Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa
File: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: jolibaL2ixdnuD9/RuPi6xUG4iKUc2qeMI4fX7YfJjA=
Subject key identifier: CD:DA:57:44:F2:29:1D:DA:48:A8:60:32:FC:ED:5C:2C:06:5C:EA:62
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 64A35B8F5101C4C072FFED4A874F2AC1E9347AF9
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa
Signing time: Mon 12 Oct 2026 13:49:36 +0000
ROA not before: Mon 12 Oct 2026 13:44:36 +0000
ROA not after: Mon 11 Oct 2027 13:49:36 +0000
asID: 212384
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a3:5b:8f:51:01:c4:c0:72:ff:ed:4a:87:4f:2a:c1:e9:34:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Oct 12 13:44:36 2026 GMT
Not After : Oct 11 13:49:36 2027 GMT
Subject: CN=CDDA5744F2291DDA48A86032FCED5C2C065CEA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:77:66:ab:75:40:bb:d8:d4:bf:22:93:47:
25:d8:e1:70:29:91:32:64:92:55:26:ee:fa:89:c9:
7f:ca:ff:54:e9:52:b6:e5:90:9e:c7:89:10:24:55:
06:73:e6:e3:8b:29:f7:50:ed:f0:d5:0c:b0:59:97:
cc:cd:47:24:22:6f:84:ee:80:cc:b4:dd:bb:d9:f2:
14:78:ca:84:e3:69:3e:22:3c:46:0d:e4:c2:f8:f8:
3a:b8:ca:b0:71:1e:f5:51:40:14:c1:43:8b:33:73:
a7:9b:18:14:5a:78:17:f6:b6:8a:21:f0:e5:60:04:
7c:30:82:89:30:4f:e6:53:48:a0:b4:81:a8:3e:15:
dc:9d:21:67:43:4d:66:8d:2a:43:49:ab:af:b2:c9:
6c:43:bf:a5:81:8a:25:c9:29:39:14:ae:99:ff:d2:
86:63:65:97:21:df:a0:eb:a4:1f:7d:7d:8b:66:5b:
fb:f6:48:ce:e1:24:96:aa:45:c0:dd:7f:ef:66:34:
b7:00:27:1e:77:14:3c:c7:9e:f3:f2:67:83:ed:6d:
5e:c1:df:73:41:9d:7e:52:ae:3d:5b:27:86:42:a0:
f3:5c:20:78:d2:c6:17:52:1d:1c:e2:6c:7e:fe:e3:
99:a0:80:ff:1f:bb:33:1f:bb:11:d0:68:1f:3e:36:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:57:44:F2:29:1D:DA:48:A8:60:32:FC:ED:5C:2C:06:5C:EA:62
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:dd:86:56:cf:ee:49:0e:dc:87:0d:35:14:94:a4:e6:e4:96:
06:49:0c:a9:d2:87:39:45:39:3a:7b:ea:23:73:51:64:2a:0b:
6c:b2:6a:a1:30:81:53:75:ff:ac:09:3d:a4:1f:25:47:96:5d:
a0:cd:04:b0:b2:eb:c0:29:b0:61:5c:40:03:71:6d:5a:53:73:
ce:82:9e:b4:8f:3d:64:14:13:2f:d2:e4:7d:62:d2:c5:58:b1:
e3:7e:b6:89:a1:c8:f4:67:9b:4f:de:ac:76:a8:84:bd:11:37:
85:67:b3:fd:60:b0:dc:ef:9c:af:61:a5:c9:af:1b:21:2f:ed:
2d:83:1b:9a:7a:c8:c1:39:94:b9:aa:2a:6c:72:c8:c7:13:c1:
0c:04:59:6e:a9:0a:36:ed:d1:72:e5:58:0a:9d:35:15:b7:66:
3d:1e:18:83:d7:64:32:74:d3:a4:4d:b7:9b:90:b4:7e:6d:c5:
50:d1:11:61:96:d5:e6:d5:30:27:4f:fb:f5:07:49:b4:ac:2e:
c9:3e:07:dd:40:e6:f5:f2:e4:7c:25:cb:8e:e5:14:e2:89:94:
06:4f:1f:28:b7:8b:b2:fe:8e:26:af:3b:cb:1f:f8:32:da:d8:
58:7d:aa:65:a7:49:8b:67:0a:ad:b0:08:6a:19:15:86:7d:44:
6f:31:f5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:27:28 2026 by rpki-client