Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233302e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3233302e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: fDWL1gciinjC0IXRqT2Q3PtDEb5nlNuoXJzFK/hcNV4=
Subject key identifier: E5:08:8D:12:02:77:60:D6:BA:53:36:81:A4:15:9B:71:5E:4F:8D:55
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 760E827712643DCAF6DDA5CBF2863348DF53FC06
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233302e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:21 +0000
ROA not before: Tue 08 Sep 2026 07:15:21 +0000
ROA not after: Tue 07 Sep 2027 07:20:21 +0000
asID: 29405
IP address blocks: 92.240.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0e:82:77:12:64:3d:ca:f6:dd:a5:cb:f2:86:33:48:df:53:fc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:21 2026 GMT
Not After : Sep 7 07:20:21 2027 GMT
Subject: CN=E5088D12027760D6BA533681A4159B715E4F8D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:a3:d8:f8:18:45:a9:1f:2e:7e:27:bd:ef:
ca:bf:01:55:a5:64:19:75:b8:07:9b:42:ef:ce:ca:
43:ca:f4:10:d8:b0:21:7a:04:1e:63:a5:ab:86:a9:
9b:70:ed:db:c9:00:80:30:2d:ae:59:f3:fc:2c:b0:
21:48:83:e3:17:09:99:84:ff:3a:45:39:bc:ff:aa:
1f:7f:f4:c9:56:6b:db:f9:b8:5d:4b:60:2e:76:5d:
58:8f:6a:bb:c3:48:08:90:f7:04:58:e8:b0:1b:a9:
e4:36:47:0f:61:f2:7a:c1:bd:0f:b0:3d:6e:b6:e3:
af:af:8d:a9:ca:0e:fd:b2:43:0c:9b:85:83:24:f6:
f8:d3:36:c4:fa:c5:dc:e4:36:00:bb:e5:6d:ba:3a:
79:17:c8:8a:76:43:28:27:4c:63:59:c2:cd:ac:f6:
d6:e2:1c:e1:0f:99:18:3a:ba:98:ce:a7:f6:97:4e:
8e:15:db:1f:af:b8:bb:92:e1:8f:98:a2:ea:9b:34:
b5:94:a2:7d:84:37:14:a2:42:c9:04:d4:06:47:80:
31:85:1e:11:64:01:2b:4d:c6:69:76:05:70:45:ef:
e2:c5:ee:f8:aa:b9:35:0f:30:26:ff:bb:a3:fb:83:
f1:ef:ef:a0:ae:d1:de:1e:7e:1d:8a:04:2e:56:db:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:08:8D:12:02:77:60:D6:BA:53:36:81:A4:15:9B:71:5E:4F:8D:55
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233302e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.230.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a1:f0:d1:96:3b:38:92:2e:79:45:a2:ac:93:b2:b9:d7:91:
6a:06:d9:3d:3e:8d:c6:24:76:86:7b:2b:04:0f:7f:51:7b:7a:
4a:56:1a:a1:b0:64:c4:d5:78:44:de:d3:80:56:4d:f8:4a:a9:
32:f1:7f:c3:8d:a0:6f:27:5b:d6:2a:61:bc:3a:56:ce:09:11:
d9:71:9f:03:c0:b1:79:1d:37:c7:17:90:25:af:65:41:39:b2:
f5:55:26:de:fb:ea:43:7f:f1:b6:c2:2b:fe:63:bb:c7:80:79:
0d:ff:0b:19:e6:14:f9:59:37:d4:77:32:0b:46:a1:00:09:da:
0d:25:a8:28:18:d8:60:10:ca:7d:d8:58:25:fe:0a:e3:f0:88:
c9:2d:25:81:3d:9e:91:10:90:cf:3f:d7:80:20:ba:06:d4:e9:
31:f6:e7:8d:a4:ce:58:45:c5:2f:e0:30:8c:6b:fd:90:33:df:
a5:76:04:15:84:ac:e2:06:fd:12:26:68:d8:ee:c9:56:2f:be:
90:a5:21:73:31:09:e0:08:6f:0c:0a:26:c8:69:23:3c:67:40:
04:d8:02:2c:63:0c:38:45:98:9c:f5:92:94:9c:2b:ff:6e:dd:
3d:cd:70:93:38:53:69:53:cc:2d:b0:82:9e:89:d8:8e:f2:60:
c7:d8:50:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:57 2026 by rpki-client