Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39332e3138342e37372e302f32342d3234203d3e203239343035.roa
File: 39332e3138342e37372e302f32342d3234203d3e203239343035.roa (raw, json)
Hash identifier: KNROAqPfXENphQBzyfVk59v5Hvqlnlhj1Iqa4/Wrvfw=
Subject key identifier: B0:6B:8D:57:63:5F:B6:95:77:00:43:5E:D9:B3:2B:C8:0F:8D:D0:9D
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 5A3F4DF2E6F645A3E0B588399D5DDF339548FD2E
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39332e3138342e37372e302f32342d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:15 +0000
ROA not before: Tue 08 Sep 2026 07:15:15 +0000
ROA not after: Tue 07 Sep 2027 07:20:15 +0000
asID: 29405
IP address blocks: 93.184.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:3f:4d:f2:e6:f6:45:a3:e0:b5:88:39:9d:5d:df:33:95:48:fd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:15 2026 GMT
Not After : Sep 7 07:20:15 2027 GMT
Subject: CN=B06B8D57635FB6957700435ED9B32BC80F8DD09D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:ec:e7:71:7f:80:94:b9:38:23:14:ec:a1:
8a:22:43:f8:02:af:e4:0c:03:13:77:06:9f:37:7a:
8e:2e:ab:db:ad:f5:8e:27:18:77:e5:f4:a3:da:67:
f4:d0:4d:27:d6:55:00:92:b3:8a:9d:43:62:86:27:
db:f8:71:9e:13:f3:0d:57:39:3a:49:c6:0c:17:d9:
63:ef:31:5a:7a:12:ca:47:ca:a5:fe:32:d6:a6:47:
0d:29:7b:1a:5a:f6:81:de:20:ac:09:6e:a6:3a:d6:
eb:3b:c5:c6:f2:6c:ec:1d:1d:06:ca:e0:e4:3f:42:
0a:21:6f:92:2a:39:7c:25:f9:f9:70:f6:00:01:1b:
4e:d9:b9:a5:e9:9b:3f:1c:f2:4f:fa:ff:c6:d8:23:
80:7c:3b:ee:af:32:90:f2:a2:eb:45:be:bb:62:ab:
02:1a:be:bc:ea:ed:7b:52:1d:69:89:f1:52:61:12:
61:5d:d3:a9:5c:49:1f:e4:de:19:91:b2:68:04:33:
7d:61:8d:47:29:9a:f8:22:32:42:73:72:65:e4:a5:
8d:f6:fc:e5:65:66:57:9b:e3:de:98:d3:fc:22:63:
f0:72:60:b9:cc:5e:c7:49:b6:e8:f7:5c:91:6a:88:
6d:49:34:1e:68:5f:ff:f6:42:aa:f0:98:fa:ea:d6:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:8D:57:63:5F:B6:95:77:00:43:5E:D9:B3:2B:C8:0F:8D:D0:9D
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/39332e3138342e37372e302f32342d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.77.0/24
Signature Algorithm: sha256WithRSAEncryption
18:40:2b:87:c7:97:64:fd:49:0d:40:82:1f:6a:32:e8:88:71:
e8:79:4f:e1:27:d0:e2:b5:ad:3a:fa:37:94:8a:7f:20:41:06:
d1:a7:52:8e:ab:1e:e4:4c:ef:2f:f2:e2:ec:e8:b6:1a:3f:d4:
d9:73:08:76:14:48:63:19:77:2a:f4:2c:f6:04:cd:09:bf:c8:
da:ea:88:36:7a:84:3e:7a:d2:a8:2d:08:52:3e:5a:c6:e7:cb:
d1:3c:8c:2d:ac:09:b2:91:5b:a4:d6:38:f1:15:cc:27:d7:f7:
29:64:9f:0a:c3:8c:85:58:ba:6c:d8:24:ba:9c:75:df:74:2d:
6a:b7:99:0f:aa:bb:e1:e9:98:b9:4d:ee:97:8d:60:6f:97:d5:
cc:ad:09:1b:d2:c0:28:81:e6:bd:41:2b:d3:3d:1e:f9:73:89:
d1:dd:b3:cf:1a:be:c4:47:4f:a8:df:e1:8d:18:59:c8:6a:a8:
d5:a5:45:a6:41:a3:a4:7e:44:6a:b7:17:ba:e1:72:74:5c:d8:
6f:50:20:7f:05:53:1e:44:7e:b3:42:93:8f:8f:98:d8:cd:8b:
03:03:30:13:2c:b7:6a:5b:95:b4:9d:82:01:9b:f1:42:aa:aa:
5a:06:de:63:a3:14:3e:d4:f5:91:56:71:cc:fd:05:1c:40:1a:
d4:07:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:56 2026 by rpki-client