Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/39312e3233332e31302e302f32342d3234203d3e20323033303930.roa
File: 39312e3233332e31302e302f32342d3234203d3e20323033303930.roa (raw, json)
Hash identifier: 7p8qNsU6tfuk0G7Wf9jyKZGNfWbDPoyHxSoL6Mbi7sw=
Subject key identifier: 65:7B:3F:4B:2B:64:B1:3D:99:7C:66:CC:F1:41:08:58:3B:F5:DD:25
Certificate issuer: /CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Certificate serial: 6288B951E0FD7C0C474AE8C5DEB26D25A4103D36
Authority key identifier: 99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/39312e3233332e31302e302f32342d3234203d3e20323033303930.roa
Signing time: Sat 07 Mar 2026 00:30:51 +0000
ROA not before: Sat 07 Mar 2026 00:25:51 +0000
ROA not after: Sat 06 Mar 2027 00:30:51 +0000
asID: 203090
IP address blocks: 91.233.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:88:b9:51:e0:fd:7c:0c:47:4a:e8:c5:de:b2:6d:25:a4:10:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Validity
Not Before: Mar 7 00:25:51 2026 GMT
Not After : Mar 6 00:30:51 2027 GMT
Subject: CN=657B3F4B2B64B13D997C66CCF14108583BF5DD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:f8:65:c9:ad:0a:73:64:12:bb:dd:64:48:
d2:90:c2:4d:8b:19:9b:af:b8:c0:e7:e1:58:17:66:
19:47:92:87:89:5f:19:9a:b7:6e:28:0e:94:4d:c3:
79:78:42:32:90:5a:6c:f9:35:fb:b0:84:77:08:55:
00:31:9b:74:ca:4f:8f:cd:8d:3a:6c:6f:97:94:92:
cb:95:52:60:29:02:33:e3:24:a5:35:63:b8:d7:3d:
e5:6d:ba:3f:b4:9e:82:86:4c:34:18:4d:aa:f6:6f:
82:90:e4:a9:37:da:43:e2:20:2b:8e:28:81:8d:7c:
38:3d:57:5b:7f:02:10:57:bd:32:ae:08:8e:16:84:
a4:18:6a:2c:0d:00:da:37:cf:db:a0:8a:d3:56:23:
a4:9d:a3:b9:cc:55:cb:f7:dd:16:3c:a1:a4:60:75:
6c:01:8f:0c:7a:fb:a9:91:30:fb:dc:31:a7:8a:bd:
c4:49:eb:eb:8b:0b:30:bc:30:f7:b9:61:76:59:79:
9e:2f:98:06:b4:69:9e:4d:5c:29:f3:41:ad:df:50:
17:08:c9:40:69:45:bf:77:2c:e3:15:e9:ad:0f:ed:
c4:8a:8a:a1:d8:8d:51:31:16:c5:4b:58:e0:00:d6:
98:29:5a:e9:8f:c8:28:4b:c3:ab:8c:d8:aa:ee:46:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:3F:4B:2B:64:B1:3D:99:7C:66:CC:F1:41:08:58:3B:F5:DD:25
X509v3 Authority Key Identifier:
keyid:99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/39312e3233332e31302e302f32342d3234203d3e20323033303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.10.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:58:22:18:df:c1:7a:bc:32:ce:e6:57:2d:b2:3e:17:62:
94:95:f8:46:d2:ac:74:ea:a2:58:31:77:bf:af:32:60:44:b1:
93:1b:df:44:bf:77:3b:8a:30:b0:33:ad:f4:71:2a:99:a7:db:
82:2d:03:75:bd:6a:84:31:ed:5e:ad:b2:a0:ea:f9:4c:80:49:
fd:05:03:28:3a:02:a2:00:85:1e:e4:94:45:6b:48:e1:ca:3c:
e1:34:1b:00:33:6e:d6:03:56:43:e8:21:b8:03:44:df:75:65:
9b:a7:e0:4d:24:31:70:0b:a8:7c:f5:dc:23:cb:2b:60:be:13:
1f:8a:ef:7b:ff:a2:b1:27:9f:f5:5c:a6:d7:a5:d6:41:e1:be:
6a:76:eb:43:6c:9a:90:48:fe:ed:ec:2a:88:e9:c4:56:ed:44:
29:e1:b5:d5:a3:dd:db:e3:cb:5f:9c:e8:12:54:c0:91:ea:2c:
cb:ac:33:ff:5e:b2:3e:6e:67:36:20:a8:8d:2a:7a:7f:eb:ff:
15:05:b3:37:a0:a2:e5:dc:6f:83:6e:f6:d1:63:6e:b8:c1:bd:
5c:50:f0:dc:51:6a:6c:46:d7:ac:ed:87:69:4e:b2:7a:67:c4:
4b:ac:9b:0e:cf:88:ea:b2:53:53:00:17:53:99:f1:55:59:53:
54:94:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:52:15 2026 by rpki-client