Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa
File: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: jzsWDx19Pycbrb5P3nX+LR9BkYXT+JSku+VMV2m2RIo=
Subject key identifier: ED:7A:B6:74:71:7E:40:3F:1C:A6:CC:FA:1A:01:47:38:A4:55:1B:13
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 64695B13A21CDEC817AB4383629466BEAC007083
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa
Signing time: Mon 09 Feb 2026 18:55:37 +0000
ROA not before: Mon 09 Feb 2026 18:50:37 +0000
ROA not after: Mon 08 Feb 2027 18:55:37 +0000
asID: 398465
IP address blocks: 91.247.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:69:5b:13:a2:1c:de:c8:17:ab:43:83:62:94:66:be:ac:00:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 9 18:50:37 2026 GMT
Not After : Feb 8 18:55:37 2027 GMT
Subject: CN=ED7AB674717E403F1CA6CCFA1A014738A4551B13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:47:3a:d9:8e:c3:cb:b5:98:d5:2d:85:1f:bd:
d6:67:f5:57:2a:0d:83:ee:f9:ec:a9:b0:25:1c:13:
27:41:2b:1f:53:d6:db:c0:90:7f:56:4e:70:cc:c0:
6e:56:d6:ba:d5:40:3c:6d:56:8e:e0:e0:e2:21:6b:
29:52:51:fd:14:b7:d1:21:16:6c:12:56:79:f0:8e:
e7:33:59:2c:6f:f5:e1:62:71:f8:1d:87:28:82:33:
df:9a:65:35:14:d4:08:71:5f:e8:de:3b:55:d9:67:
8d:26:4f:bd:54:19:95:b0:a7:27:65:db:9a:2a:bf:
db:bf:35:87:2b:9d:8a:bf:9f:73:b4:6d:bc:1b:eb:
d4:c9:de:12:4c:d8:1f:ad:0f:38:dd:4f:ff:9e:a2:
91:42:7d:db:d6:af:3a:1e:6e:1c:35:a5:7e:12:6d:
8b:a6:98:2c:fc:eb:92:32:d3:99:a4:d5:70:f3:d5:
00:b5:52:8f:b4:2e:d8:4d:3c:30:ec:2b:1d:af:68:
be:cf:5c:ce:07:9e:70:9c:22:f8:d0:ee:1b:86:e3:
45:47:b8:73:6c:07:3e:b4:37:f0:ab:b8:f5:93:26:
a0:9c:a3:85:21:6e:fb:26:ed:4d:00:d3:dd:e8:e2:
57:bc:5e:5e:89:34:f1:7a:43:91:63:db:bf:69:cb:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7A:B6:74:71:7E:40:3F:1C:A6:CC:FA:1A:01:47:38:A4:55:1B:13
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8f:fe:22:74:e8:09:e9:7a:a2:28:3f:a7:b3:d3:e1:08:2a:
45:8c:0a:f1:8c:e5:da:e7:db:1b:db:06:89:86:f8:db:f3:1e:
aa:6c:5e:5e:37:89:0e:b3:02:c7:7e:32:9b:a2:b5:e1:30:e3:
a9:dc:16:ed:5e:e6:d7:07:20:29:4a:7d:92:16:c8:01:cd:6c:
2a:97:92:50:4f:78:f9:fa:0d:0b:62:d9:b5:4c:44:6c:6e:b8:
50:32:84:06:f3:83:de:34:db:4e:92:a4:5d:f1:e6:ed:8a:59:
c9:14:79:89:c9:fd:8f:2b:72:09:23:7b:87:ae:5b:cb:13:ac:
b6:a6:2e:eb:1b:9a:3e:61:2c:96:80:b4:71:5e:8d:a9:60:0d:
43:4b:fd:06:bb:aa:e3:6d:6d:a4:1b:3f:62:4e:d9:57:c3:5e:
53:ee:4f:f4:cd:dd:a2:70:0a:96:ea:a2:c4:d8:10:c1:7f:19:
7f:c4:21:bf:f1:78:84:c4:11:4f:76:36:4d:61:18:67:ce:17:
65:90:88:b0:ae:3f:d9:ee:f6:42:39:08:5c:e2:f1:65:d0:e4:
ec:0f:a8:4e:5b:a7:22:97:c6:d0:59:7f:d7:73:58:1e:e7:80:
50:e3:99:00:13:e6:a9:73:55:dc:1d:8d:35:59:c0:96:02:0f:
85:ae:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:45:09 2026 by rpki-client