Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234312e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3234312e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: Opg5YCuZVpoZQMqVkdc7dq3/iqNbHLYh5wpFHjBXqwM=
Subject key identifier: 76:E8:84:CF:BA:AC:C2:8F:A3:8F:54:E3:81:83:A3:6E:40:38:CB:F6
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 58F6793E10EF31C39E6B7CCF1C164F16D819B04D
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234312e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:20 +0000
ROA not before: Tue 08 Sep 2026 07:15:20 +0000
ROA not after: Tue 07 Sep 2027 07:20:20 +0000
asID: 29405
IP address blocks: 92.240.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f6:79:3e:10:ef:31:c3:9e:6b:7c:cf:1c:16:4f:16:d8:19:b0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:20 2026 GMT
Not After : Sep 7 07:20:20 2027 GMT
Subject: CN=76E884CFBAACC28FA38F54E38183A36E4038CBF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:39:c7:f0:1f:3d:39:80:70:b8:ba:6c:d5:
1c:1e:ff:57:6f:fa:31:33:0e:31:20:2e:ef:a0:04:
91:d1:e4:f9:16:20:89:06:1b:8e:09:a2:77:cd:ec:
89:15:f0:31:ca:d6:67:39:0b:96:09:7d:ff:2d:cc:
86:53:c4:0d:d5:db:63:39:6b:6e:ff:87:05:eb:b8:
23:92:00:3d:e0:93:a7:8f:35:8d:51:0a:30:b7:d1:
f5:37:ca:3e:f4:a2:98:3d:73:55:18:08:91:b6:4c:
10:ca:6b:62:92:28:eb:87:4c:a5:18:62:8a:8c:d4:
60:77:80:08:c4:9a:16:c9:84:09:1d:0f:b4:77:cd:
77:1c:1b:dd:1c:6f:27:eb:9e:90:9c:81:50:94:cc:
6a:60:fa:82:8b:de:00:b4:b8:9b:72:c0:02:14:ee:
68:45:26:e8:a2:2d:18:9e:76:05:3b:d5:2e:95:89:
02:01:b7:c0:e8:45:90:eb:fc:80:39:78:13:b3:12:
55:49:db:df:bc:d5:8c:98:10:a9:b4:f3:9b:fe:71:
9b:bf:bc:8b:2d:ad:cf:8f:6f:64:07:eb:86:4e:a6:
8a:8a:5d:06:d3:d0:bd:e7:01:6e:51:b5:db:9a:ed:
62:cc:44:96:1c:9c:f5:09:c5:e3:51:82:5c:a9:03:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E8:84:CF:BA:AC:C2:8F:A3:8F:54:E3:81:83:A3:6E:40:38:CB:F6
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234312e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.241.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5c:3c:6e:64:18:d3:86:c5:74:ec:ae:65:94:8a:e3:3c:b7:
55:11:f1:91:4a:ff:1b:1a:e4:83:49:90:9a:3e:a3:95:2e:c2:
a9:13:5f:06:61:c1:9b:e5:2b:d1:5b:f3:a0:5c:77:d7:d2:38:
71:1e:c8:6b:d8:97:8a:1a:69:5a:f0:b3:e9:4c:18:f3:3d:97:
27:70:01:66:e5:d0:be:a3:96:b9:ae:24:63:bc:10:81:40:43:
0b:e1:aa:90:f1:7c:79:48:cd:88:03:22:a4:23:56:ba:81:b7:
f5:68:25:26:46:85:11:98:bd:66:0a:32:f6:5a:d5:4a:c7:f7:
d6:c9:72:0c:60:69:fa:38:25:0b:3d:4e:b6:7a:1a:63:d9:d0:
17:f4:23:db:94:bb:ee:63:14:1b:00:b8:13:c0:e2:8a:34:07:
1c:01:90:4d:4b:5c:01:ef:47:3a:2e:ac:00:ba:b5:83:e4:5e:
6d:0c:4f:16:c3:93:2c:1e:4a:18:d9:52:65:73:d8:56:71:32:
62:97:df:60:c9:91:05:f2:05:d7:b4:d5:68:38:23:9c:a7:f3:
bf:11:59:b8:79:52:c4:95:c9:b2:28:9e:92:3e:86:76:3d:d0:
a5:89:71:85:7a:e8:55:a7:5f:4e:49:9b:be:13:53:e2:58:41:
b8:1f:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:00:58 2026 by rpki-client