzEzNjM5MmUzMTM3
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzMjM1MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABfqbEwDQYJKoZIhvcNAQELBQADggEBALDshtUIzIq3Be/TFkU9Q98K8Zir5nzr
M+36h56/O6L/O4NduU9nEPLnHgUp6kIB9nkvR8IrXAWUEs13Ewl2mWdSYMvcNxZ7
J/vkrDkVigC0ohYwCYw3AmecmjfTfAJmNgwLxBjopQA5DFU5nUfgGn53p3FTGrMi
1pm8QKmP80oaS0sT3PC3iB6I9Vu4KSLX0ZW6u6gnPL1LXZsPFTIBv36crrVe7J+F
SV1aR1CLDQUMAanbfLQZ+L6gyKa9LaXGfEHI+oz8Sz91t/7oV+YsBk8pCyYma8qh
KUeD555rbM2L8A/d6YOmIYa72Db4Q9SXCXClQsUdPtgDYK4dD9ed74E=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:42:29 2025 by rpki-client