Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3235332e302f32342d3234203d3e203239343035.roa
File: 39322e3234302e3235332e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: 3TcyJn0Vba3SdYkAgBupE2RJSi7wt6IrY6almrGdDwA=
Subject key identifier: FB:08:AC:B7:12:08:0F:E1:72:BD:FF:11:37:DE:6F:4D:BA:4E:A1:CF
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 75A8A825ECD638AEDE7AC91015D2DD845AEB7D39
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3235332e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:24 +0000
ROA not before: Tue 08 Sep 2026 07:15:24 +0000
ROA not after: Tue 07 Sep 2027 07:20:24 +0000
asID: 29405
IP address blocks: 92.240.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a8:a8:25:ec:d6:38:ae:de:7a:c9:10:15:d2:dd:84:5a:eb:7d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:24 2026 GMT
Not After : Sep 7 07:20:24 2027 GMT
Subject: CN=FB08ACB712080FE172BDFF1137DE6F4DBA4EA1CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:c6:9f:7f:ea:ee:a4:60:e8:f9:bd:6b:99:
a8:4a:e9:91:34:5c:7c:cc:37:c1:45:74:36:d4:0f:
41:0e:30:6b:53:c2:e4:eb:91:31:c2:47:2d:a3:66:
3e:bb:09:60:6a:d4:91:20:6f:5f:ca:73:11:6f:ae:
f3:7e:04:34:b1:2e:15:96:34:b4:03:c9:3e:a6:0f:
63:2c:81:30:85:24:c2:74:96:bb:72:e6:c7:0b:3a:
62:12:fe:a4:92:ec:e2:2a:e2:cb:98:4e:c1:06:ba:
60:31:87:97:bb:91:2e:92:a3:7a:e1:ad:23:62:5e:
56:1d:90:24:38:60:19:06:2d:ad:c3:c6:10:4b:ee:
4e:80:1f:3e:c5:45:c4:f4:d0:53:2c:a9:95:c5:cc:
ed:9c:b7:c1:1a:81:e7:fd:3f:ac:6b:44:fd:dd:2e:
89:9a:64:a9:a1:b7:f7:24:d9:14:1c:d2:ec:18:bc:
52:f0:2d:6a:d7:ea:e5:4d:d5:8f:d8:14:1b:5d:c0:
e9:b4:ae:30:89:90:40:2e:13:f3:bf:6e:59:32:78:
79:50:d7:f8:c9:d8:47:9d:85:83:aa:7a:85:8e:ef:
e2:af:9e:12:99:2a:fd:b7:e3:47:32:56:75:2c:ef:
97:82:cd:36:88:95:0a:44:3d:56:45:52:6b:ad:af:
ef:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:AC:B7:12:08:0F:E1:72:BD:FF:11:37:DE:6F:4D:BA:4E:A1:CF
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39322e3234302e3235332e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.240.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:39:60:31:3b:c1:a8:ef:52:33:77:53:f1:4a:bc:0e:c1:20:
28:af:38:c1:52:73:ed:1b:fe:a2:a9:7c:d3:fe:6c:70:b9:56:
aa:ea:ed:84:e0:fd:b4:1e:5c:15:16:39:0e:fd:20:8c:5e:98:
16:0e:e5:f3:f9:c9:7d:98:f3:a1:9e:c7:f0:f2:ab:33:a6:a1:
88:b4:bc:ac:78:8c:dd:a3:50:7a:2a:ee:cf:e4:f0:35:02:fc:
2a:5c:1b:fe:39:52:34:1d:28:e6:c5:c2:36:34:68:00:bb:7d:
98:92:ee:09:7b:69:c9:8a:49:fd:1f:25:5a:de:2e:86:fb:3f:
a8:9d:64:2d:6a:d2:aa:c5:42:06:5f:b7:15:ef:57:1c:20:3d:
d2:3d:49:73:ef:71:44:f5:2c:64:c5:17:14:3a:b9:01:2b:e8:
04:39:6c:36:e9:c3:91:e8:99:0a:f2:1b:85:72:52:87:d7:95:
f0:dd:e8:15:04:11:93:aa:cf:da:d5:37:3d:d4:a0:9c:4e:de:
23:78:18:e1:d8:f2:df:31:ed:8c:53:4c:d3:f1:5e:89:db:a0:
ba:64:11:fa:02:f0:54:bc:06:d5:01:40:7b:3a:8e:61:a3:65:
49:99:40:58:97:ca:8b:ef:b1:d0:2a:38:d8:e7:82:17:d2:36:
c5:21:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:11 2026 by rpki-client