Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233352e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3233352e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: EGBbBNCVgZA7RRgb1ikg8DLO4hYxR8hBfm0EuF5QV+s=
Subject key identifier: 21:D7:4D:C9:65:B6:82:AA:3C:1B:69:DB:20:1A:66:B1:48:5A:D7:09
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 735D9E9B6BB032A977C31E4B5B4F55FDC9B8AA72
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233352e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:18 +0000
ROA not before: Tue 08 Sep 2026 07:15:18 +0000
ROA not after: Tue 07 Sep 2027 07:20:18 +0000
asID: 29405
IP address blocks: 92.240.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5d:9e:9b:6b:b0:32:a9:77:c3:1e:4b:5b:4f:55:fd:c9:b8:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:18 2026 GMT
Not After : Sep 7 07:20:18 2027 GMT
Subject: CN=21D74DC965B682AA3C1B69DB201A66B1485AD709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:f2:d1:c6:3a:e1:28:f1:c4:bd:bc:5e:e5:
b8:4f:43:4d:59:d6:44:e4:fe:60:92:af:29:d1:87:
0a:38:24:6d:a7:54:b4:37:89:fa:7c:2c:72:8a:f6:
0d:e2:e7:6a:9c:1f:77:6d:e4:c1:06:2b:e7:12:71:
a1:c4:5b:a3:46:e9:84:8f:1b:2d:6e:c4:76:3c:46:
7e:ff:21:c0:75:54:d4:ba:32:5c:6b:72:08:c9:11:
28:ad:bd:67:51:f5:69:ef:c1:11:a5:8e:9c:bf:d4:
3d:3e:94:ae:f9:41:67:52:30:5f:b2:ef:06:b3:ec:
24:69:d3:65:89:23:37:79:33:b8:33:a9:49:fb:fc:
ef:00:3e:c9:57:a8:02:23:d2:15:4f:84:8d:91:f2:
7e:46:c8:4e:4e:50:0a:35:6d:84:74:08:0f:4c:56:
1c:1c:84:ba:fd:d4:90:c1:6e:e0:da:8f:c7:8d:2e:
4f:bc:f0:44:dc:80:13:9f:d0:45:8b:ce:8c:bd:35:
b0:b4:63:b7:16:2d:a9:d2:3a:6c:64:d7:fe:07:73:
d2:11:8a:81:7e:85:4c:af:63:54:0f:33:53:8f:79:
9d:9c:b7:3b:ef:f1:39:9e:8f:cd:02:fb:0f:34:d8:
43:cf:1d:20:cd:7b:8f:2b:ed:1c:92:fe:1c:8a:39:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:4D:C9:65:B6:82:AA:3C:1B:69:DB:20:1A:66:B1:48:5A:D7:09
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233352e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.235.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:05:47:cf:44:94:4d:4e:11:48:5a:33:7d:ef:65:a4:11:ce:
68:af:27:b8:fc:2c:93:81:3a:05:29:9f:86:3c:fc:38:bd:30:
bf:80:dd:f2:ba:89:34:94:ce:e6:e4:aa:1f:2f:a5:3e:04:40:
10:b3:d3:8f:73:69:b0:71:fa:5b:b5:1b:46:83:57:71:fd:b7:
9f:f7:4d:82:12:41:9e:c9:ee:b0:65:d7:48:cd:08:ef:20:ff:
f9:33:9f:7d:f0:2e:3f:71:cb:81:ac:01:05:a9:1b:3c:89:84:
00:db:8c:4e:c8:8f:f1:d5:e8:63:8c:c3:32:0d:8c:a1:a5:15:
dd:2a:a9:26:f2:86:3d:dc:ed:56:ad:66:b8:29:db:bb:65:23:
79:23:8e:ec:3f:f4:e4:85:74:f7:06:43:af:2e:bf:42:0d:2d:
69:6b:54:71:cb:b9:6c:cd:0e:ff:e1:f2:39:03:51:c2:e1:45:
5b:e8:18:97:bf:28:e2:55:22:fb:d9:f5:c2:f5:30:3b:d9:b4:
a4:ee:8f:26:87:21:c9:62:2a:e4:d2:95:f3:b7:53:b9:a2:3f:
19:3f:33:0f:69:c1:aa:a8:fd:18:0d:6a:e9:b2:58:a3:38:e6:
d6:04:e4:73:17:3e:07:ad:2c:08:bd:75:af:13:37:56:af:c5:
b7:83:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:07 2026 by rpki-client