Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20323032373035.roa
File: 39312e3230392e35382e302f32342d3234203d3e20323032373035.roa (raw, json)
Hash identifier: PK2aFR1vuXxLprCpeWciXwI6HhgJ2xTabit5aAcYEng=
Subject key identifier: 5B:23:55:D0:E7:D1:7D:94:8D:EF:CB:7F:DD:2E:49:49:BE:E6:66:E1
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 1C82576412BBE4579E6B8C2A4F7CEBD45FD59DFE
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20323032373035.roa
Signing time: Fri 13 Mar 2026 15:34:23 +0000
ROA not before: Fri 13 Mar 2026 15:29:23 +0000
ROA not after: Fri 12 Mar 2027 15:34:23 +0000
asID: 202705
IP address blocks: 91.209.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:82:57:64:12:bb:e4:57:9e:6b:8c:2a:4f:7c:eb:d4:5f:d5:9d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Mar 13 15:29:23 2026 GMT
Not After : Mar 12 15:34:23 2027 GMT
Subject: CN=5B2355D0E7D17D948DEFCB7FDD2E4949BEE666E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:df:9a:88:7f:1b:a2:4d:04:56:fd:25:d8:
da:e8:51:f9:28:ca:c5:c2:79:8c:20:f7:ab:ef:ed:
31:1c:3f:7c:0b:39:8f:b2:d2:3f:20:d5:55:c0:f3:
a6:dd:76:69:06:dd:20:a6:84:e8:c0:e6:b5:0d:a3:
62:88:c9:56:18:18:b4:a0:37:d5:5a:19:24:ad:7d:
cd:16:0a:77:26:ed:76:a6:ec:89:f9:37:0e:7a:c7:
ac:26:c2:2b:79:3a:be:bd:d8:88:8d:2d:50:36:9f:
f6:7f:16:1a:d5:5f:8b:ed:20:21:bb:4e:2d:1d:94:
51:8c:45:4a:16:f0:30:0f:87:dc:47:62:07:10:f1:
b8:5c:33:14:35:9b:f4:1e:2d:26:be:dc:1b:3a:6d:
38:ae:af:f4:f3:15:3d:06:86:f9:8f:16:02:5b:32:
07:6d:d3:da:23:cb:57:b7:8c:de:8c:3e:bf:92:56:
21:72:29:1b:1b:b0:8f:d3:f0:fc:ce:63:82:ae:c8:
93:35:93:32:a0:2c:0b:e2:b4:e1:4a:a7:8d:22:cd:
79:6e:05:f3:ca:e5:75:5a:fd:ea:01:36:db:c0:76:
06:5f:d9:e1:59:1f:ef:1a:87:c9:83:1f:75:43:53:
ac:9c:1c:41:4a:f0:6e:db:87:cb:24:89:f7:1b:37:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:23:55:D0:E7:D1:7D:94:8D:EF:CB:7F:DD:2E:49:49:BE:E6:66:E1
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e20323032373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c1:a5:a7:b2:bf:3d:b8:cf:7b:af:0f:9a:d0:38:ad:dd:f7:
84:a8:b6:58:06:05:18:82:75:12:26:6f:2e:ac:7f:3b:df:f3:
36:f2:3a:82:81:47:8e:a9:f5:74:9f:dd:97:3d:bb:2b:13:19:
37:13:11:1f:7e:ee:9c:7d:86:94:cd:b1:bb:01:16:12:d0:df:
44:d1:47:a4:f4:6c:7b:9b:cd:0e:e1:a1:78:3b:ed:f6:e1:d5:
fa:c0:24:37:cc:e2:03:8a:e8:89:4a:ad:a8:c1:6e:dc:66:32:
de:f4:1a:34:53:d1:7d:8c:47:2c:3f:aa:fa:e8:7e:ac:9c:26:
ca:d7:bd:db:d9:e4:41:a6:97:b9:61:5b:19:80:5c:17:1c:fa:
60:75:ba:23:f2:2e:76:85:ff:5b:6c:44:93:d8:73:6d:e9:f8:
c9:c7:57:c4:cd:89:94:07:e9:a3:7b:ad:c0:fc:c0:9f:2f:24:
52:89:92:ce:b2:0a:91:b3:35:5f:29:81:cd:09:1b:3c:d9:65:
41:64:8c:ae:c3:62:ed:0b:b7:2f:13:61:c2:88:21:d9:ec:7b:
c0:e5:0e:f0:88:a4:96:26:f1:26:90:ce:81:b7:50:e0:ea:31:
65:19:27:b4:fb:d5:b3:6e:69:5c:02:c4:05:39:df:5d:22:6a:
44:4a:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:36:27 2026 by rpki-client