Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/352e3137382e3132352e302f32342d3234203d3e203431373230.roa
File: 352e3137382e3132352e302f32342d3234203d3e203431373230.roa (raw, json)
Hash identifier: 2wW5t36NJMTXW3Jrvo3pMIkucCLejHza7QPvifnreNo=
Subject key identifier: C6:51:AC:40:91:C9:CE:12:91:79:7A:03:05:01:75:3F:39:2B:C6:C8
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 723F99FB70ABCD8B3841E3290BFB6E05B01E663D
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/352e3137382e3132352e302f32342d3234203d3e203431373230.roa
Signing time: Wed 07 Oct 2026 15:18:32 +0000
ROA not before: Wed 07 Oct 2026 15:13:32 +0000
ROA not after: Wed 06 Oct 2027 15:18:32 +0000
asID: 41720
IP address blocks: 5.178.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:3f:99:fb:70:ab:cd:8b:38:41:e3:29:0b:fb:6e:05:b0:1e:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Oct 7 15:13:32 2026 GMT
Not After : Oct 6 15:18:32 2027 GMT
Subject: CN=C651AC4091C9CE1291797A030501753F392BC6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:5d:f4:a1:ce:50:f8:4d:57:1b:97:5d:02:
a2:7b:26:ac:35:6b:32:9d:5a:55:f6:ac:da:1b:ff:
81:d9:c4:d5:e7:ce:15:59:1c:0d:42:47:1c:a4:88:
3c:ab:f6:b9:70:48:75:97:c7:e1:35:fe:7d:ca:e6:
5e:ad:4e:de:6b:01:51:b2:f2:b7:4f:b3:a6:5c:7b:
21:03:88:1f:e0:64:e4:0e:69:e8:d2:8e:c7:ae:79:
0c:cd:cd:18:f4:ff:c8:26:e7:5e:14:b7:44:ea:ce:
ee:ec:c6:98:9d:f4:32:c8:89:5d:2b:93:66:70:a3:
14:4d:7d:d3:79:6d:e9:4e:79:60:49:f6:3e:28:0b:
ae:7a:1a:a8:2d:d3:23:31:47:a0:9d:52:37:72:d9:
fb:30:73:84:dd:f5:7e:36:8b:4f:14:28:2d:f2:9b:
16:a8:d3:d4:26:2b:78:86:e9:3e:c6:e6:54:a5:aa:
a6:56:d0:e2:60:82:58:d1:09:50:66:ef:99:45:85:
5c:85:47:90:b6:e8:ed:54:8e:2c:cf:05:a7:14:0b:
a2:4c:dc:8b:a6:45:e7:88:32:81:cb:63:0d:86:fb:
52:ca:c8:b4:65:d3:7a:86:b9:89:b5:2b:a9:4d:84:
11:62:6e:7c:99:04:76:11:a5:33:38:93:e2:1f:d9:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:51:AC:40:91:C9:CE:12:91:79:7A:03:05:01:75:3F:39:2B:C6:C8
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/352e3137382e3132352e302f32342d3234203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.125.0/24
Signature Algorithm: sha256WithRSAEncryption
22:26:40:83:dd:e6:d2:42:2a:72:b8:6f:f4:48:13:1b:24:1a:
17:4f:5b:5f:ee:9e:8d:6c:35:e6:70:0d:e2:4e:47:a4:5b:fc:
78:fc:eb:ce:45:2e:2d:01:a1:b5:92:f9:97:56:a0:1a:19:16:
c6:22:21:a1:51:f0:e9:e2:76:03:fb:73:cf:90:fc:d1:4e:aa:
3a:7f:07:91:df:b8:a9:bf:14:07:2a:ef:a3:90:69:a1:27:d2:
f9:e3:a0:08:0a:e2:6a:95:03:31:f7:5f:cd:27:78:40:94:11:
0d:d1:9c:58:fa:05:e4:90:7c:36:95:fc:7b:d0:82:30:cb:9e:
e2:49:41:89:66:82:f4:bb:cc:3b:43:72:83:48:dc:4b:6d:96:
71:f0:41:a2:c5:85:fc:3b:f1:28:d2:c1:81:c2:2a:90:c2:55:
36:a3:f6:50:71:58:24:23:98:50:c9:87:3d:fe:c6:02:dc:68:
83:e9:9d:bb:a0:35:a9:b2:3c:6c:3a:c9:a3:81:ac:cc:89:22:
79:2c:2a:de:48:c9:3f:26:84:91:f8:fa:e0:e6:f8:48:9c:2b:
95:94:2f:2a:69:eb:04:d7:61:c1:e8:b5:58:c7:9a:5c:5b:46:
23:7f:4a:73:a9:a0:73:24:6b:c7:5e:a2:37:7c:46:46:0c:cf:
fc:92:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:34 2026 by rpki-client