Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36332e302f32342d3234203d3e203536363535.roa
File: 322e35392e36332e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier: nG8puCpSNLbVRezQJ6NEb6pqiujF9Ii465n8Wl9qCgE=
Subject key identifier: 81:AF:9B:28:0A:5A:A6:FE:0A:40:ED:92:A5:84:E8:44:29:3E:50:B3
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4BF08190045E64EFA6D5AF4C0A6955D2CCA630FE
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36332e302f32342d3234203d3e203536363535.roa
Signing time: Fri 23 Oct 2026 12:37:02 +0000
ROA not before: Fri 23 Oct 2026 12:32:02 +0000
ROA not after: Fri 22 Oct 2027 12:37:02 +0000
asID: 56655
IP address blocks: 2.59.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f0:81:90:04:5e:64:ef:a6:d5:af:4c:0a:69:55:d2:cc:a6:30:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 23 12:32:02 2026 GMT
Not After : Oct 22 12:37:02 2027 GMT
Subject: CN=81AF9B280A5AA6FE0A40ED92A584E844293E50B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:81:77:05:91:31:c0:9e:e0:9f:72:8b:a8:
16:87:aa:c1:55:27:cc:71:0a:03:85:af:a8:40:4f:
4f:98:53:3b:e5:94:66:a3:f5:9b:7b:d5:3c:7c:55:
f2:94:e1:da:75:7d:0c:5d:81:96:b2:6b:7d:f2:55:
ca:98:2d:dc:9a:6e:97:a3:66:cf:7c:1b:4e:02:6b:
f7:95:fa:51:c7:17:3e:e8:55:42:0a:f0:2e:3e:3d:
48:43:3f:2d:e8:b5:39:bd:55:38:1e:21:be:d6:8e:
c8:1c:67:69:d1:d6:28:fb:5b:22:28:82:25:83:d3:
b0:3e:f9:fa:35:f2:c6:e0:24:7f:bc:a1:be:75:8e:
d5:62:a9:84:4f:18:c1:1d:97:77:65:3b:24:e0:0f:
cb:a5:5e:35:3b:80:2b:f0:07:d3:83:c1:98:aa:23:
4d:06:ad:ad:32:30:f8:39:12:b7:7f:0e:de:8e:42:
06:50:0c:9f:3d:64:58:b1:53:d6:fd:ed:08:55:0f:
45:98:04:22:e6:3e:4f:2d:26:bf:a9:d6:b3:08:06:
7f:4c:8a:0f:13:fe:55:1f:20:40:8f:cd:5e:05:a8:
d0:78:9e:ee:3f:ba:61:31:dc:2f:ef:6c:3a:6e:20:
b0:5d:40:64:7a:8c:11:74:56:83:be:30:2b:cb:2e:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AF:9B:28:0A:5A:A6:FE:0A:40:ED:92:A5:84:E8:44:29:3E:50:B3
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36332e302f32342d3234203d3e203536363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.63.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ce:51:1e:6f:54:9a:76:ad:d6:ec:04:06:47:a9:0a:44:db:
78:9a:23:95:c3:82:9f:4e:ad:8b:4a:5f:ef:20:50:d5:40:4f:
a5:c6:6a:a3:af:47:9c:b2:a8:62:8a:0a:d8:ec:e4:e2:67:f9:
ac:85:8b:e8:f4:b3:dd:3e:e9:22:a7:97:7d:2f:9f:dc:35:4e:
9c:25:e8:38:93:cb:52:0d:bb:f8:03:4b:57:37:8b:8e:8e:c8:
b6:d2:ea:36:36:3c:df:e8:d8:d5:7f:71:59:c0:c5:49:75:f1:
b0:7e:71:73:87:4e:cd:27:f4:08:29:fc:d9:61:ca:17:cd:4e:
4e:d3:33:42:53:e9:81:ee:47:71:a5:b4:ed:30:71:80:6e:df:
49:b5:84:59:e5:df:34:2b:37:df:85:77:29:02:9b:ec:bb:3f:
b6:e0:90:23:a1:9d:0f:95:77:a1:03:d1:fb:3b:b3:e9:bf:e5:
06:26:a8:55:98:73:9e:bb:56:9a:c3:5b:78:8f:d2:e1:49:54:
f0:0d:e7:bc:6b:66:6e:95:fb:57:52:af:22:6b:08:c0:72:ab:
06:b8:4a:02:8a:6e:69:d0:52:52:20:0f:f3:2e:66:0a:02:1e:
ff:47:05:e6:25:e4:cc:71:98:9c:0d:b2:10:9d:1b:6f:c9:c0:
5d:8e:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:56 2026 by rpki-client