Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233362e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3233362e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: 5oyqw+KhylpUHglogsy7/I4LpBle8Q3qWBoa/BrHLEw=
Subject key identifier: F8:30:03:5B:FF:86:4D:AD:B2:AC:5F:6B:23:D9:7D:DD:F1:69:2B:B6
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 10FB388BE49DFD1FFB35E42C095C62C1F52F6236
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233362e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:19 +0000
ROA not before: Tue 08 Sep 2026 07:15:19 +0000
ROA not after: Tue 07 Sep 2027 07:20:19 +0000
asID: 29405
IP address blocks: 92.240.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:fb:38:8b:e4:9d:fd:1f:fb:35:e4:2c:09:5c:62:c1:f5:2f:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:19 2026 GMT
Not After : Sep 7 07:20:19 2027 GMT
Subject: CN=F830035BFF864DADB2AC5F6B23D97DDDF1692BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c3:96:a9:29:43:e5:53:4a:c8:e6:c3:21:aa:
c0:5f:c8:8d:fd:92:e7:b8:ea:8d:58:7d:07:86:47:
ad:f9:fc:af:1f:5d:7e:4f:7e:87:79:5d:c6:50:0f:
bb:2f:aa:c0:fe:fe:bb:88:86:9f:e7:e5:3a:42:a9:
e8:9b:00:82:d3:a6:dd:f0:7b:71:a3:9f:bc:c1:0d:
a3:26:f8:c7:05:a3:d6:25:2f:17:15:c0:98:77:2c:
ef:79:f4:d3:4d:8a:ee:bb:6e:9c:fb:8c:3a:87:31:
b4:2b:fd:fb:45:c3:15:5f:10:66:1c:a0:e5:3e:e9:
10:60:b8:e0:8b:68:5d:26:99:4c:bc:19:16:c3:4c:
f5:04:85:78:94:26:3f:a4:6c:2d:4a:68:03:d7:46:
21:a4:64:03:0e:b3:c6:a1:aa:11:2a:c2:15:f6:49:
58:4b:20:3f:dc:dd:8b:2c:4f:92:5c:d9:2d:80:68:
12:16:3b:b5:61:f4:6e:ce:27:6a:de:7e:f0:f5:07:
cb:d1:b1:92:6b:c5:dc:de:78:ba:02:9a:f4:93:4a:
e0:ef:4c:f1:b8:78:a9:b7:3b:32:07:31:44:aa:81:
e0:b1:c4:84:b7:be:0c:99:6a:88:58:5c:57:7e:ad:
ae:8b:d8:c8:9d:8a:ff:72:d0:ed:b5:a1:ae:00:a0:
b2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:03:5B:FF:86:4D:AD:B2:AC:5F:6B:23:D9:7D:DD:F1:69:2B:B6
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233362e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:66:fc:49:4e:20:da:db:2e:60:c6:ad:ab:bc:3d:f8:1c:9d:
fc:19:77:d7:76:71:a8:ec:91:30:a9:b0:09:d5:e8:75:52:29:
9a:a6:66:8d:50:8b:33:ac:98:f9:6d:c8:f1:1f:74:65:5d:57:
4f:59:41:88:1c:da:78:8f:ec:be:a2:0d:d3:0f:e1:9a:d7:a3:
3f:c3:93:36:aa:a9:ad:ab:f0:85:f8:2e:99:21:fe:d1:7e:62:
02:0e:40:2b:ef:ca:4c:c2:7c:70:5b:34:c9:c5:7e:33:81:37:
a3:5e:e3:f1:c5:2a:ba:cf:aa:0d:1e:cb:32:35:c0:a2:e0:45:
60:6e:54:8b:79:6d:e7:c3:75:c7:28:03:04:40:8f:43:ad:a5:
63:4c:4a:99:0f:46:28:a2:7c:62:77:27:29:f7:86:e6:c1:fa:
29:fa:54:63:07:88:b3:f0:10:f9:d5:66:d5:b4:8d:48:b9:af:
72:8e:5b:e2:7f:b9:9a:6b:82:e7:73:64:76:7e:71:7b:25:a2:
56:7f:65:af:0c:18:72:a3:41:a7:e3:3d:4a:b6:e2:48:cd:90:
12:02:09:a5:39:6a:93:2a:d2:ba:6a:e5:c7:ea:a6:a7:e6:a0:
25:27:17:2a:0c:37:88:ca:d0:90:5d:c6:79:5e:b6:ca:bb:47:
12:e7:39:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:06 2026 by rpki-client