Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233372e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3233372e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: 8TUKR6ccLxStHiY46OibIeVHKIYrsgaU4259nUYDI0Q=
Subject key identifier: 96:52:5F:7B:44:F8:24:79:44:25:71:CE:3C:B6:B5:43:12:A6:A3:26
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 5E6B592EBF884D90EBC6507986328CA3E7CD7F41
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233372e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:19 +0000
ROA not before: Tue 08 Sep 2026 07:15:19 +0000
ROA not after: Tue 07 Sep 2027 07:20:19 +0000
asID: 29405
IP address blocks: 92.240.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6b:59:2e:bf:88:4d:90:eb:c6:50:79:86:32:8c:a3:e7:cd:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:19 2026 GMT
Not After : Sep 7 07:20:19 2027 GMT
Subject: CN=96525F7B44F82479442571CE3CB6B54312A6A326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:18:c6:68:3e:17:d8:8e:54:2e:7f:83:64:
ce:aa:7e:64:06:c3:28:77:db:5f:16:d4:86:2e:07:
af:51:89:15:e3:21:ad:93:ee:11:6c:55:92:83:3d:
6f:9a:7e:e9:e2:98:c1:3a:46:33:96:6f:77:87:9d:
d3:b2:73:72:78:f5:9b:ac:89:ac:8d:b7:3b:84:c4:
e8:f5:d7:6d:fa:db:9c:dc:f1:59:3a:e6:08:52:d7:
ce:61:9e:a1:24:42:38:e4:6e:88:3e:f4:32:64:30:
6b:63:f1:c2:78:4f:1c:7a:a9:12:3a:3f:60:2d:c3:
79:47:f3:54:de:7e:9d:93:02:63:95:b9:47:12:01:
19:cf:5a:b9:3d:a9:9d:20:50:15:5e:9f:a7:33:ba:
36:32:b8:e1:13:8c:77:1a:af:c9:49:a8:86:36:ad:
b3:a3:31:9d:7e:85:f5:ca:d0:bc:9e:d4:99:20:9a:
65:8f:08:b0:46:15:d9:3f:d1:24:e1:14:d9:be:28:
dd:b2:55:d5:94:26:9b:64:d2:2e:55:1b:fa:dd:f1:
4f:4b:ca:48:ad:b0:03:d5:42:9d:ca:c6:c4:11:0f:
f4:5e:1c:55:af:b5:1c:c2:43:38:62:0f:48:44:5d:
fe:06:5d:36:7c:c5:1a:cb:8f:40:6c:9b:38:4d:9c:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:5F:7B:44:F8:24:79:44:25:71:CE:3C:B6:B5:43:12:A6:A3:26
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3233372e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.237.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7b:5e:a2:56:5e:ca:57:e5:63:47:00:48:23:8c:54:06:9a:
cd:9d:b0:f3:1f:1b:49:98:54:ac:16:3e:a5:19:43:2a:07:91:
c0:af:a7:a9:52:12:65:15:4b:cc:8d:f3:47:61:cb:91:36:09:
47:f5:42:9a:b4:69:56:03:79:45:a4:3f:f3:21:9d:5a:60:60:
ab:d8:80:f4:75:4b:1a:af:c2:47:a4:0f:d8:83:fd:e7:29:37:
b3:cb:99:5f:77:2f:e5:0a:b4:a0:5a:cc:2e:9a:51:5d:dc:87:
d9:15:9a:37:9a:44:60:86:3b:7e:98:d4:7b:40:69:ad:50:aa:
c0:91:d2:7b:79:d3:df:ab:a3:a6:2d:df:bf:42:fc:9e:b2:f1:
68:6d:25:95:2d:b1:00:de:7a:b2:86:56:9e:fe:cb:62:e4:bf:
cb:2b:e5:39:89:e4:d5:90:c6:63:06:5b:98:ba:24:84:d6:40:
b5:7e:d7:6a:83:93:87:b0:8a:e2:a0:6a:99:c1:34:2d:f4:75:
e2:20:c5:4b:55:6e:f5:7a:24:4c:0f:4a:0b:0a:fa:03:b0:3f:
c4:16:ef:e8:bd:2f:fe:62:82:04:0e:6d:45:d2:33:5f:68:e7:
43:ed:49:ce:0f:4a:ff:e8:7f:c7:6f:82:9c:d5:73:ce:bf:2e:
61:4e:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:05 2026 by rpki-client