Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e203135393234.roa
File: 39312e3233322e3130332e302f32342d3234203d3e203135393234.roa (raw, json)
Hash identifier: wOvBi6LdA6eBMvknjvBaDo/9pDGs1BapJyz4TddXAN4=
Subject key identifier: 02:73:0A:1D:08:9E:C0:31:28:18:79:20:AD:E1:E1:F1:73:AE:90:C5
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 04572EC50CF13A66C1497D70E301DB4C2F59A7A7
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e203135393234.roa
Signing time: Sun 19 Jul 2026 05:49:06 +0000
ROA not before: Sun 19 Jul 2026 05:44:06 +0000
ROA not after: Sun 18 Jul 2027 05:49:06 +0000
asID: 15924
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:57:2e:c5:0c:f1:3a:66:c1:49:7d:70:e3:01:db:4c:2f:59:a7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Jul 19 05:44:06 2026 GMT
Not After : Jul 18 05:49:06 2027 GMT
Subject: CN=02730A1D089EC03128187920ADE1E1F173AE90C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:e8:6f:0f:6c:ca:5c:2d:f4:8c:6b:d8:dd:
35:fd:b3:94:7c:f8:79:ae:8b:6e:99:ed:41:f5:40:
94:88:51:4b:ea:7a:e6:f2:44:a2:62:67:9c:e3:36:
7e:dd:5b:97:65:45:06:e1:81:c2:5f:11:cf:62:65:
ea:1c:8e:20:a7:42:42:19:02:9a:c5:88:4f:71:2c:
96:bf:da:ed:fb:e3:5f:23:32:b7:03:21:fd:c5:21:
4b:5a:68:ca:ee:af:bf:1c:24:e0:e7:bd:a9:15:db:
2a:6c:5e:48:ed:48:3c:80:dd:73:7c:fb:06:9f:b9:
e1:e3:77:e6:9f:d9:86:a7:92:b0:d4:63:e1:1a:06:
27:e5:11:8c:5a:37:59:73:dc:8f:e4:59:2a:06:4f:
d0:26:1d:e8:8e:84:83:1e:74:b1:cd:57:44:fb:ed:
78:5b:f2:42:0b:1d:a5:a2:a5:c1:aa:08:9c:2b:d7:
2a:04:9b:e1:bc:7f:4a:12:53:94:d6:aa:42:01:06:
a6:d1:66:40:e4:16:2c:83:cd:e1:f5:9b:7c:bd:91:
eb:07:0e:ee:85:45:2a:49:2d:ce:68:88:99:44:53:
fc:73:31:97:51:32:54:71:00:53:89:ac:19:dc:16:
0a:6a:8b:98:45:98:7d:6e:49:8b:2d:07:04:da:c3:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:0A:1D:08:9E:C0:31:28:18:79:20:AD:E1:E1:F1:73:AE:90:C5
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/39312e3233322e3130332e302f32342d3234203d3e203135393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d6:c6:78:83:9e:c0:4f:30:f9:3d:49:73:94:00:a8:11:02:
03:a5:b6:c2:59:5c:ee:7f:10:1a:06:82:8e:61:a7:61:03:cd:
f6:1d:29:27:0b:59:9a:c0:f1:d2:de:69:ba:ff:7f:12:0f:f9:
aa:05:41:68:76:25:ed:64:9b:38:ff:09:d0:6e:db:43:3e:95:
bb:34:dd:6c:34:c6:22:08:5e:60:9b:4c:b0:53:84:cf:15:36:
fc:a0:f2:55:db:f4:b5:49:84:7d:ab:86:0d:9b:34:0f:0e:f1:
68:68:16:62:5c:14:68:d8:de:26:09:96:c3:2d:ed:02:dd:bb:
64:fc:19:d0:d6:59:6a:9e:d1:a2:45:44:e2:cf:5a:40:3d:ee:
df:d0:b0:66:85:5f:b5:de:55:ab:86:3a:9d:f3:49:0f:6d:46:
68:11:fb:cd:25:58:40:44:46:04:95:ac:da:83:10:25:d5:d7:
17:cc:58:9a:d7:c5:3a:9e:1f:fe:87:61:68:05:13:97:9d:51:
f1:e7:8e:4e:5c:da:ee:48:76:84:c9:df:f0:5d:78:ff:c6:3c:
e2:40:46:26:80:36:1b:8a:0d:7d:2e:7c:3a:2f:dc:12:ad:4a:
d7:13:aa:03:a3:71:c8:d6:4e:e8:f3:46:9e:aa:20:d9:04:80:
0d:c7:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:02 2026 by rpki-client