Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34382e302f32342d3234203d3e2034363337.roa
File: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (raw, json)
Hash identifier: 9aJ1lRoOXNT0IiNEFJIwNi7z4Hr/etdLOUAmwK9LwsY=
Subject key identifier: 24:2A:4E:4C:7B:4C:D8:DC:5B:D1:C2:A8:EC:91:25:A8:C2:EE:CE:0D
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 4C6B3B030AFA80EEBB1846F1B3C5EA468F9FFB9F
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34382e302f32342d3234203d3e2034363337.roa
Signing time: Fri 03 Jul 2026 18:48:54 +0000
ROA not before: Fri 03 Jul 2026 18:43:54 +0000
ROA not after: Fri 02 Jul 2027 18:48:54 +0000
asID: 4637
IP address blocks: 91.209.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6b:3b:03:0a:fa:80:ee:bb:18:46:f1:b3:c5:ea:46:8f:9f:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Jul 3 18:43:54 2026 GMT
Not After : Jul 2 18:48:54 2027 GMT
Subject: CN=242A4E4C7B4CD8DC5BD1C2A8EC9125A8C2EECE0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:af:db:2f:cc:88:99:29:94:6b:6b:8b:84:
77:89:17:16:ad:81:df:0f:88:c8:0a:e1:7f:e7:2d:
66:1b:60:e3:2a:4e:16:70:ea:d3:c9:dd:36:d7:a0:
8a:6a:d5:47:43:57:37:4a:70:e3:ae:45:6f:a5:4a:
0f:82:8a:ba:bf:04:63:a9:4d:b6:ad:c0:01:f9:5c:
28:e9:fd:36:b9:e7:7c:44:fe:d2:73:b0:3c:af:22:
cd:c3:69:ea:cf:35:b6:0d:b1:ef:ea:09:a1:8f:25:
53:e6:c0:0a:87:18:28:47:ed:07:25:0d:d9:17:6a:
d2:07:49:36:57:a1:73:07:ad:30:99:0f:96:db:f2:
e4:73:66:0b:bd:e0:2a:82:f0:14:cf:be:77:54:ed:
b0:f2:a6:6b:dd:5a:09:a5:9a:cc:97:2b:92:e1:9b:
d5:2d:5f:bb:48:a1:0e:78:de:08:62:87:60:37:b9:
43:e4:3e:87:58:f0:7f:de:aa:43:75:1f:12:f0:54:
25:ce:6a:1d:3b:86:e9:30:c1:45:07:9f:ff:10:c0:
f1:78:a3:c2:d4:aa:c5:4a:c9:32:3b:78:f3:b6:3c:
db:c6:2c:ab:5b:3c:37:4d:c1:e5:7b:c6:76:b8:aa:
72:ae:a5:2e:f6:d1:a1:99:9e:63:b1:8a:51:93:51:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:4E:4C:7B:4C:D8:DC:5B:D1:C2:A8:EC:91:25:A8:C2:EE:CE:0D
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e34382e302f32342d3234203d3e2034363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.48.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c1:df:f0:db:aa:48:97:e0:a8:5d:f9:4e:7b:7e:6a:40:2a:
aa:b0:29:0d:26:14:c1:48:49:81:9e:ca:cd:64:79:9a:49:36:
3c:d1:67:88:94:76:d7:2a:b6:fa:89:62:f4:fc:fc:84:5c:94:
9b:4d:6e:56:88:68:fa:96:43:a7:67:a8:e9:3d:cf:8c:b2:ed:
dc:73:26:46:4c:86:8b:e8:74:98:90:fa:8c:8d:1d:2e:42:4f:
85:49:1a:14:65:97:74:36:dd:1f:05:a9:81:c3:c7:85:18:28:
2f:c4:48:56:db:54:8c:2f:0d:74:20:d4:fa:4e:a0:65:9d:bc:
b5:c4:0b:6e:ae:93:41:91:82:a8:e0:9a:f7:6d:65:33:ec:b7:
5e:4d:86:6b:6d:8c:fb:dc:5c:bc:2b:f2:56:6d:6c:cd:7f:f7:
df:fd:ac:13:a7:f8:22:71:2b:eb:9d:dd:7b:5a:ea:99:8a:bb:
40:89:aa:d1:d0:66:7e:ab:3a:3c:32:3c:51:d6:01:c8:ff:56:
cc:91:af:df:40:0f:43:61:2b:a9:f5:00:9d:c4:7f:36:fa:b9:
3d:f9:9f:5e:ae:e0:0e:06:cc:0b:bd:62:f4:15:11:02:6f:96:
0e:4c:af:e9:6e:5e:c9:0d:56:b7:ba:67:6e:01:c6:4b:2c:2f:
4e:9b:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:30 2026 by rpki-client