Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e2030.roa
File: 39312e3233322e3130332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: hp0BD10ScYnMtcHuhlTB0I41ZHOp3SxXjpbuadrcoQM=
Subject key identifier: 56:75:E6:F6:E5:AD:AF:DC:42:E9:F4:F8:B3:FF:7F:FD:86:EE:6E:3C
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 5CF45845F6C68F1399F810D20190676FCBC38035
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e2030.roa
Signing time: Fri 11 Sep 2026 08:08:35 +0000
ROA not before: Fri 11 Sep 2026 08:03:35 +0000
ROA not after: Fri 10 Sep 2027 08:08:35 +0000
asID: 0
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f4:58:45:f6:c6:8f:13:99:f8:10:d2:01:90:67:6f:cb:c3:80:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 11 08:03:35 2026 GMT
Not After : Sep 10 08:08:35 2027 GMT
Subject: CN=5675E6F6E5ADAFDC42E9F4F8B3FF7FFD86EE6E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:ce:78:5c:a9:73:cd:23:83:c0:dc:03:11:
45:41:6d:53:24:81:e0:95:56:1a:72:38:ca:d3:9a:
00:09:6d:f9:d6:4b:26:47:97:c7:13:fe:3b:3e:aa:
b8:f5:91:fa:ad:2d:b1:14:64:06:d9:03:3f:8c:04:
98:8b:e2:95:5c:96:be:72:30:6b:fc:3a:6b:27:72:
ca:e4:50:2f:79:70:1d:ae:a4:82:0b:14:d2:e4:a4:
fc:74:04:4d:d5:3e:d9:0d:29:e9:6a:71:78:98:b3:
37:5c:12:d4:49:7b:d8:61:62:ef:a6:7c:41:5f:7e:
ce:e4:72:c8:73:81:00:9c:67:39:66:a7:86:8d:5f:
a6:3f:c6:a3:bd:67:39:54:5e:35:a7:cc:0e:83:e4:
2d:a6:56:ef:05:8f:f0:81:8d:fa:69:db:07:68:d0:
4d:38:49:b5:0a:51:35:2d:40:1c:54:81:04:2f:fa:
74:ea:0d:b8:5f:c4:d5:af:7d:51:9a:14:c2:d5:2f:
a1:06:68:dc:52:2e:be:e6:28:b0:59:18:61:f9:a7:
12:28:d5:b5:41:c4:19:54:c3:03:8c:16:77:35:4d:
52:47:24:4d:2a:5a:ac:b3:69:b1:c6:d9:9e:4e:22:
8d:91:bd:31:e5:93:b3:b2:bb:24:75:f1:1b:64:11:
a6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:E6:F6:E5:AD:AF:DC:42:E9:F4:F8:B3:FF:7F:FD:86:EE:6E:3C
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
24:da:eb:ad:76:d8:d8:9f:39:5a:73:f5:92:09:2d:cc:3d:4e:
c6:ce:40:05:78:1a:26:0b:15:6f:df:d2:c7:66:49:12:c8:1b:
b3:04:e4:fa:a9:80:06:6a:b7:7d:b3:7a:01:a1:49:61:e0:a8:
e1:27:b4:b2:0e:e3:30:be:b4:66:c4:d0:bd:c9:c2:5c:49:5b:
03:1a:e3:d5:9c:19:e0:17:64:d5:73:84:81:87:8f:f9:01:40:
f6:f7:06:68:2f:0f:3f:fc:cb:ec:21:b8:4a:5d:28:9d:e1:4c:
36:a1:89:00:ae:79:ea:55:47:80:ef:7f:1c:df:ef:1c:43:fd:
3b:f2:11:ed:06:c3:db:f1:e7:1b:65:4a:10:fd:e9:e6:4f:fe:
4b:0a:29:e2:0c:22:a9:d5:25:32:99:31:21:81:2f:82:0a:8b:
39:cd:2a:b2:72:a9:6b:d8:38:0c:b4:b8:d4:d9:ff:e9:37:bc:
b1:1f:2b:de:87:7d:49:67:61:ca:96:57:a3:54:88:de:c9:95:
0a:2c:49:45:03:35:0d:d6:db:19:77:ca:50:81:83:90:63:57:
79:d9:4b:d6:49:19:23:46:81:ef:96:8a:61:46:29:c5:02:fc:
55:50:fc:56:8c:71:67:31:93:c0:95:e9:06:87:39:fa:40:d2:
b7:14:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:21 2026 by rpki-client