Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa
File: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier: F9tU4X7OXQCTU9T1C6y/YaRD8bbRdcBCUgGAUyYNbxk=
Subject key identifier: C1:F1:32:C6:2C:E4:F4:36:B7:A5:AA:DE:23:9A:5D:C8:03:EF:4F:44
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 02FC66690B6F504BE579B018C0F62A4AEF90C1C5
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa
Signing time: Mon 12 Oct 2026 13:49:36 +0000
ROA not before: Mon 12 Oct 2026 13:44:36 +0000
ROA not after: Mon 11 Oct 2027 13:49:36 +0000
asID: 212335
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fc:66:69:0b:6f:50:4b:e5:79:b0:18:c0:f6:2a:4a:ef:90:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 12 13:44:36 2026 GMT
Not After : Oct 11 13:49:36 2027 GMT
Subject: CN=C1F132C62CE4F436B7A5AADE239A5DC803EF4F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:a0:76:ac:02:35:ab:f2:9d:aa:b8:d2:66:
e4:4b:a3:c5:46:9c:03:5d:29:cc:7d:56:a6:2f:0d:
d3:33:90:a9:d5:c3:2d:8c:e5:49:f0:be:02:ea:8e:
39:21:0a:87:bd:7b:18:7f:25:73:13:66:f6:60:73:
04:8e:aa:df:74:37:17:43:79:57:3d:c3:69:40:d6:
66:65:7e:ef:fb:4e:08:69:88:2c:6a:a2:ad:bb:b6:
52:8f:27:ea:2c:2c:7a:74:ad:db:e0:81:a2:5d:1f:
97:87:ed:03:8b:83:7e:0b:f1:74:83:7b:fa:78:37:
39:84:9c:81:1c:08:85:40:eb:34:97:59:83:40:a7:
b7:bc:f8:9f:23:72:75:b3:c3:7b:93:f4:dd:43:90:
36:8b:cd:57:97:4b:b4:3c:51:67:46:fd:ea:eb:6b:
4d:46:c8:11:70:91:8e:33:46:37:e7:56:f7:e2:df:
4b:34:00:c8:14:88:15:4a:63:ad:8d:9f:32:a0:2e:
b7:48:ea:7d:d6:06:cc:06:3e:10:51:3d:82:c2:ad:
08:29:7d:59:15:a9:3b:35:8c:da:60:19:e4:16:ed:
e9:f1:54:5d:53:c1:67:6e:f1:58:9b:9c:c4:39:aa:
74:45:52:bb:25:05:7c:a5:eb:0d:43:6a:52:fe:fe:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:32:C6:2C:E4:F4:36:B7:A5:AA:DE:23:9A:5D:C8:03:EF:4F:44
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2b:a3:e7:08:55:26:e6:38:00:b6:d7:22:1a:92:bb:99:a2:
ef:7b:ba:52:76:cf:70:4b:fd:d9:62:b4:cc:d9:bb:ea:d1:88:
96:d4:ac:ee:bc:af:09:7a:bc:e3:75:20:70:ac:0b:0a:d5:34:
9b:7b:d2:43:f7:8d:89:94:96:c3:f2:7b:56:12:1b:26:bf:bd:
c5:d5:19:f4:8c:9e:b1:39:e0:22:a1:0b:b7:dc:7f:e7:43:3f:
90:8d:f6:6c:aa:01:b0:b9:c0:8d:3d:98:23:11:57:fb:81:db:
f1:26:da:3c:07:c5:53:ac:10:f5:e2:ef:48:3a:4f:36:16:70:
83:1c:f4:ea:e0:ef:6e:b2:d9:af:89:1f:7f:46:53:a6:0d:27:
bf:0a:86:ef:f0:bf:29:6f:aa:70:99:64:46:a6:99:51:01:f2:
61:63:15:2f:b4:f5:62:7d:b9:b5:c8:30:a7:d1:8a:19:d8:9e:
27:8b:37:bc:43:68:fa:0e:d5:e9:55:f5:f4:91:c9:88:68:ff:
c5:59:c8:30:54:65:6d:ea:b4:be:20:fc:8d:c1:4e:5b:c2:7f:
ac:6b:4e:b3:b5:a1:5a:06:ce:2b:1e:4d:3f:e2:18:ff:fd:90:
b3:bb:41:64:56:eb:16:b8:e7:7e:fa:57:e8:fe:a4:76:60:32:
a9:e7:f8:8f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAvxmaQtvUEvlebAYwPYqSu+QwcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm
Yjc3YjRhOTAeFw0yNjEwMTIxMzQ0MzZaFw0yNzEwMTExMzQ5MzZaMDMxMTAvBgNV
BAMTKEMxRjEzMkM2MkNFNEY0MzZCN0E1QUFERTIzOUE1REM4MDNFRjRGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dKB2rAI1q/KdqrjSZuRLo8VG
nANdKcx9VqYvDdMzkKnVwy2M5UnwvgLqjjkhCoe9exh/JXMTZvZgcwSOqt90NxdD
eVc9w2lA1mZlfu/7TghpiCxqoq27tlKPJ+osLHp0rdvggaJdH5eH7QOLg34L8XSD
e/p4NzmEnIEcCIVA6zSXWYNAp7e8+J8jcnWzw3uT9N1DkDaLzVeXS7Q8UWdG/err
a01GyBFwkY4zRjfnVvfi30s0AMgUiBVKY62NnzKgLrdI6n3WBswGPhBRPYLCrQgp
fVkVqTs1jNpgGeQW7enxVF1TwWdu8VibnMQ5qnRFUrslBXyl6w1DalL+/mprAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwfEyxizk9Da3pareI5pdyAPvT0QwHwYDVR0j
BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy
Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190
M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt
NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzkzMTJlMzEzMzMyMmUzMjMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABbhOMwDQYJKoZIhvcNAQELBQADggEBAJoro+cIVSbmOAC21yIakruZou97ulJ2
z3BL/dlitMzZu+rRiJbUrO68rwl6vON1IHCsCwrVNJt70kP3jYmUlsPye1YSGya/
vcXVGfSMnrE54CKhC7fcf+dDP5CN9myqAbC5wI09mCMRV/uB2/Em2jwHxVOsEPXi
70g6TzYWcIMc9Org726y2a+JH39GU6YNJ78Khu/wvylvqnCZZEammVEB8mFjFS+0
9WJ9ubXIMKfRihnYnieLN7xDaPoO1elV9fSRyYho/8VZyDBUZW3qtL4g/I3BTlvC
f6xrTrO1oVoGziseTT/iGP/9kLO7QWRW6xa45376V+j+pHZgMqnn+I8=
-----END CERTIFICATE-----
Generated at Thu Oct 22 01:32:58 2026 by rpki-client