Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31362e302f32302d3234203d3e203239343035.roa
File: 3231372e37332e31362e302f32302d3234203d3e203239343035.roa (raw, json)
Hash identifier: iWR6okAvKqyu5oJU5+aD9MzJfwy1JD9sl+Akz3xHcFU=
Subject key identifier: 3D:68:D7:C4:FC:7D:C7:A4:B9:14:A8:1B:BC:07:4D:0F:9A:66:C9:02
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 7DD16E973288C6167CDB6659619AE0053407A79D
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31362e302f32302d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:13 +0000
ROA not before: Tue 08 Sep 2026 07:15:13 +0000
ROA not after: Tue 07 Sep 2027 07:20:13 +0000
asID: 29405
IP address blocks: 217.73.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d1:6e:97:32:88:c6:16:7c:db:66:59:61:9a:e0:05:34:07:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:13 2026 GMT
Not After : Sep 7 07:20:13 2027 GMT
Subject: CN=3D68D7C4FC7DC7A4B914A81BBC074D0F9A66C902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:38:b1:d5:06:fb:86:e4:e5:60:73:5d:36:
9d:a8:39:bb:76:54:f7:6f:84:2b:10:2c:c2:9e:aa:
ac:db:09:51:d0:6e:bb:fc:9f:d8:de:8c:98:85:ea:
2e:5f:f6:10:67:3b:ba:57:2d:d9:c7:2a:12:9f:e5:
f3:57:27:75:b6:97:f6:b8:47:a7:4b:98:73:e7:aa:
fa:5b:27:26:16:8b:01:e1:65:c3:87:e6:53:77:b1:
4e:8f:f9:dc:1c:c8:eb:fb:1a:ce:29:3e:87:41:ad:
25:9b:49:db:21:1d:b0:47:1a:96:05:75:9e:9b:d0:
df:14:a1:df:21:aa:e1:90:8f:0d:2d:5c:29:4d:10:
f8:e1:51:b5:6b:6f:a0:9d:53:d8:48:45:3a:4d:51:
16:89:e9:d5:6b:90:44:35:71:4b:63:6c:b5:60:bb:
6a:4e:c2:67:0e:7d:f0:78:39:fd:bc:90:52:78:93:
a3:e4:58:10:9c:e1:bf:59:de:22:ed:15:dc:ed:e4:
5b:9b:dd:08:5c:cb:66:e9:84:c4:3a:2f:80:aa:b9:
1f:8d:14:d7:8d:2b:b2:fc:36:8a:ed:e4:5f:27:b6:
ee:f3:c4:13:d9:45:fc:e5:28:c2:2e:29:d0:14:39:
78:24:4d:a0:1e:25:7c:6e:00:f9:03:12:31:fc:1d:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:68:D7:C4:FC:7D:C7:A4:B9:14:A8:1B:BC:07:4D:0F:9A:66:C9:02
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31362e302f32302d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.16.0/20
Signature Algorithm: sha256WithRSAEncryption
48:4a:58:47:32:77:76:4b:6f:7c:43:53:a5:f0:40:a4:fc:b2:
35:79:94:f8:70:ee:c8:08:8f:48:c7:57:fb:04:50:35:ba:2b:
ec:f6:30:4c:94:53:16:e6:bd:c8:bf:8b:cd:5c:2d:ee:98:f5:
93:70:e9:ba:8d:9b:a5:08:90:40:bb:78:6d:ee:24:69:a7:a3:
eb:d7:08:a1:cb:18:73:0f:d1:cc:2a:26:02:3d:5d:94:3c:1d:
fc:03:c0:b6:66:47:24:c1:e1:33:d4:d5:86:67:0a:aa:80:bc:
a8:c5:01:0f:88:20:8d:fd:a9:7e:d3:b3:8f:f0:b8:64:87:e7:
9b:fa:69:ff:c2:21:25:c4:0a:53:2d:63:12:5c:a3:d8:ef:01:
57:6c:83:dd:48:79:d7:9e:4d:90:a0:d6:64:e9:6b:66:e8:d6:
87:6f:60:5e:d1:c8:b0:ff:ea:a3:70:27:ea:9e:e6:db:d7:df:
8c:70:51:a5:c5:17:1c:ea:a6:7a:15:3d:48:80:8a:9f:ef:6e:
22:18:7d:88:71:f7:74:7c:92:2c:b0:74:63:e5:c5:29:68:e8:
88:61:b8:ef:0d:68:47:7f:80:9e:f2:5e:02:88:00:05:a9:d6:
be:fc:bf:20:e6:86:b3:1b:8e:5b:50:a6:af:52:98:e5:9b:0d:
95:f1:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:57 2026 by rpki-client