Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/39312e3230392e3137392e302f32342d3234203d3e2036303739.roa
File: 39312e3230392e3137392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: uNAQ4j+11GZvakb42sQCtDYoj40PG7WcMOyOEXVSeKA=
Subject key identifier: 51:C0:44:BC:30:AA:7A:24:BE:2C:73:FE:26:7C:93:1E:B4:60:9B:63
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 38910CE567510389267CEAA8FB6F0FEFD5224C7E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/39312e3230392e3137392e302f32342d3234203d3e2036303739.roa
Signing time: Thu 20 Aug 2026 13:53:31 +0000
ROA not before: Thu 20 Aug 2026 13:48:31 +0000
ROA not after: Thu 19 Aug 2027 13:53:31 +0000
asID: 6079
IP address blocks: 91.209.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:91:0c:e5:67:51:03:89:26:7c:ea:a8:fb:6f:0f:ef:d5:22:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Aug 20 13:48:31 2026 GMT
Not After : Aug 19 13:53:31 2027 GMT
Subject: CN=51C044BC30AA7A24BE2C73FE267C931EB4609B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:05:54:15:6d:a7:06:3c:e3:a6:ba:31:04:
57:40:ee:d8:a9:fa:6f:d9:ba:e4:2e:f6:25:69:cc:
ca:4f:b9:b8:5f:c9:63:98:bf:5a:73:5f:e0:4d:6b:
98:3a:62:69:b6:c7:26:97:2a:d1:1e:04:03:24:f0:
73:c8:a8:e2:a0:d0:2c:7a:eb:e2:48:69:02:1d:d7:
90:a3:80:f7:16:87:03:c2:00:a3:6b:34:7b:a6:37:
45:bb:57:d5:ff:42:f6:ce:11:1c:ff:71:94:30:5a:
1d:83:bc:84:16:c9:54:82:b6:6a:81:e9:0a:77:96:
4c:4e:9e:9b:90:d7:8f:7e:dd:f0:46:74:58:dd:d3:
ab:ba:21:a1:af:ea:b1:8b:c2:97:80:58:4b:ca:3e:
4a:41:3f:a9:94:9f:30:40:b2:a3:be:d8:81:31:70:
9c:e4:ff:39:71:98:fe:60:64:f8:62:a4:02:dc:7a:
6e:be:60:e0:3e:c6:73:d3:42:f3:a0:36:37:bb:89:
e3:4d:b9:89:ae:fd:e2:b2:44:af:86:21:64:c9:cd:
fe:a7:ea:b9:8b:fc:47:de:de:6e:3e:a0:aa:85:a6:
b1:cb:ad:71:04:d7:7a:a2:75:42:db:33:22:38:cb:
89:0a:3b:d9:c3:79:f4:38:6a:74:59:27:1c:94:c7:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:44:BC:30:AA:7A:24:BE:2C:73:FE:26:7C:93:1E:B4:60:9B:63
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/39312e3230392e3137392e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d7:10:f6:96:54:ec:25:bb:ef:dc:85:7b:69:78:26:7b:28:
49:de:b3:77:b2:d5:64:32:d4:2e:fb:49:ad:cc:65:27:cf:de:
37:25:2d:4a:2f:f2:2b:71:57:85:28:dd:6e:09:28:04:6e:11:
b7:02:af:98:51:77:e0:2a:7b:59:12:c9:a7:a0:f0:6a:ad:df:
91:cc:bc:97:39:1f:d5:b0:d6:f8:02:95:49:14:9f:90:e0:3f:
09:c9:8f:ab:46:fa:31:a9:22:56:f8:87:d8:c3:74:e6:fa:7e:
f0:ea:0a:42:06:f3:05:2a:e2:b7:05:b9:67:b7:12:3b:eb:1e:
d8:be:93:70:b9:1b:78:ab:12:a1:14:1a:63:97:8d:21:89:50:
79:08:67:c8:1c:16:db:51:e2:87:47:bf:85:8b:f3:64:fb:e5:
9b:b9:4c:69:e7:80:20:d2:03:1f:0a:2f:d5:f6:93:b4:7d:cf:
1a:d1:f7:1a:95:83:de:58:cc:e8:5d:c9:04:d5:a7:24:bb:f9:
80:b4:36:17:26:b4:30:bc:1b:7d:a4:bf:2f:29:1b:87:76:8c:
12:22:84:36:e9:af:cc:04:2d:be:80:8b:55:61:9c:9a:24:d5:
a5:21:d3:c3:e9:3c:ca:2d:c4:ab:60:3f:45:de:3c:c4:31:cd:
a4:39:52:f5
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOJEM5WdRA4kmfOqo+28P79UiTH4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjA4MjAxMzQ4MzFaFw0yNzA4MTkxMzUzMzFaMDMxMTAvBgNV
BAMTKDUxQzA0NEJDMzBBQTdBMjRCRTJDNzNGRTI2N0M5MzFFQjQ2MDlCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNgVUFW2nBjzjproxBFdA7tip
+m/ZuuQu9iVpzMpPubhfyWOYv1pzX+BNa5g6Ymm2xyaXKtEeBAMk8HPIqOKg0Cx6
6+JIaQId15CjgPcWhwPCAKNrNHumN0W7V9X/QvbOERz/cZQwWh2DvIQWyVSCtmqB
6Qp3lkxOnpuQ149+3fBGdFjd06u6IaGv6rGLwpeAWEvKPkpBP6mUnzBAsqO+2IEx
cJzk/zlxmP5gZPhipALcem6+YOA+xnPTQvOgNje7ieNNuYmu/eKyRK+GIWTJzf6n
6rmL/Efe3m4+oKqFprHLrXEE13qidULbMyI4y4kKO9nDefQ4anRZJxyUx2QNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUUcBEvDCqeiS+LHP+JnyTHrRgm2MwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzkzMTJlMzIzMDM5MmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvR
szANBgkqhkiG9w0BAQsFAAOCAQEADdcQ9pZU7CW779yFe2l4JnsoSd6zd7LVZDLU
LvtJrcxlJ8/eNyUtSi/yK3FXhSjdbgkoBG4RtwKvmFF34Cp7WRLJp6Dwaq3fkcy8
lzkf1bDW+AKVSRSfkOA/CcmPq0b6MakiVviH2MN05vp+8OoKQgbzBSritwW5Z7cS
O+se2L6TcLkbeKsSoRQaY5eNIYlQeQhnyBwW21Hih0e/hYvzZPvlm7lMaeeAINID
Hwov1faTtH3PGtH3GpWD3ljM6F3JBNWnJLv5gLQ2Fya0MLwbfaS/Lykbh3aMEiKE
NumvzAQtvoCLVWGcmiTVpSHTw+k8yi3Eq2A/Rd48xDHNpDlS9Q==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:41:09 2026 by rpki-client