Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39332e3138342e36342e302f32302d3234203d3e203239343035.roa
File: 39332e3138342e36342e302f32302d3234203d3e203239343035.roa (raw, json)
Hash identifier: qJyJZHLgF+VN+ii9OlFgksvK1ICSHqOEqlSg1DkmbiU=
Subject key identifier: B8:D2:69:5B:97:4C:27:82:E7:B7:56:E7:7C:10:FD:0A:B7:7C:1F:B2
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 78CBF24CF28702E4EC31CB4C669888D6AC580C45
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39332e3138342e36342e302f32302d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:12 +0000
ROA not before: Tue 08 Sep 2026 07:15:12 +0000
ROA not after: Tue 07 Sep 2027 07:20:12 +0000
asID: 29405
IP address blocks: 93.184.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cb:f2:4c:f2:87:02:e4:ec:31:cb:4c:66:98:88:d6:ac:58:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:12 2026 GMT
Not After : Sep 7 07:20:12 2027 GMT
Subject: CN=B8D2695B974C2782E7B756E77C10FD0AB77C1FB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:82:11:55:0d:8a:f4:9c:6e:59:79:45:de:
55:19:ef:76:bd:06:52:30:27:ef:50:26:c4:0f:ff:
64:6b:04:4a:51:27:71:11:35:16:0d:2b:e6:1a:81:
4c:b8:12:6f:3b:23:14:61:17:d1:af:d1:c0:0b:b9:
0c:d2:a2:13:41:5b:2d:9c:b6:48:c1:dd:07:b7:75:
29:58:49:cc:d8:42:0c:d8:f8:16:a0:ba:db:2f:77:
e8:cf:25:91:b2:2d:1e:8e:ab:b7:9c:66:e6:f0:b4:
69:8a:e5:5c:93:40:c0:78:20:8e:83:c6:2e:3c:f3:
c5:8c:9b:47:28:b7:31:04:dd:e8:7d:f7:94:87:49:
15:51:12:97:ea:85:7f:e4:05:8d:99:56:03:89:71:
2f:1f:d2:d8:21:73:cc:a4:75:58:77:86:60:61:cb:
d1:b8:65:b0:4f:28:40:f5:8f:ad:cd:8f:a1:b7:94:
49:4d:e2:c2:45:0d:b0:77:4e:14:3d:8d:1e:ab:cb:
bb:94:18:9c:a9:70:4c:dd:f0:49:2d:ff:73:e0:ed:
1c:ce:be:64:50:d1:7a:af:5a:25:a8:e9:04:2a:5b:
59:0c:93:61:4a:b5:a0:ca:5f:d5:ac:62:63:e5:dc:
51:15:47:bb:b1:f8:49:9d:bb:c9:d6:7c:0e:4c:e1:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:69:5B:97:4C:27:82:E7:B7:56:E7:7C:10:FD:0A:B7:7C:1F:B2
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39332e3138342e36342e302f32302d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.64.0/20
Signature Algorithm: sha256WithRSAEncryption
57:81:92:d3:5b:d8:57:58:27:cb:e1:fa:18:a4:4e:17:89:68:
5b:14:60:b9:3a:7f:e3:43:5a:36:da:67:fa:65:88:51:15:4e:
aa:67:d9:be:c8:15:b5:6c:d3:f4:3a:c2:b1:77:a4:b9:60:d9:
df:60:6b:cd:d6:32:78:4f:a5:fa:7b:e8:1b:1f:ce:5f:01:57:
01:f0:65:e7:6e:06:45:32:fc:cf:30:8e:b5:78:9c:cd:85:65:
d0:05:f5:e2:0d:a0:e1:cf:26:13:1a:43:f8:e1:59:2b:2c:7b:
c7:08:cc:cf:4b:3f:96:85:3f:18:48:d5:5d:19:fa:37:d2:88:
22:7e:54:d3:0b:e9:82:23:db:66:ec:82:18:dd:40:ff:55:e8:
47:9a:db:73:f8:60:b7:f7:2d:25:bd:f9:f6:5e:93:4e:cb:cf:
10:af:62:a7:6d:8c:aa:56:9a:b7:ee:84:3c:e0:0c:27:29:70:
17:9c:78:00:ba:67:72:43:07:60:27:e3:65:10:6d:51:5f:cc:
dd:2c:ca:13:58:10:83:a8:7c:5e:1a:06:ad:5f:4e:ba:ff:58:
19:22:6c:88:58:95:95:b0:09:de:1c:fe:ca:63:2f:9b:7f:e7:
de:44:52:5b:1e:db:a1:f8:16:79:b2:cc:55:a3:97:66:1e:fe:
5c:0d:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:54 2026 by rpki-client