Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234322e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3234322e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: kM+gDjZiEvVCID7wvcbCRUgVsT4ajdEwlZgKFdVmvR8=
Subject key identifier: 45:B0:B4:9E:3E:15:46:84:DD:A9:46:F8:2A:6A:85:E5:DE:C9:9A:82
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 30F06FF44F5B28685F327AEBEDDEC4F3BBBE7669
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234322e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:26 +0000
ROA not before: Tue 08 Sep 2026 07:15:26 +0000
ROA not after: Tue 07 Sep 2027 07:20:26 +0000
asID: 29405
IP address blocks: 92.240.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f0:6f:f4:4f:5b:28:68:5f:32:7a:eb:ed:de:c4:f3:bb:be:76:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:26 2026 GMT
Not After : Sep 7 07:20:26 2027 GMT
Subject: CN=45B0B49E3E154684DDA946F82A6A85E5DEC99A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:a2:2b:8c:69:44:cf:55:df:4e:61:4c:a8:
6d:99:17:95:84:b3:1b:13:6d:75:a3:df:4b:b9:5c:
f3:32:75:a4:0a:9b:ba:32:ba:ec:38:ff:53:74:0f:
6e:28:5e:a8:36:93:f5:56:17:65:6f:b4:57:f6:56:
df:a6:15:bd:4a:db:9f:f7:9a:2f:18:d7:0c:14:53:
de:c9:15:9f:8b:6f:6a:2e:c2:1e:88:6c:91:b1:d1:
8f:66:54:76:f2:5d:3b:4d:87:8c:38:f9:2c:c5:8c:
a2:c1:75:7d:6b:89:47:3b:ca:6d:42:3f:a6:b2:90:
06:13:27:39:84:d2:08:fc:36:77:19:3b:54:75:8b:
6b:17:ec:b7:e0:0e:6f:f3:b3:07:15:26:ac:64:ac:
0e:5f:44:2d:86:c3:ff:9d:e4:ec:4a:1d:95:c1:c8:
af:28:43:8e:28:52:7e:7b:97:f8:7e:51:24:ea:8d:
6a:d3:85:05:be:9c:40:cc:63:c9:52:a1:77:b4:13:
4d:56:1b:b4:bd:b9:ea:3d:ad:cf:72:67:0f:91:22:
bf:4a:73:f0:64:d9:e9:d0:ec:e5:49:88:d1:d4:22:
5b:33:a0:dd:da:10:87:81:09:ac:fc:d5:63:de:01:
27:8e:8d:cf:26:47:47:87:3c:00:9f:48:ec:26:ea:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:B4:9E:3E:15:46:84:DD:A9:46:F8:2A:6A:85:E5:DE:C9:9A:82
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234322e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0a:ff:36:e1:75:09:91:16:af:e2:a5:cc:8d:78:be:23:c7:
a0:e3:c6:97:e2:46:63:54:18:05:61:f8:c0:86:f9:69:14:0c:
87:0a:d2:b0:af:0a:c5:41:f0:93:5a:ea:2e:15:b6:cd:f6:75:
6e:3b:0c:e8:82:97:1d:53:37:e1:8b:96:03:55:d0:26:8d:58:
30:1c:2b:f9:9a:30:8d:04:4a:18:42:2c:ca:49:8a:e9:2b:43:
ff:57:6c:43:1a:e8:f2:cf:80:27:eb:86:fb:4d:f7:dd:6d:24:
49:28:6b:78:ab:18:d9:24:c4:12:b6:c6:5f:dc:6f:0a:9e:44:
99:35:a3:56:41:c7:22:d6:a8:c9:b3:d2:8a:57:af:36:b9:80:
a6:eb:54:e1:27:1b:3f:2e:bf:a6:77:f8:51:a2:9b:e5:45:d5:
ef:55:65:e3:ee:35:d3:51:6b:39:f1:5b:d4:4b:ae:20:03:6b:
f8:03:6c:96:1f:ff:fa:ac:ac:1a:de:37:79:3e:11:c4:d4:ca:
60:7b:91:3d:50:fe:aa:8f:aa:b8:c1:bd:c8:42:8b:d1:e4:54:
c9:9c:4c:04:20:fe:19:66:09:be:45:5f:6d:8a:4f:cf:73:f0:
f0:a4:25:5a:95:3f:4c:a3:2f:c2:99:12:51:a8:f9:7b:90:01:
1d:eb:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:06 2026 by rpki-client