Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3232382e302f32342d3234203d3e203432303035.roa
File: 39322e3234302e3232382e302f32342d3234203d3e203432303035.roa (raw, json)
Hash identifier: Nr549lUMnLpN1HEp8LJdbOoN53ZSlUaUINP6G5zL7j8=
Subject key identifier: 06:CA:1C:0E:95:1D:B7:75:4F:76:DB:2A:14:59:4F:C6:85:B9:CA:88
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 55716D46CDC92757DAB70D3F2343236BD9F01E50
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3232382e302f32342d3234203d3e203432303035.roa
Signing time: Tue 08 Sep 2026 07:20:33 +0000
ROA not before: Tue 08 Sep 2026 07:15:33 +0000
ROA not after: Tue 07 Sep 2027 07:20:33 +0000
asID: 42005
IP address blocks: 92.240.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:71:6d:46:cd:c9:27:57:da:b7:0d:3f:23:43:23:6b:d9:f0:1e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:33 2026 GMT
Not After : Sep 7 07:20:33 2027 GMT
Subject: CN=06CA1C0E951DB7754F76DB2A14594FC685B9CA88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:7b:fa:5e:57:9a:74:80:e9:a5:43:dc:14:
16:38:a6:6d:22:61:cf:fc:f0:ab:ba:51:9c:1d:4d:
21:d7:7a:f9:5e:61:10:10:71:e4:bc:e7:c5:13:47:
55:7b:58:a3:2e:f0:f3:45:36:c1:76:4a:cb:ab:bc:
ac:71:91:8f:cb:a6:2f:45:85:0d:5a:5a:c6:4a:7e:
23:95:02:c7:92:fa:c1:c1:82:cd:23:d0:2a:de:a6:
b0:80:36:ae:b4:e9:ba:8c:5a:4f:4f:1d:a5:39:cd:
0d:48:c9:c7:6f:9c:f9:31:95:76:a4:a8:d0:df:21:
f6:d4:bb:c2:77:0f:0f:92:41:3e:86:de:d2:46:ed:
95:08:3d:e5:d9:d4:24:36:9c:6d:f1:16:81:6b:7f:
93:2a:ab:17:35:87:cd:20:10:b8:e8:91:cd:cf:9c:
b4:a2:f3:ec:c5:f3:c8:0a:8d:c8:3a:9a:65:0c:0f:
a7:de:eb:a9:8b:da:4d:20:c0:08:3b:25:fe:2c:1c:
4d:5b:91:f2:50:23:02:14:b3:18:31:53:19:48:f8:
d6:86:9a:2a:f8:c5:f4:50:c6:cf:5c:7a:16:c8:bf:
aa:97:5f:34:6a:d2:9d:4a:c3:0c:d2:f8:f3:41:00:
ce:2a:57:fa:c2:21:4f:a9:85:c6:13:55:97:69:67:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CA:1C:0E:95:1D:B7:75:4F:76:DB:2A:14:59:4F:C6:85:B9:CA:88
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3232382e302f32342d3234203d3e203432303035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a3:e4:9f:c7:de:59:4c:25:fa:df:56:8c:23:dc:e2:7f:34:
42:b6:86:85:5d:13:02:d7:26:43:74:63:f1:91:8c:53:52:de:
db:3b:87:a9:e6:45:5d:b8:c3:d5:9b:87:aa:95:21:00:22:eb:
c0:d5:c8:c9:0e:30:41:99:91:9a:4b:79:1e:5d:dd:ee:e3:5b:
66:53:40:06:e0:d5:80:b6:73:db:15:2f:70:75:b5:63:aa:88:
68:29:7b:75:06:a9:90:db:e6:d3:f0:4b:a0:db:27:21:fd:52:
c5:39:5d:5c:e6:3e:13:fd:44:74:68:d3:4e:b1:99:b7:e8:91:
59:ba:00:29:87:fb:c4:42:13:e6:d3:e6:27:03:c9:f8:29:46:
a7:eb:6b:db:0f:ab:7c:47:ee:d7:37:d8:08:87:8b:3d:54:6e:
78:ae:43:02:13:16:bf:cc:78:02:74:7b:97:eb:2a:63:e3:56:
92:89:6a:95:13:e7:8d:73:ce:d7:bb:00:30:90:67:49:63:33:
7d:ba:87:aa:58:7b:a5:78:29:81:0d:30:4c:58:25:44:95:9c:
87:c7:3c:80:9c:52:ed:eb:b5:d3:f6:ef:b7:96:0c:c6:20:8b:
90:bb:5d:9e:f3:ff:72:8d:ed:e8:cd:fd:04:78:b5:6a:65:3e:
2a:de:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:33:09 2026 by rpki-client