Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e39392e302f32342d3234203d3e20313734.roa
File: 39312e3233322e39392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: vw6CF6gn9sbz+AB9WKlGqawV53NNSKPBFf5sty8TfWc=
Subject key identifier: 89:31:63:99:42:3F:6E:64:C4:0D:ED:71:44:DE:DD:96:6D:28:48:AF
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 29111EC3A199FEF88311FF07042F0EC0380DC40A
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e39392e302f32342d3234203d3e20313734.roa
Signing time: Thu 10 Sep 2026 10:31:45 +0000
ROA not before: Thu 10 Sep 2026 10:26:45 +0000
ROA not after: Thu 09 Sep 2027 10:31:45 +0000
asID: 174
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:11:1e:c3:a1:99:fe:f8:83:11:ff:07:04:2f:0e:c0:38:0d:c4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Sep 10 10:26:45 2026 GMT
Not After : Sep 9 10:31:45 2027 GMT
Subject: CN=89316399423F6E64C40DED7144DEDD966D2848AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:6f:f0:fb:85:85:18:be:6e:33:9e:68:32:
a3:95:e4:1b:07:f9:77:34:a6:f2:72:13:c3:6c:08:
a6:69:d2:2b:d1:fa:ba:90:8d:9e:ef:f9:48:e9:ae:
2e:4b:4f:f3:15:7c:43:f5:c0:bb:58:c1:a1:4d:b5:
f7:63:2e:f4:ea:43:ec:54:d2:b1:03:04:2b:cf:b8:
b7:e9:0c:53:2b:44:28:72:8d:6a:d7:cf:ed:9d:06:
5b:56:c3:0e:70:0f:70:64:1e:97:89:53:a2:39:84:
37:7a:42:d0:4a:12:62:d5:25:be:ef:df:4a:4d:38:
12:35:74:96:a1:b3:77:8d:74:0f:52:32:9c:f7:da:
e0:b8:75:f9:4a:14:d2:77:7e:cd:35:29:58:ff:af:
d5:a1:86:9d:3d:cd:bd:3c:28:13:aa:ba:85:1c:a8:
eb:72:94:3c:17:90:8e:81:5d:0e:23:e2:c2:6a:9a:
ea:9e:ea:ec:78:39:7d:4b:70:bf:e6:88:93:1d:f2:
73:ba:75:ee:f6:84:2d:00:48:17:d5:ae:f7:af:b8:
dd:19:62:6e:dd:f3:21:24:bb:da:19:c9:d5:eb:d5:
ed:d4:f6:b4:88:64:49:e4:7b:16:dd:d4:27:e1:4a:
68:8e:32:50:ae:a8:e8:e9:df:b2:34:9d:96:33:92:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:63:99:42:3F:6E:64:C4:0D:ED:71:44:DE:DD:96:6D:28:48:AF
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e39392e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0c:64:e6:8c:15:3a:87:5e:23:c1:05:f5:64:00:94:9e:72:
f5:a2:7f:d4:00:83:d2:98:73:e0:d3:f3:b1:ee:c6:b0:ce:85:
41:70:6d:92:92:66:a2:4c:eb:eb:ef:fa:85:8c:8d:57:7a:db:
e8:16:6b:9b:fb:d0:cc:1a:e3:c5:30:9f:15:91:cd:c8:ae:fd:
15:0c:fd:1c:91:29:18:d8:c5:68:44:a5:f3:38:ba:41:2f:a4:
99:91:54:c8:50:0b:5d:59:9e:7a:76:92:3c:b7:51:12:eb:14:
70:5c:f7:61:7c:95:66:f3:bb:5d:51:77:7a:41:58:6f:d5:a6:
39:3e:ac:8b:66:be:bf:9a:b4:20:67:bd:0a:d7:7b:d2:be:fa:
fd:5e:93:0d:ea:bc:44:61:04:2d:f2:ae:84:0b:50:5d:af:28:
e6:1a:3a:14:ff:b1:a3:d8:74:ab:ff:2b:03:ce:65:d1:0e:66:
c5:5d:81:7d:c1:dd:f4:9b:e9:2a:8b:b2:6a:b8:95:87:ab:04:
75:7b:82:60:f0:9f:ec:9f:d0:90:ae:f0:e8:03:f1:13:34:8f:
28:5b:fc:bd:d4:35:8f:af:83:9a:ff:da:ce:12:65:f9:70:f0:
42:fa:80:cc:d8:d1:01:d7:36:dc:21:d5:d2:d8:bb:74:de:a5:
0f:ce:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:37 2026 by rpki-client