Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20323039333732.roa
File: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (raw, json)
Hash identifier: LfqYMzkh476Ki7VQsqODx8QNPNDEFujJRyehaY4kEpM=
Subject key identifier: 1A:CD:BD:1E:B0:10:9D:42:F8:31:AC:98:4F:B7:B3:46:2A:D6:D7:9E
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 3DCD91953F112B43B81E3B6CE9C36CCB2FDC0F18
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20323039333732.roa
Signing time: Sat 07 Feb 2026 02:55:37 +0000
ROA not before: Sat 07 Feb 2026 02:50:37 +0000
ROA not after: Sat 06 Feb 2027 02:55:37 +0000
asID: 209372
IP address blocks: 91.209.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cd:91:95:3f:11:2b:43:b8:1e:3b:6c:e9:c3:6c:cb:2f:dc:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Feb 7 02:50:37 2026 GMT
Not After : Feb 6 02:55:37 2027 GMT
Subject: CN=1ACDBD1EB0109D42F831AC984FB7B3462AD6D79E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:57:62:12:f8:e6:53:09:9f:bf:91:3e:9c:
67:4a:88:e4:cd:c0:6e:6e:e6:c0:cc:c7:48:f2:06:
81:bb:f4:d2:0d:e2:a2:97:36:91:20:52:c3:22:f7:
c9:1b:7d:0a:a0:80:52:63:7e:37:f0:74:3d:01:82:
68:9c:e8:e6:45:93:09:bb:0d:e8:1e:72:89:ce:bd:
ce:38:43:f3:1d:6b:a4:c0:b8:6b:1d:95:6a:91:0a:
4d:d9:34:d1:38:77:02:70:87:f5:48:1a:97:9b:7e:
c5:ec:74:5c:b1:65:e1:59:01:5b:f3:53:fb:c5:e4:
71:e6:8d:ef:cc:cc:2e:a3:70:8f:d3:7f:ff:b4:8a:
0c:ab:cd:a5:c5:dd:fc:61:59:1b:ca:17:1d:f9:87:
ba:b2:f6:40:f2:53:bf:fc:89:9b:b8:ce:50:dc:76:
61:6b:38:8b:e7:18:5e:c2:58:1a:04:e7:d5:e0:56:
ea:fc:a0:bb:fd:29:9b:c7:e7:1d:3d:99:1d:f7:e8:
7c:1c:40:cd:72:94:eb:65:86:15:1f:1d:6a:89:6b:
d2:81:78:68:75:62:38:0e:52:41:1a:e4:51:07:e1:
0a:5c:d3:7d:47:ca:c8:f4:43:aa:19:dd:28:fe:06:
f7:b5:9a:34:25:0f:22:b2:08:a3:67:88:6d:ae:f2:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CD:BD:1E:B0:10:9D:42:F8:31:AC:98:4F:B7:B3:46:2A:D6:D7:9E
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35302e302f32342d3234203d3e20323039333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:83:2b:76:02:48:46:8c:e1:df:5e:99:3f:8d:22:b6:07:b9:
f5:06:d2:c1:ff:56:36:2e:f8:76:74:2b:43:ff:ab:f7:3d:f3:
7d:f3:83:b4:41:6a:60:a1:68:00:8b:e1:59:35:9c:d4:fd:20:
eb:7e:2a:a1:f2:1f:00:79:33:bb:31:dc:c3:ca:80:a8:e0:f4:
b9:69:19:cf:f9:53:10:4d:12:84:b9:45:6d:52:35:2d:3a:a6:
5e:ee:4e:fe:0f:05:a4:0f:af:76:e5:bb:08:84:60:dd:32:b9:
80:a0:5b:c4:0c:bc:76:39:ed:a0:08:75:66:25:7a:b4:09:c1:
d3:6e:ba:97:b4:1c:76:2e:18:74:73:01:d8:76:c0:3e:3f:1d:
6e:49:03:64:6f:b8:cc:27:f7:e3:f4:51:a1:3b:d8:ed:9c:cd:
ac:18:04:db:8d:11:e7:7a:ac:f5:8e:7c:d5:e6:39:34:d8:9e:
c3:dd:55:63:1a:cd:e1:c3:bc:b5:85:ca:5a:93:83:32:85:ce:
37:e6:9c:92:ce:a8:2c:51:58:64:98:1e:1b:69:5f:e6:68:cb:
bd:86:92:75:6b:46:6a:eb:04:7e:07:2a:58:be:c0:85:25:81:
6d:d4:aa:22:a2:b1:c2:11:a9:79:6c:1c:d6:ef:ec:6c:83:b6:
64:fd:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:51:41 2026 by rpki-client