Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/39312e3139362e362e302f32342d3234203d3e20323135333138.roa
File: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (raw, json)
Hash identifier: IeuCt5aPrGkveWJ3Jq9nnLqKoF1X3r6mkaE20EsKbMo=
Subject key identifier: 4B:B7:3C:43:02:4A:B9:A5:47:9D:5E:9C:AB:E4:7B:51:B8:7C:37:16
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 4A152BB50D330C743D7AF3AFAE45DFBBF8B96C6A
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/39312e3139362e362e302f32342d3234203d3e20323135333138.roa
Signing time: Sat 12 Sep 2026 19:55:54 +0000
ROA not before: Sat 12 Sep 2026 19:50:54 +0000
ROA not after: Sat 11 Sep 2027 19:55:54 +0000
asID: 215318
IP address blocks: 91.196.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:15:2b:b5:0d:33:0c:74:3d:7a:f3:af:ae:45:df:bb:f8:b9:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Sep 12 19:50:54 2026 GMT
Not After : Sep 11 19:55:54 2027 GMT
Subject: CN=4BB73C43024AB9A5479D5E9CABE47B51B87C3716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:88:3e:cc:d0:dd:20:48:04:70:30:03:9f:
23:f7:b1:d5:3a:4d:7a:1f:d2:8e:14:97:1b:66:69:
ec:eb:02:6c:e8:b5:eb:8d:4b:5e:91:c3:31:28:7c:
a2:a2:f8:2a:65:46:ef:c8:ab:a8:92:a5:67:e5:2e:
c8:65:6e:63:1a:a6:f3:ea:ac:0b:8c:c8:63:92:04:
d2:c1:09:71:30:4c:99:2b:56:e4:95:c2:0d:7c:5a:
35:f0:c9:80:85:79:9a:38:78:ef:b3:b1:5c:c2:1e:
e9:05:3e:c7:a1:6d:2a:ad:9f:6c:75:8c:70:87:e4:
fc:8a:93:6c:a3:8e:b2:f6:cf:52:25:8c:03:17:33:
35:dc:af:72:91:01:f6:66:c3:a3:4e:af:1d:89:49:
5a:d3:33:e3:24:ce:e2:c1:55:86:ac:26:11:e3:e1:
d5:b0:31:e9:95:e9:49:1b:60:98:0b:d0:fb:64:c6:
20:bd:be:21:33:1e:d0:9c:02:9a:2e:42:6d:3c:48:
6c:f4:62:5f:65:5f:d9:37:a3:0a:25:02:eb:ff:f3:
f1:6e:80:44:ba:d2:d6:80:e1:fa:8f:ed:fb:58:11:
62:4a:c7:6b:1c:60:be:5d:16:13:83:a3:6a:4a:63:
64:47:b3:80:91:f0:32:a4:ae:22:c2:5c:cf:f2:d0:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B7:3C:43:02:4A:B9:A5:47:9D:5E:9C:AB:E4:7B:51:B8:7C:37:16
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/39312e3139362e362e302f32342d3234203d3e20323135333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5d:ce:00:12:1e:0d:4d:97:fa:67:0b:ef:ce:c2:5c:0b:8c:
b1:c7:fd:11:d9:38:81:15:c8:3d:97:a8:09:02:f8:33:08:54:
70:41:08:c6:7c:3d:5a:59:34:60:81:97:e1:49:40:e5:63:03:
5e:fe:1b:70:0c:bb:21:8b:3d:a6:58:93:1f:fc:4c:57:a2:5b:
aa:63:0f:e4:13:1b:b2:e5:7b:7c:51:1e:ef:76:e7:df:2e:64:
17:d6:98:5b:6d:76:84:b7:90:38:48:ac:26:ea:e1:70:07:6c:
06:85:62:56:47:46:54:4e:ad:e7:94:5f:5d:61:fa:5f:de:5c:
12:a3:e3:c2:b8:31:cd:71:49:66:44:1e:36:c8:d5:0a:84:33:
cf:55:e4:57:3b:55:4d:68:ca:c8:bc:bc:9e:7d:09:25:36:97:
c4:bf:f9:cf:19:93:f1:cc:0e:7c:36:09:f9:87:f4:f0:55:f8:
04:12:8f:98:eb:c6:fb:5c:17:d4:f8:1c:70:49:58:d3:15:26:
53:4c:20:01:58:82:df:9f:c7:e1:ba:3a:b0:a5:2f:d7:3f:e1:
ca:4d:cd:fe:1f:5e:99:18:b0:25:d0:86:ab:f5:3e:5c:7e:bd:
d1:7c:7b:be:0f:34:99:ba:30:3c:74:41:e3:ec:cb:ed:30:c0:
5c:b9:f4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:36:29 2026 by rpki-client