Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233342e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3233342e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: ZbrO3s1/sE3VB3YBwEq8N4l7+Zh6Aj9FReUoQ3Dbpi0=
Subject key identifier: 3E:DF:BF:0C:7D:AA:E0:F2:42:40:84:6B:E7:D1:7A:72:05:3C:E6:19
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 090BFB9F22F69E78472D238DCED8D362AB837B00
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233342e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:23 +0000
ROA not before: Tue 08 Sep 2026 07:15:23 +0000
ROA not after: Tue 07 Sep 2027 07:20:23 +0000
asID: 29405
IP address blocks: 92.240.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0b:fb:9f:22:f6:9e:78:47:2d:23:8d:ce:d8:d3:62:ab:83:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:23 2026 GMT
Not After : Sep 7 07:20:23 2027 GMT
Subject: CN=3EDFBF0C7DAAE0F24240846BE7D17A72053CE619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:bb:6d:23:29:32:60:38:b0:62:3c:90:fb:
f2:be:fe:19:40:41:0f:e4:f6:49:46:92:ea:c9:5c:
c4:24:72:34:30:b1:59:66:70:16:88:fd:3d:7e:f4:
a6:ff:d0:f9:45:7f:48:31:cf:79:8e:ed:4b:6d:bc:
e9:22:7a:e8:f5:10:44:f1:e2:15:4d:31:b1:90:02:
22:10:9e:5e:80:5a:96:67:57:1c:b4:ae:0e:df:9c:
22:dc:9e:d7:88:3a:2b:52:94:26:10:1f:46:83:9a:
f4:06:76:df:2f:36:87:1a:69:d1:50:56:b8:9e:dc:
fc:c6:7d:80:86:7f:51:5d:7e:bc:ba:cc:c3:23:3b:
c2:be:a1:4d:44:b0:0d:24:12:2f:b3:df:9f:a6:bc:
bd:59:aa:0f:1c:a3:5e:1b:50:3b:17:f2:03:93:bd:
e6:5b:44:5f:05:be:85:4f:0b:68:7b:dd:3e:47:99:
dd:4a:3d:45:70:b7:63:81:23:ec:59:a2:57:df:5e:
23:10:a3:3f:6d:b8:64:cd:6e:ad:54:10:85:b3:37:
ab:fc:66:47:5d:5f:e5:e5:d9:35:63:b3:b4:7e:21:
47:22:6d:79:cc:12:1b:a8:68:0f:1c:00:eb:18:35:
6b:dd:8d:a6:b9:0a:da:ad:cc:3e:d5:fc:50:27:57:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:BF:0C:7D:AA:E0:F2:42:40:84:6B:E7:D1:7A:72:05:3C:E6:19
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233342e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.234.0/24
Signature Algorithm: sha256WithRSAEncryption
25:63:d4:6d:d9:a8:b3:c8:61:3d:03:e1:1e:e1:48:82:4d:6d:
1b:93:bc:98:2e:de:a0:48:05:ba:6e:a4:6f:e7:59:e9:63:c7:
39:af:b9:16:19:14:e5:d3:77:fc:b4:92:7c:d9:af:5d:f6:6f:
7e:87:86:d4:80:dd:53:73:0a:99:df:ad:68:48:f1:66:42:d6:
f1:5c:93:7a:cb:f0:a5:76:1c:fc:f4:52:83:f1:19:85:a1:96:
53:ef:7e:d6:0d:a6:b5:e0:ee:89:ef:ad:1b:20:06:9e:45:3c:
a2:69:40:cf:c1:43:37:79:1f:86:d0:1a:a7:6b:fd:bd:9b:ba:
63:d2:96:17:90:79:3d:f5:9a:71:9d:a4:3d:6f:4f:c0:d8:bf:
48:7c:ce:97:ca:76:90:76:c7:55:df:cd:67:4d:3c:e4:93:35:
b4:3e:d3:13:e0:f1:82:b6:d2:23:64:8d:58:cd:f8:7f:fc:2d:
90:52:ce:87:f3:e7:28:c2:b0:a8:e1:79:7a:10:c4:9d:db:35:
0a:fa:16:9e:09:b1:4a:96:df:76:7c:0c:12:19:64:bf:25:c5:
55:9c:1a:cd:08:ea:03:be:b1:ec:12:5e:76:4f:9b:e7:2d:5f:
96:c6:e6:64:75:1e:38:a7:04:ad:c6:f6:ce:e3:be:97:5d:d1:
b9:fa:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:55 2026 by rpki-client