Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31362e302f32342d3234203d3e203239343035.roa
File: 3231372e37332e31362e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: LL3P7lvswxfOA25czv9v+WkF3C0D0KnWO5P9MOkColw=
Subject key identifier: 32:30:8D:52:0C:61:CC:44:DA:6D:93:8C:0A:0C:46:30:3B:4E:32:3A
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 3DEEA1430BD89770E5EAD22CA2494108413660C1
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31362e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:10 +0000
ROA not before: Tue 08 Sep 2026 07:15:10 +0000
ROA not after: Tue 07 Sep 2027 07:20:10 +0000
asID: 29405
IP address blocks: 217.73.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ee:a1:43:0b:d8:97:70:e5:ea:d2:2c:a2:49:41:08:41:36:60:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:10 2026 GMT
Not After : Sep 7 07:20:10 2027 GMT
Subject: CN=32308D520C61CC44DA6D938C0A0C46303B4E323A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:40:e7:56:0a:03:0e:19:ef:c1:13:8a:69:
a3:d9:a8:73:51:e3:5a:fe:64:3e:98:df:87:40:f6:
96:ca:29:3c:72:69:0e:94:d6:cc:cc:09:42:77:7a:
aa:f3:2c:5a:0a:80:cd:c8:f6:e1:50:12:b4:97:2e:
d0:f5:17:f7:59:99:e4:84:f2:ba:38:4f:4b:a8:5f:
a3:bc:2d:00:2a:02:58:10:45:9e:6b:c5:68:25:e3:
7b:6c:de:02:19:56:52:78:f9:8b:d1:f2:35:f2:e3:
c1:95:5a:37:bb:e2:82:ab:f0:aa:e9:bf:87:47:f1:
f0:2c:3e:f0:9e:3c:66:68:b8:51:7b:cd:f3:21:5a:
eb:e6:fd:1c:d3:64:ff:e2:10:b9:58:c7:2e:fd:3a:
6e:9d:2e:7a:89:4d:df:d7:a7:4a:f6:7d:4c:44:47:
dc:06:b2:ff:38:35:15:06:32:67:3f:8f:6d:59:ca:
9d:08:70:76:f5:d4:d8:8b:bd:02:20:3e:64:74:bb:
67:7f:94:6f:34:0c:25:1d:c9:af:52:a6:50:a6:af:
06:fb:cf:f5:57:35:ab:53:fa:62:d7:de:2d:88:90:
16:0e:68:de:e5:df:61:a1:34:a2:46:6f:c8:d3:55:
f2:2d:d8:c3:c1:09:b2:7b:81:74:91:33:27:45:33:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:30:8D:52:0C:61:CC:44:DA:6D:93:8C:0A:0C:46:30:3B:4E:32:3A
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/3231372e37332e31362e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.16.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f7:d9:4f:cf:2b:14:46:c3:ea:fe:22:c6:6d:75:35:92:1d:
f4:9a:1f:17:01:11:b1:d9:b0:6e:26:a4:3f:85:55:f0:46:a6:
04:1b:57:ca:22:ed:91:2a:f6:6c:70:a0:da:fd:8d:8d:be:4b:
4f:30:53:13:22:33:b9:f5:27:f9:f1:69:1e:76:e4:55:11:41:
ad:a6:db:b4:cd:f1:93:97:3b:1d:89:72:44:54:e4:c8:f8:51:
a9:b1:35:55:70:2f:87:35:0c:89:cd:94:6a:47:0b:5e:75:a0:
0d:13:a9:a9:ec:08:64:21:c9:bf:dd:82:d3:dd:91:f8:fe:15:
95:48:89:ec:11:bc:69:87:b8:f4:2f:35:c4:fa:66:c3:07:2d:
86:fc:f9:73:30:71:2d:9a:a4:7a:e9:d6:a4:2b:42:2e:92:45:
fc:56:da:32:e1:b7:86:8f:07:85:fd:76:74:f4:41:6b:06:d4:
21:00:7e:7c:67:8e:f9:4b:7c:9e:67:5c:4f:c2:01:7b:d6:31:
32:81:5a:3a:1f:fc:c6:de:2d:e6:29:ae:1c:55:20:6e:92:b1:
0f:5c:3e:98:82:43:8e:ab:17:64:61:02:88:38:35:9e:cc:32:
4d:7c:76:9f:cf:c1:d2:16:08:cb:16:49:c7:ee:fa:6b:93:6e:
cf:46:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:11 2026 by rpki-client