Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233312e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3233312e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: 8jlFwwnDnJiuu6OA5YfbHOJwmtTLw6Nop9J7C0sLtPc=
Subject key identifier: 74:97:A2:47:17:9F:B4:F8:E5:60:F1:50:3E:94:19:E0:BE:F7:6C:5F
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 7715273F115B909B70B82414F1BD69AA05A2F6C5
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233312e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:22 +0000
ROA not before: Tue 08 Sep 2026 07:15:22 +0000
ROA not after: Tue 07 Sep 2027 07:20:22 +0000
asID: 29405
IP address blocks: 92.240.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:15:27:3f:11:5b:90:9b:70:b8:24:14:f1:bd:69:aa:05:a2:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:22 2026 GMT
Not After : Sep 7 07:20:22 2027 GMT
Subject: CN=7497A247179FB4F8E560F1503E9419E0BEF76C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:85:f2:7a:e9:20:fe:b8:0e:9d:9f:79:7e:
06:a3:d8:ce:12:de:b6:28:cc:40:d6:82:ce:6b:f8:
9b:60:83:dd:30:81:d9:5d:d7:03:70:17:6d:9a:f2:
3a:c3:12:74:02:e6:e0:ac:5c:82:97:9a:fd:16:54:
f1:d5:0f:87:c8:0d:bb:5d:b6:77:e9:4e:40:1a:de:
53:69:6b:16:59:c4:a2:2d:f8:57:44:73:87:03:36:
2a:7a:fc:2d:c9:ac:1f:b2:b5:ba:17:07:f6:4d:d2:
18:17:bf:6b:5b:2b:94:d1:e4:34:d9:0c:3e:9c:be:
d7:eb:49:32:99:e6:b4:e7:e8:8f:ae:a9:4e:52:b1:
cd:4f:8c:ea:f7:e7:e5:e1:6a:48:5c:b7:03:1d:18:
14:21:c8:9c:f7:ea:60:a0:5a:b9:c1:1b:00:be:88:
aa:fb:d5:ae:0f:e6:a3:46:d5:58:48:36:6d:53:89:
17:ed:4f:d1:ab:18:8e:43:c8:1a:92:5b:e2:ed:ca:
c0:40:e0:3c:6d:25:be:3f:5e:da:2c:ee:00:2b:6f:
0a:4e:92:9d:5d:01:4d:63:8e:76:74:64:e9:41:39:
96:44:76:31:24:db:f3:39:56:0f:36:a6:ff:8e:01:
34:bf:c5:89:16:b1:89:e3:74:65:20:fd:7c:f7:cc:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:A2:47:17:9F:B4:F8:E5:60:F1:50:3E:94:19:E0:BE:F7:6C:5F
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233312e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.231.0/24
Signature Algorithm: sha256WithRSAEncryption
94:72:89:c1:21:4b:02:7c:85:47:01:05:8a:41:21:44:ee:c3:
f3:3d:32:75:d1:9f:d1:48:49:f5:22:de:b2:e4:de:c6:c2:45:
90:7d:24:86:6d:88:a3:61:f7:41:97:b6:bc:f6:02:af:8a:88:
a7:ab:9e:fe:d1:5c:0f:e1:2e:80:5b:d1:82:e0:55:ec:35:bc:
b6:4e:f7:c1:26:e0:64:6f:67:85:a0:40:05:45:30:a1:af:ed:
26:f5:b7:d1:03:3c:83:3d:b5:c6:5f:76:05:36:0a:bf:48:bc:
32:4a:af:d1:f4:82:29:ba:80:52:67:3f:95:a7:7a:0f:fa:52:
1e:82:b2:60:9c:b1:15:a8:ef:61:9e:db:84:00:78:ce:0e:8e:
43:26:19:c5:05:78:2f:12:85:be:75:de:af:22:bb:87:36:f2:
16:71:68:d0:91:73:89:fb:8b:6e:92:e9:56:dc:f6:b2:29:58:
e8:d7:c1:80:d3:d9:dc:ba:9d:3c:a4:2b:c8:21:70:a6:59:66:
d2:62:d9:3f:26:ce:dc:f5:5c:ed:36:27:d9:8c:13:c8:60:81:
27:30:38:4e:24:6e:9d:8b:63:d9:9f:46:48:5d:01:e2:f4:40:
74:4d:44:a8:ae:d2:4d:da:ce:cd:67:3b:a2:2d:38:93:31:07:
d6:92:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:54 2026 by rpki-client