Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234342e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3234342e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: IqjGqo5bykodH/rQX0Yyj0vB/XG7K+vBGQ1VS0dufJA=
Subject key identifier: B4:8C:9A:E2:5F:0B:A5:AC:91:96:D0:FF:1A:72:68:0F:00:91:6A:68
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 41D5B25D095207DA4C9B18EC1CE11343D6A293BA
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234342e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:26 +0000
ROA not before: Tue 08 Sep 2026 07:15:26 +0000
ROA not after: Tue 07 Sep 2027 07:20:26 +0000
asID: 29405
IP address blocks: 92.240.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:d5:b2:5d:09:52:07:da:4c:9b:18:ec:1c:e1:13:43:d6:a2:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:26 2026 GMT
Not After : Sep 7 07:20:26 2027 GMT
Subject: CN=B48C9AE25F0BA5AC9196D0FF1A72680F00916A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:50:66:c7:86:f3:fe:d6:33:8a:5c:d6:02:
c9:83:1a:b5:1b:82:4d:37:ee:ca:79:d7:8e:5b:18:
67:56:cc:a6:96:4c:06:04:4e:1c:6e:5d:b8:a2:44:
aa:ef:28:6c:a8:12:14:49:5f:96:fa:b5:77:d1:9a:
0f:fe:4c:31:56:bd:10:c3:9a:2d:ec:ca:28:4b:b7:
70:1b:d0:4c:ba:c2:29:5e:ea:c0:26:45:26:7b:8e:
dd:a4:21:8a:46:3b:e6:cb:ad:ce:d3:85:57:2d:b3:
0e:1a:52:0f:aa:63:71:db:b0:dc:eb:85:56:f8:37:
ab:7e:eb:55:3e:82:d7:52:71:1a:63:72:e4:8b:e3:
cf:fb:17:b1:d4:7d:07:2f:4c:32:b6:91:a3:e3:03:
ef:a3:00:e8:16:d0:7c:dd:ca:fe:c6:fe:51:28:d5:
11:80:17:40:df:8b:dc:b3:a6:4a:e7:6d:d3:ba:70:
07:a7:98:22:70:67:c5:a1:11:7b:51:40:c3:19:e6:
fe:25:b2:b7:6e:16:df:ec:a0:e5:50:cf:dc:73:90:
21:28:84:5c:64:8a:ed:f9:19:b0:57:6f:66:51:05:
f6:f7:c9:ef:67:b8:e3:e2:02:bf:d6:e0:ae:81:7c:
ed:8b:01:11:d7:13:98:ff:94:96:52:0d:ea:45:c6:
4b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:9A:E2:5F:0B:A5:AC:91:96:D0:FF:1A:72:68:0F:00:91:6A:68
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234342e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.244.0/24
Signature Algorithm: sha256WithRSAEncryption
83:16:5d:bb:f7:6c:51:29:7b:99:3f:33:2a:82:c7:d4:19:a8:
68:36:e1:11:87:bb:74:4b:db:01:5e:4e:0b:16:c7:16:35:db:
b2:17:19:ef:7e:c7:ff:ee:a9:c5:f7:57:b6:7b:27:ff:c9:a7:
ca:9b:d2:28:e3:5b:48:fd:b8:65:d3:6b:61:cf:bc:47:9f:ff:
a9:77:49:d1:62:0c:5a:e6:a0:fe:95:29:7c:41:8e:8e:68:e1:
22:f8:ff:28:2a:b8:65:c8:e1:ab:b4:57:e9:32:df:d5:fa:3a:
7b:58:32:a9:dd:41:27:f3:d3:65:72:33:35:85:0f:a3:0c:aa:
d0:92:94:37:43:07:5d:f5:a7:98:fc:4f:2a:a2:30:77:02:c4:
06:77:37:2b:31:c7:ca:59:8b:56:e8:ac:a3:c9:0e:94:21:3a:
ec:c9:6c:b9:fe:ca:12:60:78:54:2a:f8:72:2b:98:a5:1f:92:
08:c3:6a:94:37:ef:18:d3:71:30:09:67:2c:e2:f9:dd:65:a2:
53:94:b0:6a:26:a8:54:d0:10:4e:43:dc:c0:5c:04:08:5f:12:
16:15:79:ea:73:2e:b1:61:50:f8:c2:dc:ab:85:7e:75:c9:b0:
ac:90:29:20:9d:c9:4a:02:4d:50:ae:38:82:37:64:c9:bf:03:
e5:c2:e9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:12 2026 by rpki-client