Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32342d3234203d3e203536363535.roa
File: 322e35392e36322e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: 4EVwlY91Vkuy79loMlCVFMeATW2Zd/Dn57Gy1wS/GpY=
Subject key identifier: 6E:49:22:99:74:6A:2E:0F:FF:AF:16:06:3E:EB:DC:F5:CC:DD:4C:05
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 03FB6A975940E765C292A38E1E36DFF377E6A31C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32342d3234203d3e203536363535.roa
Signing time: Fri 23 Oct 2026 12:37:01 +0000
ROA not before: Fri 23 Oct 2026 12:32:01 +0000
ROA not after: Fri 22 Oct 2027 12:37:01 +0000
asID: 56655
IP address blocks: 2.59.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:fb:6a:97:59:40:e7:65:c2:92:a3:8e:1e:36:df:f3:77:e6:a3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 23 12:32:01 2026 GMT
Not After : Oct 22 12:37:01 2027 GMT
Subject: CN=6E492299746A2E0FFFAF16063EEBDCF5CCDD4C05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:b4:d4:42:43:a2:10:96:62:70:a9:6c:5f:
09:37:ae:ac:4c:8c:c9:3f:53:d1:83:31:77:3d:79:
25:bb:d5:70:6d:95:2d:93:57:89:09:44:e3:9d:b1:
4f:06:08:b5:d9:1c:10:97:e4:db:75:a7:d2:49:d2:
de:0e:bc:74:b9:9c:52:c9:17:5f:37:d4:ff:50:9e:
63:2d:4a:e9:b5:63:d3:20:81:a6:cf:ad:bb:e8:24:
23:56:36:62:23:13:eb:d4:21:25:57:62:3f:1f:c1:
ea:e2:7a:71:55:b6:71:08:2a:36:84:ab:56:2e:d8:
36:35:14:98:98:fc:9b:d3:a6:3b:a4:1e:70:f6:5d:
0e:8e:eb:54:b7:79:58:6d:d1:46:c5:93:43:02:50:
9e:2d:e7:79:04:01:24:03:f3:6a:99:b5:a1:a1:79:
5f:a4:60:a3:de:24:23:41:48:a9:36:8a:06:c1:48:
d9:9a:fe:bf:f3:e3:d1:f9:1d:f1:2e:fc:f4:5a:71:
12:dd:41:8b:8d:83:51:14:bc:3d:5b:00:c5:c4:f1:
d5:cb:82:01:db:f3:02:19:81:16:91:70:a2:39:34:
b3:66:d9:8f:15:77:4e:eb:ed:a0:b1:f1:44:73:06:
1f:cd:ef:48:97:31:95:ec:65:ac:7f:81:31:63:21:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:49:22:99:74:6A:2E:0F:FF:AF:16:06:3E:EB:DC:F5:CC:DD:4C:05
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:04:ac:ff:c8:05:f2:9b:15:ab:02:e6:d6:f2:c3:d7:8b:9c:
e9:cc:f9:69:22:e7:01:cd:a7:3d:eb:af:5d:24:53:8e:e8:53:
dc:e4:09:05:d3:ff:0a:2c:9c:54:ca:95:9d:aa:60:63:12:d5:
6f:c9:0d:5b:43:01:7e:63:dc:90:2c:42:22:c0:a7:df:77:97:
e6:a5:6a:23:7a:da:27:72:19:77:52:65:68:fa:97:bf:c6:e7:
5b:74:11:a4:a7:ce:05:39:e3:c3:0c:a0:08:9d:f4:b6:b9:54:
f1:80:c9:d3:4f:de:f8:f7:6c:2d:c2:8b:6f:06:b9:3f:ec:a5:
55:38:2a:3e:c6:51:f1:37:34:90:30:d9:85:b8:8a:8d:2b:fb:
2a:37:f3:fa:9d:22:d6:a1:67:2a:82:fe:92:e4:ea:68:93:39:
46:d1:8c:03:63:c6:02:95:6b:1c:98:a5:6a:ad:b7:75:02:4a:
c5:8d:1b:03:af:ef:cd:47:3f:c8:da:66:ea:dc:2f:16:26:38:
2b:39:88:76:82:94:f1:85:f5:90:4a:83:3a:5e:13:5f:9e:c9:
75:c6:03:08:06:9d:b9:bd:a5:5d:b4:8c:e7:5a:3b:01:7e:8c:
be:63:9b:bc:a5:42:71:7e:05:fb:66:bb:36:c1:7d:be:4b:c9:
88:69:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:59 2026 by rpki-client