Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e203136323736.roa
File: 322e35382e38352e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 7BCCo1S44O1GzhjGjkFaT0HearfARUjEUX+ZehyGppM=
Subject key identifier: A9:44:4B:D5:F0:55:FE:C6:59:D1:22:7C:93:A0:28:AC:B5:00:C0:00
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 21C148E3A0D8F3E46EBAD58F23E817DB2394A8FB
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e203136323736.roa
Signing time: Thu 24 Sep 2026 07:40:18 +0000
ROA not before: Thu 24 Sep 2026 07:35:18 +0000
ROA not after: Thu 23 Sep 2027 07:40:18 +0000
asID: 16276
IP address blocks: 2.58.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c1:48:e3:a0:d8:f3:e4:6e:ba:d5:8f:23:e8:17:db:23:94:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 24 07:35:18 2026 GMT
Not After : Sep 23 07:40:18 2027 GMT
Subject: CN=A9444BD5F055FEC659D1227C93A028ACB500C000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:ee:cc:5e:3a:06:61:64:4a:74:02:fd:42:
a3:4d:a6:66:66:a1:78:e1:a3:43:fc:e0:e8:54:57:
a5:a9:48:85:91:bf:aa:90:29:45:20:39:31:db:02:
52:9d:bc:ae:a3:6e:68:cf:24:ff:16:69:3d:9c:5a:
c6:23:da:ff:82:94:0f:17:64:41:d7:9e:7e:eb:14:
5c:71:fe:7d:f3:33:aa:92:b5:3b:da:f6:dd:a4:d4:
03:b2:d0:f7:f0:4d:ab:86:a6:40:45:54:41:cc:f6:
76:f7:71:ec:cb:f1:c7:45:ec:4e:d1:2c:83:1e:7b:
82:7c:aa:14:d6:dd:ad:cd:53:eb:05:04:f1:02:a1:
2c:bc:c0:1f:17:0a:92:d0:2f:fe:7d:6d:d5:2b:1a:
76:0f:f9:b1:40:d6:7d:78:d0:d1:e5:7c:94:fa:3b:
84:12:cf:61:05:bf:36:ca:4f:89:0d:61:8e:77:e0:
30:c0:a0:eb:a1:aa:31:61:59:88:5c:79:fd:3b:bf:
5b:41:e5:8c:24:00:61:39:46:93:99:8e:54:d9:59:
31:c4:b9:1f:5d:d7:cb:10:e3:67:37:71:2d:1b:f9:
c7:4c:5d:af:4e:0a:6c:3e:c6:e6:f4:be:b8:2e:c3:
2a:81:38:1f:bb:7f:7e:2b:9a:ab:f1:78:f7:10:17:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:4B:D5:F0:55:FE:C6:59:D1:22:7C:93:A0:28:AC:B5:00:C0:00
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:28:ad:68:1f:a3:57:17:22:5f:ad:f3:14:e5:67:6e:c3:
b7:27:fd:aa:5d:fc:bb:94:b9:9c:4a:84:4c:ce:c1:5c:76:e5:
f7:25:02:01:9f:d3:8c:f5:c8:e0:43:bb:f3:93:2f:a6:91:eb:
06:7e:f1:a2:db:90:05:27:97:55:5d:a0:b0:3b:6c:1b:e9:d6:
f9:df:44:69:96:2f:55:a9:cd:8c:69:6d:50:8c:69:24:f1:fb:
16:92:78:1b:52:0a:28:87:2c:2a:e4:9b:a8:cc:ca:2a:61:a8:
95:a0:85:c5:c2:f1:c1:71:b9:6b:19:96:a2:ee:d8:63:a4:38:
9b:9e:a3:69:84:cf:9f:8b:0a:6d:f2:07:e8:a4:d9:e5:cd:d8:
73:fd:14:7c:8a:a7:f7:2a:b1:aa:77:61:17:75:ba:87:e8:13:
c9:98:68:63:e6:f0:21:c9:2a:4d:22:af:07:d0:74:0a:82:b5:
f3:20:83:7f:e4:a3:76:a1:e1:0e:ef:c8:a2:3e:58:b0:1e:e1:
98:31:79:84:dc:7f:7e:9c:3a:f5:01:6b:75:cb:bb:b8:f3:8c:
4c:96:81:2e:2e:7a:28:ae:4f:bb:f8:d6:da:5a:62:79:c7:f4:
11:42:81:ad:a5:70:a7:23:69:33:17:a2:89:3f:3c:52:38:b2:
99:ff:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:44:57 2026 by rpki-client