Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20323139343034.roa
File: 322e35382e38352e302f32342d3234203d3e20323139343034.roa (raw, json)
Hash identifier: vCQpjnTOrolQw7t5figQISIQa92sU85HD6XFROhjJtI=
Subject key identifier: 42:43:13:54:AC:8E:79:17:F9:51:C2:A1:F5:42:D9:30:0B:A1:AE:16
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 225893FC4B7A93D4F5192B8BF07EAEDBC3C674E2
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20323139343034.roa
Signing time: Thu 23 Jul 2026 07:48:14 +0000
ROA not before: Thu 23 Jul 2026 07:43:14 +0000
ROA not after: Thu 22 Jul 2027 07:48:14 +0000
asID: 219404
IP address blocks: 2.58.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:58:93:fc:4b:7a:93:d4:f5:19:2b:8b:f0:7e:ae:db:c3:c6:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 23 07:43:14 2026 GMT
Not After : Jul 22 07:48:14 2027 GMT
Subject: CN=42431354AC8E7917F951C2A1F542D9300BA1AE16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:00:41:6b:87:16:2c:7b:1c:d3:68:c8:98:
fb:af:da:bc:ed:b4:64:c3:08:59:4c:97:e8:31:90:
4e:f1:80:48:c2:e0:1a:e6:d9:23:b3:41:82:e0:c7:
90:10:dd:64:51:75:95:07:23:58:79:64:3c:f4:fa:
40:c3:44:fa:74:06:8f:63:74:6e:3c:58:ce:8a:3c:
4a:76:f8:a8:9a:3c:2f:7f:a9:23:b4:39:5b:21:f1:
67:84:4d:8e:38:bb:c3:63:57:59:57:95:08:74:45:
7f:89:29:2d:c6:f9:d6:3f:8b:3f:f8:f3:ac:42:c0:
e5:c9:23:87:2b:47:5a:88:f8:9e:7c:ff:3b:8a:f3:
e8:fc:aa:07:08:ab:67:67:55:04:6c:b4:9d:c0:b5:
24:2b:a1:cf:6a:44:7a:2d:51:40:48:9e:16:08:54:
62:8a:6a:88:dd:c6:cd:19:64:54:41:57:7e:ed:b8:
66:27:3a:96:b7:00:26:3b:22:78:ac:96:27:b5:2a:
6a:e6:36:ff:d2:10:89:75:c1:b3:a5:3d:c7:ae:0e:
bc:39:88:59:0a:5e:06:62:4f:37:e9:a1:2a:62:50:
fd:69:70:7d:1e:a3:1d:39:52:75:12:fa:3c:00:df:
79:5f:cd:45:e6:59:4c:b7:de:6f:12:e0:e4:56:0d:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:13:54:AC:8E:79:17:F9:51:C2:A1:F5:42:D9:30:0B:A1:AE:16
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20323139343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
33:44:13:43:51:43:81:5f:be:77:4c:12:cb:e8:5c:c3:7b:f7:
96:70:c7:59:83:a0:87:99:72:78:45:53:e1:b9:1e:fc:20:d4:
5a:33:8b:86:7b:d9:ae:04:f4:7e:bf:77:f3:3d:a7:08:84:11:
c4:8e:e6:aa:bb:9f:cc:cc:dc:73:7b:7d:92:38:74:7c:9f:5a:
88:fb:de:a1:e9:f0:69:a4:30:a7:e9:dc:eb:bd:31:c2:82:2a:
f6:b9:d3:bb:89:57:ae:7c:eb:e1:6a:e8:12:9c:38:12:35:a8:
ea:8b:38:2a:65:45:78:52:e5:0e:91:db:b0:3f:a5:1d:5f:a3:
8e:58:c1:e3:4d:e3:4b:35:09:a0:dc:1a:6d:24:60:86:73:7b:
18:85:6f:e7:f4:b9:d2:d8:84:6f:75:7b:32:01:99:36:ad:8a:
da:18:b3:7b:b0:3c:46:17:0a:48:6a:fe:5d:1f:02:ef:54:ff:
3e:f5:05:8d:ae:42:b2:bf:e3:de:82:49:ce:20:02:1f:1c:a8:
ad:a5:14:98:54:7b:a4:75:08:ac:25:f5:3c:c8:3d:f2:7b:18:
85:2c:f4:22:e9:76:49:f6:f4:ac:c6:0e:f9:75:fb:ad:ce:03:
ee:f0:51:6a:10:3d:21:c2:2e:8a:36:77:c1:fe:3c:2d:ec:b0:
81:78:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:15 2026 by rpki-client