Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/38372e38302e302e302f31362d3234203d3e203138303436.roa
File: 38372e38302e302e302f31362d3234203d3e203138303436.roa (raw, json)
Hash identifier: n2d8Osn+i8E61Wa58xF3ZT+6gi29mzSxGbOynpagm/Y=
Subject key identifier: C0:8E:09:FD:A0:3C:1D:D7:8F:5B:4F:FB:C7:66:2C:E1:EE:BF:8B:14
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5695DD7A2D1C7802332B0218CD586EF2BEE58006
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/38372e38302e302e302f31362d3234203d3e203138303436.roa
Signing time: Tue 03 Mar 2026 13:05:03 +0000
ROA not before: Tue 03 Mar 2026 13:00:03 +0000
ROA not after: Tue 02 Mar 2027 13:05:03 +0000
asID: 18046
IP address blocks: 87.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:95:dd:7a:2d:1c:78:02:33:2b:02:18:cd:58:6e:f2:be:e5:80:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 3 13:00:03 2026 GMT
Not After : Mar 2 13:05:03 2027 GMT
Subject: CN=C08E09FDA03C1DD78F5B4FFBC7662CE1EEBF8B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:34:1c:be:d7:1c:f4:8a:cb:7a:50:24:ae:
e0:da:1d:a7:79:07:2e:9f:ff:b3:e1:22:b5:13:29:
ee:58:79:e8:83:7e:80:ca:f2:2b:29:f4:b2:55:72:
27:69:18:1e:41:0e:92:f5:32:0a:4a:07:fc:ab:09:
01:e9:06:df:29:95:e4:85:d1:18:17:f3:6a:64:39:
af:80:55:19:b3:fc:01:76:1c:d0:4a:4f:42:33:cd:
54:af:7c:ee:df:04:38:e5:8b:b3:8b:fb:de:69:55:
99:97:ea:e0:9d:54:07:8d:63:7b:ae:d6:c6:db:46:
bb:cd:39:ea:08:fb:d5:ad:77:29:aa:09:b8:30:7b:
99:82:8d:fc:e9:a3:5a:54:2a:c6:18:50:73:b8:aa:
0e:a6:ff:19:6f:33:3e:1d:00:11:de:0a:c2:12:a0:
4b:d5:29:fe:2a:1f:ee:2e:cd:50:35:96:7c:33:06:
7e:92:fe:fc:ef:a2:6d:86:0e:c1:a9:27:72:99:33:
82:a3:53:38:9a:c4:37:b6:32:3c:e7:15:91:58:76:
65:73:72:6a:25:b2:1d:64:08:99:e3:1f:76:3f:ad:
74:cb:1c:d8:e1:6e:70:16:12:4b:b4:f4:95:4f:5d:
7f:77:de:32:98:84:46:b7:25:f3:62:58:cc:3f:46:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:09:FD:A0:3C:1D:D7:8F:5B:4F:FB:C7:66:2C:E1:EE:BF:8B:14
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/38372e38302e302e302f31362d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.80.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:39:a8:15:b4:a9:e3:19:85:f8:63:e6:2c:63:35:7d:ab:f1:
8b:c9:25:4c:3f:c4:84:27:06:b7:31:3c:49:7c:30:33:69:d7:
ac:ec:5b:50:cb:14:34:6a:2c:6f:a1:e5:bd:5e:64:16:b0:dc:
79:40:59:1f:15:f9:6c:d6:b5:2f:58:d8:b8:61:b5:e0:d4:e9:
84:59:ab:0a:e0:c7:ae:34:99:50:c8:5c:fd:7f:9c:8f:91:ac:
76:d8:7c:39:93:8d:65:fb:33:72:c2:b3:bd:33:05:d9:de:a2:
1f:65:84:ba:a9:bc:d9:9a:2a:71:66:db:d4:b0:f5:1a:e6:08:
35:29:0b:f3:56:d0:ca:18:c9:25:d3:0b:cc:72:38:15:44:6a:
be:e7:cd:d9:ff:24:d4:46:22:12:5f:e1:78:89:e4:64:01:e0:
ec:43:2a:09:ca:17:a0:7e:f4:60:fe:a1:76:a2:b9:ff:f4:a0:
b6:fd:97:dd:15:48:36:cb:37:64:44:26:40:34:f3:c0:2c:29:
ec:84:b0:2e:1a:08:14:5f:21:8b:19:fe:17:4c:1f:35:73:3c:
87:40:2b:a3:d5:c0:4f:d7:89:4d:a1:54:2b:09:3c:73:05:0a:
25:40:96:ef:45:42:3d:b6:54:0e:c0:1d:3f:34:8e:54:d7:64:
73:7f:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:16:38 2026 by rpki-client