Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa
File: 39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 1FmHLUM7mWouxWZLfwFlC5EOjEOeOCCyrgdoYqtL/J8=
Subject key identifier: B0:7E:F2:7E:EF:7E:5F:C9:94:84:2E:0B:82:3B:A1:29:9E:7C:2D:B2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1F6DD80F4596A95058500D1A5FFA54CFD2EDA9F9
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 04 Feb 2026 20:23:15 +0000
ROA not before: Wed 04 Feb 2026 20:18:15 +0000
ROA not after: Wed 03 Feb 2027 20:23:15 +0000
asID: 136787
IP address blocks: 91.205.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6d:d8:0f:45:96:a9:50:58:50:0d:1a:5f:fa:54:cf:d2:ed:a9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 4 20:18:15 2026 GMT
Not After : Feb 3 20:23:15 2027 GMT
Subject: CN=B07EF27EEF7E5FC994842E0B823BA1299E7C2DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:91:25:38:86:c9:8e:60:19:d1:8d:3d:cc:
43:a0:b2:66:b1:10:e9:6d:1e:fb:cb:86:55:e8:b8:
b0:17:92:a4:ac:a9:71:e7:5e:0c:52:2c:d2:f5:56:
e5:3c:38:eb:17:87:3d:1f:79:0e:45:85:be:91:1c:
f7:2a:8c:3e:3e:79:13:61:4c:c8:bf:61:68:66:8c:
03:26:f0:3a:35:21:2b:bc:b1:b7:53:d8:f3:c5:5b:
74:ca:dc:0b:f2:5d:89:ca:5f:52:c4:3e:b9:bc:c7:
d0:08:be:f3:0c:e0:37:ad:34:ac:6c:69:1d:dc:28:
cf:93:4b:bd:0b:96:80:ad:40:ab:94:34:bf:f9:c8:
0a:5d:bb:94:56:b3:95:0c:5b:de:ac:a4:06:06:f5:
95:15:50:b0:ad:91:c0:ed:9e:36:34:67:f6:12:4b:
b0:bc:04:db:d3:ae:dc:d2:22:6e:80:96:1d:e5:c5:
b7:77:14:cd:6b:c0:b3:38:7e:d5:03:3c:ee:49:91:
c8:2d:6d:d3:d5:ba:af:37:89:61:0d:23:9d:61:76:
df:d1:06:3a:b3:48:2b:b8:81:95:66:14:12:66:50:
ff:5f:44:b2:8a:65:f5:e2:19:a8:ba:67:92:af:12:
a7:33:d4:c5:45:19:4c:86:7a:d7:7e:2d:0e:ca:c4:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:F2:7E:EF:7E:5F:C9:94:84:2E:0B:82:3B:A1:29:9E:7C:2D:B2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.107.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a5:38:35:6d:28:20:68:0e:56:4f:61:17:09:39:38:d7:5a:
3b:67:25:a2:dc:19:87:9d:a1:e4:22:1f:23:38:5f:97:29:bd:
42:a8:4e:cb:78:1b:65:a2:cf:37:e0:85:1b:e4:0d:49:72:f9:
af:3a:db:04:09:70:c1:d7:0f:58:64:26:d7:ec:51:15:88:93:
83:7a:54:6a:09:a2:ae:8e:84:28:10:6b:d3:08:e1:29:db:63:
f4:62:5d:4b:7c:67:6f:ce:ba:6a:32:e2:42:37:ce:aa:94:8b:
e7:22:05:57:37:ac:6b:f5:9c:8d:9e:9c:77:20:f2:94:53:7d:
27:61:f1:f5:df:c9:0a:ca:65:ad:14:d8:24:48:88:ee:e6:1f:
e5:d1:3c:38:3a:58:54:17:81:e1:27:9a:f6:e6:44:de:16:1d:
4b:14:19:e4:1d:8c:c6:3c:e8:d1:2c:7d:19:b4:e5:95:66:bf:
69:0a:09:24:35:33:8c:1a:15:da:12:c9:b6:e9:0b:c0:f8:e9:
a3:33:ad:59:86:c2:53:44:dd:0d:24:68:44:9c:74:c8:9e:25:
c9:86:ed:4b:68:eb:08:8e:51:93:35:5a:c6:90:03:7a:cf:50:
fd:8d:d6:82:50:b6:0a:5d:06:84:59:be:9e:db:80:17:91:88:
5a:29:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:26 2026 by rpki-client