Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234352e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3234352e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: zjSSSsKGGZnm7k5LvFSb2guDmXTBkSv+ePAfP6MlUDg=
Subject key identifier: F8:EC:32:1B:62:AD:B4:EA:EB:3B:FC:A3:37:18:C7:48:3D:D7:E3:F9
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 362C7BD3A7F40AF14F3CE120209CFC5DB82BBA15
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234352e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:27 +0000
ROA not before: Tue 08 Sep 2026 07:15:27 +0000
ROA not after: Tue 07 Sep 2027 07:20:27 +0000
asID: 29405
IP address blocks: 92.240.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2c:7b:d3:a7:f4:0a:f1:4f:3c:e1:20:20:9c:fc:5d:b8:2b:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:27 2026 GMT
Not After : Sep 7 07:20:27 2027 GMT
Subject: CN=F8EC321B62ADB4EAEB3BFCA33718C7483DD7E3F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:55:fe:42:cf:7c:e2:d7:cf:4c:81:9b:9c:
59:76:bf:ca:bd:4f:8a:ee:dd:7b:3f:17:40:72:e1:
e8:fb:4d:dd:d5:0b:fa:34:8b:2d:80:20:d1:ed:49:
21:8d:29:57:07:71:ab:14:24:52:1a:fa:dc:f2:63:
4e:2b:19:b1:20:b9:98:b1:74:61:cd:4b:c3:c7:0a:
0d:ce:1b:1c:b3:e5:93:42:92:42:ad:11:af:c2:af:
3f:60:61:de:a4:0f:68:33:d4:0a:38:8b:4f:75:56:
53:32:aa:69:d9:ab:fc:af:dd:22:ae:4f:85:75:70:
ec:5b:5d:e4:80:33:61:de:2e:a2:37:18:55:30:43:
75:fb:15:3b:e6:4a:ad:2b:21:48:f3:30:75:95:bf:
c8:d7:60:7f:5c:59:3f:61:4d:b6:f0:e4:95:a3:85:
e1:dd:72:87:a2:d4:9e:ee:b2:d8:27:de:fa:80:04:
17:e1:bd:6e:40:44:da:f7:b5:8b:01:c6:54:66:22:
04:dc:80:b7:fa:ce:51:c9:bb:80:ed:be:07:99:6b:
18:40:5c:22:34:6f:90:9d:12:07:92:d3:3c:3b:0f:
09:4a:c4:37:dc:08:53:fa:b2:76:e6:4f:89:2c:69:
ec:f3:93:45:a5:c1:fb:55:76:6c:2a:01:8f:bc:58:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:32:1B:62:AD:B4:EA:EB:3B:FC:A3:37:18:C7:48:3D:D7:E3:F9
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234352e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.245.0/24
Signature Algorithm: sha256WithRSAEncryption
95:42:6b:eb:fe:5d:c4:10:5c:f6:09:a3:5f:f7:30:0e:42:d1:
08:2b:34:a6:d1:45:d0:23:9d:65:c8:35:79:1f:b0:4c:11:97:
73:5e:8c:b5:e3:68:8f:66:28:c1:3b:57:c7:20:3a:78:b3:19:
39:b1:0f:0d:16:9e:1e:40:53:2c:4c:5f:2a:89:73:b8:25:11:
cb:c0:6c:65:90:67:79:d3:14:5b:37:6f:4f:69:ed:bc:d7:98:
4d:a3:78:45:d8:c5:c9:84:0f:c9:ff:45:25:e5:90:49:1b:c1:
78:9b:b2:98:fa:5e:dd:e4:ba:28:5c:9b:4c:27:53:08:fe:de:
cb:ed:af:e1:15:77:4c:76:8f:ca:e0:58:fd:1c:8f:2e:0d:4b:
4e:11:da:71:d7:d4:00:bf:5c:69:7a:0d:f9:c1:34:54:e1:a5:
90:f7:47:84:4f:da:c4:d3:81:a2:e7:60:5f:57:62:0c:46:a2:
22:21:60:f7:6b:02:00:5e:c6:13:0c:d8:f1:68:4a:90:98:7d:
44:fc:46:46:73:b1:52:38:11:5d:d7:34:14:7c:d7:11:6b:4f:
3a:69:07:17:d5:83:74:30:33:b0:db:cb:93:b7:6a:b2:95:e4:
09:86:8d:33:1d:97:88:92:3a:64:8f:50:48:b8:26:0b:6b:9a:
aa:4f:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:10 2026 by rpki-client