Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3138352e3137362e37322e302f32322d3234203d3e203239343035.roa
File: 3138352e3137362e37322e302f32322d3234203d3e203239343035.roa (raw, json)
Hash identifier: o4JrISAeOko/D99D7KNeLjlvTZIPY3wcIRzxxDIeJsA=
Subject key identifier: CA:41:0D:3F:80:84:ED:35:BA:1B:FC:1D:68:A0:DD:71:09:54:A1:7A
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 24BA14960E762FF3B5CB256DAD081F346DEEED27
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3138352e3137362e37322e302f32322d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:19:25 +0000
ROA not before: Tue 08 Sep 2026 07:14:25 +0000
ROA not after: Tue 07 Sep 2027 07:19:25 +0000
asID: 29405
IP address blocks: 185.176.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ba:14:96:0e:76:2f:f3:b5:cb:25:6d:ad:08:1f:34:6d:ee:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:14:25 2026 GMT
Not After : Sep 7 07:19:25 2027 GMT
Subject: CN=CA410D3F8084ED35BA1BFC1D68A0DD710954A17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:8c:f9:2a:24:2a:20:ff:9b:9e:b0:72:ec:
8d:18:01:45:00:4f:76:19:f7:c8:36:cb:ca:88:8e:
55:62:61:7e:87:30:46:da:14:29:1c:89:9b:7b:5f:
49:e2:ed:5f:24:79:42:85:2f:38:15:d2:2d:56:32:
61:e4:ff:d7:f3:57:0f:1c:79:79:f2:c8:63:66:da:
29:01:c3:da:ef:88:15:67:26:e3:c0:01:44:aa:1d:
1d:cc:ce:08:c4:1c:36:9a:d3:3c:a7:76:7b:d2:d6:
da:ff:74:1a:a8:7e:be:42:5d:a0:a4:7f:e9:bb:b0:
8e:80:f8:5c:fe:de:a1:64:41:e7:05:90:7d:a8:2b:
5d:92:8b:dc:6f:62:fa:5e:f0:4c:4c:a1:be:94:fe:
8c:57:91:99:9b:68:a1:09:fb:06:bd:02:cc:8f:da:
21:d1:01:cb:b7:9a:3c:7c:73:b4:25:52:f1:9c:25:
d3:0e:e2:93:b9:47:5f:70:11:96:97:66:4e:29:b7:
22:c6:a7:0c:23:3f:d5:f1:14:aa:ae:a3:40:2e:42:
ba:e8:a6:fc:4a:ea:54:2c:fa:8e:5e:00:32:e1:01:
0d:05:b2:e7:92:ee:ff:6e:d5:09:2e:6f:5b:72:83:
5a:5f:e4:6f:86:02:89:61:c6:bd:a5:e0:56:08:dc:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:0D:3F:80:84:ED:35:BA:1B:FC:1D:68:A0:DD:71:09:54:A1:7A
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3138352e3137362e37322e302f32322d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.72.0/22
Signature Algorithm: sha256WithRSAEncryption
37:cd:09:87:13:50:71:01:0a:ee:16:2c:7a:d1:48:4a:21:40:
c0:54:b8:a3:da:11:f2:78:68:47:2b:12:65:21:bd:2c:f6:ae:
66:52:7b:88:ab:4d:23:6c:92:f2:a2:f3:7f:92:bd:bc:03:39:
5b:78:49:da:7b:17:55:de:26:79:de:30:2c:76:c3:a2:2f:2d:
54:ae:ad:d1:a1:84:6a:1d:94:77:ff:e6:5d:ef:bb:80:b1:d1:
75:61:80:e6:58:b8:3b:40:82:7a:fd:03:b4:3d:94:cd:35:0a:
a2:4c:09:e4:5f:85:95:ae:c6:2d:b3:f7:96:cb:9e:d2:43:63:
ad:08:c1:43:c6:9e:10:4a:85:93:9e:49:d3:9b:03:38:0f:6b:
77:5d:2d:bc:01:c6:39:b4:68:18:a5:9d:a9:79:f7:ad:b7:38:
e2:d3:02:0a:ca:6f:26:66:44:d9:8b:eb:03:e1:e2:b5:d8:22:
91:7d:73:c8:d5:4c:ab:ff:66:bc:28:fe:b3:a2:8d:8d:3b:06:
f8:8b:09:33:ac:c7:22:1a:1c:05:0c:21:3e:12:d4:10:5c:de:
47:38:c7:95:12:09:df:d5:5a:e7:23:e4:2c:29:9e:27:ec:ef:
99:79:e7:32:72:21:2a:b6:5b:b8:0a:d3:fe:28:fd:a7:e4:1a:
4f:6e:18:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:08 2026 by rpki-client