Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3232382e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3232382e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: LxIsT0Z72nxO3Y284vPXgs9ScSm6Vj2A4oz7LMKnhVo=
Subject key identifier: 33:73:37:F6:27:A1:A5:D4:98:0D:2B:BE:62:FB:B6:DC:C7:CC:16:7F
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 5A94AC2575A00E8A35BDEEB33B55D684E74E2619
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3232382e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:28 +0000
ROA not before: Tue 08 Sep 2026 07:15:28 +0000
ROA not after: Tue 07 Sep 2027 07:20:28 +0000
asID: 29405
IP address blocks: 92.240.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:94:ac:25:75:a0:0e:8a:35:bd:ee:b3:3b:55:d6:84:e7:4e:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:28 2026 GMT
Not After : Sep 7 07:20:28 2027 GMT
Subject: CN=337337F627A1A5D4980D2BBE62FBB6DCC7CC167F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:4d:42:a7:58:8a:5f:77:e7:1d:48:f6:f3:
94:38:98:a0:74:33:fc:79:fc:04:54:05:ef:1a:cd:
88:51:03:44:66:4d:8b:64:c0:bd:45:3c:10:f7:fb:
18:1c:8f:65:00:eb:65:03:f7:fa:f6:1f:f8:83:5e:
ba:ad:49:0d:40:18:24:79:2a:79:1d:72:3c:e8:f1:
7e:00:a4:cc:81:ca:47:b8:27:7a:4c:55:51:cc:ef:
7a:65:c5:5a:ed:29:5b:0c:5f:8e:0f:64:cd:a0:8e:
38:c3:57:c4:60:3a:83:73:87:80:42:f7:1e:37:be:
7c:fd:7f:89:63:f8:2d:9c:ec:6b:50:52:7c:66:23:
dd:af:59:a3:e0:e0:d7:9a:7c:05:bd:24:30:11:ba:
f9:e5:dd:f6:54:98:49:09:85:ba:4a:b9:db:49:3f:
4d:a1:c7:1c:60:93:34:ae:81:6a:12:d0:65:a0:de:
9d:f1:92:ae:55:23:03:50:61:8e:e9:8b:ba:81:cb:
e8:b2:1a:58:af:25:25:68:ad:2f:cb:09:05:6c:bf:
27:9d:0a:ab:9e:bf:8e:7f:d1:9d:3c:fd:8f:d3:8f:
ad:80:04:6b:ef:89:a9:99:93:0b:22:d1:18:52:b3:
3a:7d:b9:b1:06:94:9b:93:0d:6d:af:1f:36:7e:01:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:73:37:F6:27:A1:A5:D4:98:0D:2B:BE:62:FB:B6:DC:C7:CC:16:7F
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3232382e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.228.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2c:61:19:93:33:21:0d:6a:6b:34:1a:a5:a8:07:70:27:fe:
d3:82:09:06:0a:e7:16:bd:69:46:7f:1e:5c:b3:7a:5a:5c:70:
7f:d9:9e:1c:8b:bf:12:d6:6a:64:94:c5:ed:cf:75:2b:f9:b6:
0e:53:06:2b:00:be:98:78:9a:0f:a7:a8:0a:4e:73:6e:13:cb:
eb:a3:01:dd:7d:e6:ae:c5:35:cb:e7:98:f3:40:79:23:b1:63:
f5:69:0e:a9:1c:00:b7:ce:a5:2d:2f:8f:ff:a5:95:d5:77:83:
48:39:01:79:e9:f7:82:48:1e:70:7e:a6:8c:b9:04:ca:0c:0f:
4b:ae:99:e1:8c:78:e8:ec:cf:2e:b7:b4:25:dc:21:62:19:f4:
86:62:34:3f:2e:cf:e6:3e:e3:11:c0:90:5f:9e:eb:a9:ed:3f:
82:9e:d8:1a:f8:38:a2:09:f9:dd:13:ff:09:ef:ce:09:d2:fd:
6b:7a:e3:0a:67:9b:6f:51:db:8c:48:35:d9:51:6d:07:47:0a:
2b:47:7c:d6:5b:ea:cb:b8:e6:d9:c3:f1:0e:6f:40:35:85:9d:
a2:60:57:e3:27:42:35:9a:e7:a0:82:14:09:da:f6:f7:2b:13:
11:91:6f:6d:c6:20:6d:23:9a:db:07:e8:f3:d8:dd:76:50:9d:
18:9d:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:07 2026 by rpki-client