Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234392e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3234392e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: OWddMU2lVARc4e0qTNNk2twrubMUNkpdn9k9PUQykHc=
Subject key identifier: 37:97:45:95:34:CF:FE:C6:04:7B:5E:98:BC:1C:42:10:FF:48:85:6D
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 4D26D3DC0CDC2EC434E98C87FA8D8A70BAD0574A
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234392e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:24 +0000
ROA not before: Tue 08 Sep 2026 07:15:24 +0000
ROA not after: Tue 07 Sep 2027 07:20:24 +0000
asID: 29405
IP address blocks: 92.240.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:26:d3:dc:0c:dc:2e:c4:34:e9:8c:87:fa:8d:8a:70:ba:d0:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:24 2026 GMT
Not After : Sep 7 07:20:24 2027 GMT
Subject: CN=3797459534CFFEC6047B5E98BC1C4210FF48856D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:99:9c:e7:46:1b:10:cb:58:0f:72:00:16:
61:dc:07:76:62:93:b5:bb:75:fb:fe:69:e6:53:24:
40:04:8b:f1:51:eb:7f:92:9e:69:19:82:fb:2f:92:
21:71:60:9c:cd:25:fd:d3:fe:0d:f2:cc:db:e9:b3:
c5:36:ff:bd:34:ad:4b:bc:e9:4a:c0:41:e8:d8:14:
32:7e:35:87:8a:88:0e:0a:79:5c:ca:4c:c8:a2:a0:
21:c7:37:de:9c:b4:cb:5c:38:b8:c3:89:24:fe:3d:
04:5f:5f:ab:63:db:0a:be:45:ad:c9:f9:55:c2:e3:
48:1b:f2:d2:bc:7a:56:76:e8:1d:a2:08:21:c9:a8:
06:1b:32:c1:a9:55:df:74:6e:38:39:09:9d:e1:89:
18:b2:15:d9:a2:59:92:e9:4e:5c:8f:9a:fb:8c:0f:
af:3c:ae:8d:99:4f:d2:1a:3b:ce:d1:9e:ed:6d:37:
8f:1d:1e:a1:a6:db:e0:29:35:11:27:cf:d1:3d:41:
90:5c:67:31:ee:60:40:a4:60:80:91:8a:3c:c4:a2:
e6:a3:44:08:f6:c7:2c:1c:42:67:c4:71:37:de:63:
09:f1:96:4d:45:5d:8f:9a:c0:a6:cc:0f:d8:ea:8b:
df:23:54:d5:1f:5b:97:58:fd:c6:27:06:41:fa:7c:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:97:45:95:34:CF:FE:C6:04:7B:5E:98:BC:1C:42:10:FF:48:85:6D
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3234392e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.249.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a9:70:05:77:b4:23:8d:99:94:ab:14:e2:a1:23:6f:1f:ca:
68:76:eb:cd:81:a1:04:05:2f:ad:35:39:cf:08:97:39:ff:07:
50:1e:56:e2:ad:05:74:3f:d1:4b:38:6a:76:cb:12:0e:09:e1:
80:71:2e:6f:49:d0:ac:10:ef:0f:93:f3:93:86:c5:3b:60:58:
42:bb:32:dc:3f:d5:72:88:5f:f7:23:a9:1e:3e:6d:6d:d6:64:
42:43:f1:f2:40:f9:f6:37:97:57:de:7c:f8:9e:49:1b:a5:ce:
d0:da:bb:82:61:f5:8b:b9:7e:b8:1a:15:54:79:d1:52:8b:94:
6d:fc:90:7b:6c:4f:28:e0:9e:c4:6f:d6:88:2c:d8:ef:ff:2e:
fe:e2:d4:24:7d:b1:2b:b4:75:c8:12:a1:06:b7:e9:88:a9:74:
9c:54:cd:60:9a:a6:e7:10:79:e0:a4:f7:95:89:71:bc:dc:0b:
cd:13:47:15:27:03:11:da:58:ea:04:42:54:0b:3e:79:05:cd:
b2:e7:c7:6c:4c:86:9e:28:49:71:91:e7:27:24:5f:a8:b3:45:
00:93:32:df:1b:15:0b:aa:3c:44:ab:e6:98:17:85:72:67:2a:
14:f1:e3:89:22:cb:43:5f:55:ae:43:ea:32:bb:99:1c:11:5c:
83:99:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:14 2026 by rpki-client