Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20323031313736.roa
File: 39312e3230392e35382e302f32342d3234203d3e20323031313736.roa (raw, json)
Hash identifier: 1N2HR7N9gtp6o3KV0QaJh+UGbKik5kZ45nqak2L6yZk=
Subject key identifier: 22:C9:C2:A3:A7:9B:8D:E2:D9:26:B3:DA:D6:98:45:29:3E:78:E3:86
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 0A8BAE24DD58EA0AB303308183DF7AF7BFFF62BF
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20323031313736.roa
Signing time: Sat 31 Oct 2026 12:02:08 +0000
ROA not before: Sat 31 Oct 2026 11:57:08 +0000
ROA not after: Sat 30 Oct 2027 12:02:08 +0000
asID: 201176
IP address blocks: 91.209.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 11:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8b:ae:24:dd:58:ea:0a:b3:03:30:81:83:df:7a:f7:bf:ff:62:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Oct 31 11:57:08 2026 GMT
Not After : Oct 30 12:02:08 2027 GMT
Subject: CN=22C9C2A3A79B8DE2D926B3DAD69845293E78E386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:66:18:72:d1:76:ed:56:f8:1c:12:34:b9:
f3:92:f7:1b:eb:a1:a0:ea:4e:7c:6c:48:3b:d9:1d:
85:a6:d5:9a:dd:91:5c:f0:81:ca:d1:cf:e4:4c:05:
15:cb:93:b2:a3:29:25:f6:7d:66:b9:ee:33:75:50:
f9:15:fc:16:25:67:23:1a:1d:e9:4f:bc:d1:ad:b9:
67:8f:de:97:7c:56:f1:ad:be:11:75:68:43:c5:53:
2e:00:4f:5b:87:d0:84:4c:ab:76:33:a6:e4:17:4f:
53:7f:81:6c:24:29:ca:7c:ec:94:52:38:6f:0c:19:
46:33:37:3c:34:33:b2:55:f9:e0:d2:79:85:2b:fd:
db:24:6d:51:8c:bb:bc:f5:ea:6e:58:17:e3:17:ab:
24:82:f9:d1:48:6c:9a:3a:a7:c2:f8:73:1f:35:a4:
44:17:b7:65:1e:cb:85:6b:b8:68:1d:31:01:0a:41:
75:59:70:ca:c5:08:50:02:b8:63:20:99:7d:b6:31:
6f:0f:73:a9:a2:f3:6d:78:23:66:b1:7e:71:f9:96:
df:37:88:7d:30:ec:67:80:76:c2:be:7e:fc:04:89:
d9:7a:48:a0:13:70:2a:7d:67:cf:19:e2:6e:d6:51:
87:44:04:33:36:c8:da:8b:d7:cf:70:09:b7:b6:b4:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:C2:A3:A7:9B:8D:E2:D9:26:B3:DA:D6:98:45:29:3E:78:E3:86
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20323031313736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:85:75:76:68:f0:6d:47:13:b6:be:66:da:ef:51:84:7f:77:
a8:60:27:de:d3:01:f3:70:92:9a:8b:5a:35:63:26:cd:26:8d:
64:06:a9:2a:70:90:2b:f0:68:e2:75:b3:19:65:83:88:d1:d9:
92:6f:2e:35:cb:16:e7:9a:6c:e7:74:7a:44:b2:f4:8b:50:72:
40:a4:db:1c:5a:cf:85:06:c4:9f:a5:6d:8a:dd:45:3c:74:93:
82:12:84:7f:8f:4b:ac:94:dc:ce:84:8d:79:c7:16:23:c5:d4:
39:ca:c0:a6:4f:87:99:8d:ee:6a:30:dd:dd:97:3e:ca:28:81:
9d:30:8f:3f:d1:54:32:d4:d9:ac:a6:57:82:3c:7e:bf:d6:3d:
7b:bc:51:a1:90:56:55:1b:3f:55:01:59:b7:d3:66:0e:16:36:
7c:49:4c:77:de:2f:89:cf:0b:50:a4:60:1e:b6:27:ef:39:03:
37:9d:42:11:67:41:0e:1f:95:57:01:6c:c9:30:54:bb:f8:7f:
50:49:4f:03:27:e0:cf:a1:f3:bd:79:4b:19:3b:09:64:f4:20:
97:f5:44:83:d3:ad:36:a2:40:3b:95:21:0f:48:fd:2b:49:de:
e1:11:c8:b7:a9:0e:b6:be:89:1e:17:19:a4:4d:ac:b7:d9:21:
ac:ca:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:47 2026 by rpki-client