Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/39312e3233332e382e302f32342d3234203d3e20313531333830.roa
File: 39312e3233332e382e302f32342d3234203d3e20313531333830.roa (raw, json)
Hash identifier: QHlll1E6ZgYKSQDJdHA2cS3FR3PqEVC4mPQIad6lRHU=
Subject key identifier: 9B:9D:97:C5:69:3E:FE:15:F0:DD:81:C7:C3:ED:8A:9A:54:E9:03:B0
Certificate issuer: /CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Certificate serial: 4EE6B07CCAD8C40DCEC69C647308DAD6C6885092
Authority key identifier: 99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/39312e3233332e382e302f32342d3234203d3e20313531333830.roa
Signing time: Sat 07 Mar 2026 09:58:26 +0000
ROA not before: Sat 07 Mar 2026 09:53:26 +0000
ROA not after: Sat 06 Mar 2027 09:58:26 +0000
asID: 151380
IP address blocks: 91.233.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.mft
rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:b0:7c:ca:d8:c4:0d:ce:c6:9c:64:73:08:da:d6:c6:88:50:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944737a024fe1405d0b4cf6b53df38938d85b42
Validity
Not Before: Mar 7 09:53:26 2026 GMT
Not After : Mar 6 09:58:26 2027 GMT
Subject: CN=9B9D97C5693EFE15F0DD81C7C3ED8A9A54E903B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:4c:72:03:74:ef:55:26:f0:90:fc:dd:c3:
52:46:16:e8:6b:39:8c:7e:07:86:6f:f3:6c:e0:dd:
23:75:bc:9f:4d:45:4f:14:47:32:28:35:24:1f:7e:
a3:11:a3:59:70:35:2a:d4:45:e0:9f:c9:66:df:af:
1a:7c:8b:7c:92:c8:ac:b7:75:34:7c:44:22:4c:d4:
12:b8:17:be:82:63:df:a2:b6:7e:97:2e:05:aa:53:
77:fe:78:7f:c5:01:44:fe:97:1f:95:2f:65:b2:f1:
de:52:f8:17:3e:91:e0:b2:02:7d:c7:52:33:30:a7:
1d:ee:5a:3e:d0:96:14:6b:29:37:b5:ae:bc:0e:0f:
3a:55:de:dd:6e:4a:77:e9:5e:aa:5b:c3:f5:78:a0:
8b:a7:33:c3:11:ec:bb:6f:f2:81:69:c1:df:f2:f6:
91:8d:ed:18:5c:70:06:e3:75:f8:0f:90:38:22:8c:
db:23:23:2f:6d:43:ee:72:f0:eb:82:60:cd:5b:b0:
39:bd:b0:4c:ee:83:61:5f:6a:22:df:74:59:16:2d:
8d:ae:64:10:54:b2:04:79:26:3a:fc:ba:4d:75:c4:
bd:42:ef:de:56:03:b1:f0:df:7d:10:26:1b:72:71:
48:3b:1b:6f:46:54:32:8f:06:1d:0f:62:c0:47:d5:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:97:C5:69:3E:FE:15:F0:DD:81:C7:C3:ED:8A:9A:54:E9:03:B0
X509v3 Authority Key Identifier:
keyid:99:44:73:7A:02:4F:E1:40:5D:0B:4C:F6:B5:3D:F3:89:38:D8:5B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/9944737A024FE1405D0B4CF6B53DF38938D85B42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mURzegJP4UBdC0z2tT3ziTjYW0I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28f7ae6d-c53d-4574-9668-28479db83643/0/39312e3233332e382e302f32342d3234203d3e20313531333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ca:99:9b:ba:c1:52:77:81:71:38:17:5a:01:20:69:7a:a2:
e5:75:7a:3d:9c:4f:7a:a1:2d:a2:d3:97:70:61:23:db:65:c5:
ce:05:37:c9:11:5b:27:e1:36:90:40:25:2b:96:41:f2:e3:48:
e5:f5:b3:48:45:3b:c3:f9:90:28:55:8d:a4:83:1d:70:19:b5:
2a:d4:4b:f3:68:64:ac:d7:18:30:8f:2c:a0:fa:56:47:ea:8c:
dc:d0:94:aa:d0:28:86:68:b1:9f:db:72:9b:dc:02:16:43:ae:
be:c2:f0:c5:55:29:86:11:bb:af:90:ef:b2:04:71:6a:7c:55:
72:fe:02:bf:2f:f2:58:fb:6d:80:5f:2e:3e:b5:68:1f:a8:5b:
6a:76:bd:11:77:67:4a:0a:18:4b:ce:56:7b:e8:00:e8:ee:ab:
f0:14:98:b7:08:66:4b:f4:04:c3:8d:3a:a8:26:55:fc:8d:df:
5a:56:30:08:b1:de:90:65:df:68:79:b9:83:57:f8:b8:e2:bf:
5e:91:dd:92:c6:fc:57:20:ce:1c:e7:10:45:c0:61:35:a5:e5:
6f:ec:20:68:3e:66:8b:fd:55:1e:c1:7a:58:95:9f:cb:90:dc:
bd:64:d1:f1:65:d8:bc:f2:a7:0d:89:ef:09:08:85:48:47:9d:
84:95:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 08:52:42 2026 by rpki-client