Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e20323135383938.roa
File: 39312e3233322e3130332e302f32342d3234203d3e20323135383938.roa (raw, json)
Hash identifier: hupoh7tin6+6uLbgxI0hcszV0iaweFsi/4W8gTBBX8c=
Subject key identifier: 0E:73:F5:2A:E8:B9:2F:6B:8D:75:C8:DE:A1:61:56:DF:E9:8A:D9:FE
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 7088ACCD7BABA60F409F2BFA221C1AFC6A1C61A0
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e20323135383938.roa
Signing time: Tue 03 Mar 2026 15:17:39 +0000
ROA not before: Tue 03 Mar 2026 15:12:39 +0000
ROA not after: Tue 02 Mar 2027 15:17:39 +0000
asID: 215898
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:88:ac:cd:7b:ab:a6:0f:40:9f:2b:fa:22:1c:1a:fc:6a:1c:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Mar 3 15:12:39 2026 GMT
Not After : Mar 2 15:17:39 2027 GMT
Subject: CN=0E73F52AE8B92F6B8D75C8DEA16156DFE98AD9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:f9:64:4d:47:e6:bd:e5:e5:43:ed:7e:0a:
8d:75:3b:18:68:a0:69:fb:27:a1:29:37:df:33:73:
6f:ae:50:23:d3:17:91:0f:98:ef:b8:31:c5:fa:da:
bb:17:2d:00:37:f3:23:50:2a:97:c3:f9:3e:12:d6:
c2:99:6c:7f:cf:cf:62:a6:6f:89:a7:c0:70:4f:4c:
0d:7f:16:ff:9f:89:54:94:25:63:25:6e:ce:bd:c6:
3c:2e:62:6f:03:47:98:94:b5:79:c3:72:b1:43:29:
c0:87:01:76:5f:ae:d4:13:53:a3:f3:a0:82:c1:01:
98:e6:c0:f3:4d:66:ff:fd:b8:13:62:e9:c1:39:65:
af:63:b9:d1:43:17:06:87:33:57:53:61:aa:2c:94:
97:d6:19:f6:da:ea:87:37:3e:57:29:8d:87:f7:52:
41:c5:0f:2b:77:87:01:8a:dc:f8:59:9a:1e:7b:68:
6d:bc:d8:96:81:a4:4f:ee:32:e5:46:18:85:dc:c5:
ee:34:5d:99:16:22:49:55:e6:c4:18:e2:3b:f5:2d:
32:7a:35:8b:0d:f0:fa:4b:6b:56:3b:cc:0f:68:55:
a7:ff:2a:25:e4:52:4d:70:8f:39:61:ab:84:14:3d:
70:d4:4c:10:16:6c:c8:08:d2:4a:a4:c4:d0:27:59:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:73:F5:2A:E8:B9:2F:6B:8D:75:C8:DE:A1:61:56:DF:E9:8A:D9:FE
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e20323135383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e4:7d:96:cb:3a:56:6b:6d:8b:7f:b7:53:bb:35:74:c4:84:
d5:5c:be:10:6a:6c:fa:2f:d8:bc:6d:b3:72:e3:9e:9a:57:98:
d5:2d:b5:5d:ae:ce:e2:46:30:9e:71:a8:9a:e2:5e:fa:7f:4b:
39:7d:83:ee:97:ef:c4:d9:7e:1b:b7:a9:83:23:b7:63:5e:f2:
e0:ba:3f:58:9a:c9:9a:e4:a4:ed:04:c2:f8:d8:22:d7:92:dd:
9a:5b:c7:69:6f:98:a7:a7:09:d8:1b:5c:86:a2:67:31:f3:67:
c2:1f:ea:5f:ef:83:d6:93:9e:b3:19:00:dc:82:d2:ab:76:b7:
f2:73:e1:3c:ec:14:23:2b:7c:9a:3e:57:f0:c5:f8:6f:8f:b4:
57:08:fe:90:75:3a:0a:21:66:b8:ff:9b:d1:90:8c:bf:4a:f1:
60:5d:2e:a2:a0:ec:fb:ab:a0:32:71:b6:e2:ae:0d:e6:51:98:
84:68:8e:a9:39:8d:e3:45:bc:62:47:28:da:28:f0:9d:8d:e1:
a3:68:65:ae:a2:b5:f6:62:be:4f:49:e4:be:a5:7e:c3:67:2c:
d1:82:ee:6e:97:05:98:10:d9:0c:09:54:e4:3d:20:e7:28:ed:
ba:84:ca:c5:6a:8e:8e:af:12:bd:89:cf:e4:6a:ac:b9:c1:d1:
3e:6a:75:12
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcIiszXurpg9Anyv6Ihwa/GocYaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjAzMDMxNTEyMzlaFw0yNzAzMDIxNTE3MzlaMDMxMTAvBgNV
BAMTKDBFNzNGNTJBRThCOTJGNkI4RDc1QzhERUExNjE1NkRGRTk4QUQ5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OPlkTUfmveXlQ+1+Co11Oxho
oGn7J6EpN98zc2+uUCPTF5EPmO+4McX62rsXLQA38yNQKpfD+T4S1sKZbH/Pz2Km
b4mnwHBPTA1/Fv+fiVSUJWMlbs69xjwuYm8DR5iUtXnDcrFDKcCHAXZfrtQTU6Pz
oILBAZjmwPNNZv/9uBNi6cE5Za9judFDFwaHM1dTYaoslJfWGfba6oc3PlcpjYf3
UkHFDyt3hwGK3PhZmh57aG282JaBpE/uMuVGGIXcxe40XZkWIklV5sQY4jv1LTJ6
NYsN8PpLa1Y7zA9oVaf/KiXkUk1wjzlhq4QUPXDUTBAWbMgI0kqkxNAnWVSXAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUDnP1Kui5L2uNdcjeoWFW3+mK2f4wHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt
ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzkzMTJlMzIzMzMyMmUzMTMw
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzODM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABb6GcwDQYJKoZIhvcNAQELBQADggEBAGfkfZbLOlZrbYt/t1O7NXTEhNVcvhBq
bPov2Lxts3LjnppXmNUttV2uzuJGMJ5xqJriXvp/Szl9g+6X78TZfhu3qYMjt2Ne
8uC6P1iayZrkpO0EwvjYIteS3Zpbx2lvmKenCdgbXIaiZzHzZ8If6l/vg9aTnrMZ
ANyC0qt2t/Jz4TzsFCMrfJo+V/DF+G+PtFcI/pB1OgohZrj/m9GQjL9K8WBdLqKg
7PuroDJxtuKuDeZRmIRojqk5jeNFvGJHKNoo8J2N4aNoZa6itfZivk9J5L6lfsNn
LNGC7m6XBZgQ2QwJVOQ9IOco7bqEysVqjo6vEr2Jz+RqrLnB0T5qdRI=
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:32:17 2026 by rpki-client