Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20313532363938.roa
File: 39312e3230392e35382e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: O/5mBkj6Ec8w0EQm6VgP/NavexjcZj1JoFe5Y9dYuT0=
Subject key identifier: 17:E9:58:D1:79:93:7B:BC:11:E7:42:B7:96:B2:B9:8B:40:A9:B7:28
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 7172788E45524BB51B244DB49AB686CD37DE1043
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20313532363938.roa
Signing time: Mon 31 Aug 2026 15:04:08 +0000
ROA not before: Mon 31 Aug 2026 14:59:08 +0000
ROA not after: Mon 30 Aug 2027 15:04:08 +0000
asID: 152698
IP address blocks: 91.209.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:72:78:8e:45:52:4b:b5:1b:24:4d:b4:9a:b6:86:cd:37:de:10:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Aug 31 14:59:08 2026 GMT
Not After : Aug 30 15:04:08 2027 GMT
Subject: CN=17E958D179937BBC11E742B796B2B98B40A9B728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:af:f7:b9:10:f9:69:27:8e:1c:2f:eb:a4:
36:5f:fa:c5:87:cc:5c:85:6d:bd:87:c0:69:91:79:
5a:cd:05:f7:d3:02:67:62:6d:a6:98:77:76:27:69:
6e:46:8e:b0:98:46:77:d0:5d:17:9b:c6:5d:5f:7a:
49:ff:91:e6:07:bf:79:4b:c4:85:8a:c6:5f:17:cf:
3e:7b:e5:d3:35:d9:3f:e8:29:23:99:ec:fe:24:6b:
c2:b4:d1:e9:4a:4d:0c:2f:99:d1:b6:e8:5e:4c:f9:
a4:31:b3:bf:47:e4:67:b7:9d:e5:e5:c5:65:64:02:
bd:71:81:b8:60:32:24:36:86:f9:46:56:66:e8:cb:
98:40:da:6c:e3:01:52:d8:eb:53:e5:38:34:6d:17:
5e:0e:ad:f0:2a:33:7c:6e:53:d6:bb:71:3d:c3:28:
17:3c:e5:63:ac:ca:0b:bb:f8:e3:76:bc:94:c8:79:
f5:9d:5f:5b:47:9d:96:3c:b7:b7:14:c8:14:e6:26:
e3:b1:13:27:70:44:7d:5a:ba:48:23:92:a5:7f:ff:
26:95:9b:ed:6f:83:c8:46:cd:f4:ae:df:65:92:68:
0e:f2:f2:62:73:07:24:1f:c6:69:49:b7:1b:44:36:
12:88:00:14:df:5a:11:e8:b2:12:d3:db:4f:16:5c:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:58:D1:79:93:7B:BC:11:E7:42:B7:96:B2:B9:8B:40:A9:B7:28
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.58.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3a:93:4c:e3:ad:dd:c2:28:23:97:7d:ef:61:39:8a:d5:c7:
a4:18:ee:ed:69:4f:4d:69:10:6e:a9:a9:f6:5f:d5:f9:8a:f7:
24:a1:be:b0:c9:ef:d9:52:ef:73:d9:e5:ec:50:92:8e:f5:ef:
ac:64:8c:c0:83:8a:b7:11:c9:de:d6:49:fa:a6:d6:e6:4a:33:
c6:53:0a:87:4d:fb:9d:e3:7b:61:a8:9c:57:94:32:01:e2:79:
ba:e0:e9:93:78:d5:5b:54:d7:18:8b:04:26:c5:f1:c8:3a:6b:
1d:f9:5a:b0:9e:2e:df:f4:b7:5b:d1:c1:6a:f1:f9:1a:7a:5c:
98:b2:72:c2:c6:9f:f4:29:10:29:d8:0b:99:09:bf:eb:1f:42:
bb:49:21:3d:ec:3d:ba:17:83:c5:61:96:ab:d8:91:47:cb:08:
f7:36:52:58:b4:4c:cd:ff:ad:ec:47:89:47:f9:0f:cf:45:04:
56:14:f3:19:8f:c0:9a:60:93:bb:e2:59:1e:74:4b:02:40:e6:
5b:28:86:a0:25:d2:b0:40:11:a2:cf:50:02:22:41:d8:0d:9b:
7b:55:16:10:a1:14:1a:bb:0f:9a:4f:b1:db:5b:d2:1b:13:3f:
76:7b:08:83:a4:89:0c:bc:26:3d:5a:25:a7:11:5a:12:69:6c:
43:28:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:45:54 2026 by rpki-client