Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33332e302f32342d3234203d3e20323033333830.roa
File: 322e35382e33332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: 7mo5pgPAMNhKEIcg380g9RPykAPTn+GZl/s/r+e/QZg=
Subject key identifier: A1:82:55:69:E3:7A:D0:4F:2A:4B:78:38:32:A5:BA:2B:1B:AB:CF:59
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4E6D3EE467BA41FC9CB7E3A51EA5A294541280A5
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33332e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 16 Oct 2026 11:16:40 +0000
ROA not before: Fri 16 Oct 2026 11:11:40 +0000
ROA not after: Fri 15 Oct 2027 11:16:40 +0000
asID: 203380
IP address blocks: 2.58.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6d:3e:e4:67:ba:41:fc:9c:b7:e3:a5:1e:a5:a2:94:54:12:80:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 11:11:40 2026 GMT
Not After : Oct 15 11:16:40 2027 GMT
Subject: CN=A1825569E37AD04F2A4B783832A5BA2B1BABCF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:0b:8e:a4:aa:4f:0e:f4:60:e3:da:b3:c1:
6e:90:9d:76:f9:db:03:b3:25:14:21:85:82:ff:86:
20:87:3f:55:36:6f:52:68:0c:34:7e:49:fb:20:0d:
db:c7:ae:08:46:e3:2d:28:d2:ab:eb:f6:ca:54:39:
51:0c:0d:83:57:f6:dd:0d:df:a0:4b:00:ca:45:9e:
af:79:43:3d:51:bf:2b:51:33:94:fe:7a:66:c6:51:
30:ae:71:dd:b8:8b:d8:46:bc:df:5a:16:96:33:c4:
fc:e3:a4:3e:24:3e:77:08:c5:39:61:55:54:79:93:
44:51:bd:75:62:05:96:42:7f:8b:55:29:12:84:5e:
18:9c:4c:3d:b4:b2:9a:fd:77:b1:84:43:b7:d2:08:
97:5c:6a:6c:4e:18:a6:5f:4e:75:bb:a4:e6:2f:b3:
21:29:bb:70:cd:82:da:03:7c:eb:f9:33:6d:28:1a:
48:30:94:34:a6:03:4f:30:c2:71:ef:64:e3:29:f6:
3e:2c:ab:b4:51:fe:53:ab:3c:9e:cb:39:58:ca:bb:
a3:89:81:ab:4e:08:78:fe:d0:34:28:08:2c:95:67:
23:d1:c9:2c:b4:20:0c:85:07:80:2d:23:72:6c:76:
41:09:2e:2b:42:a8:1f:03:4f:92:df:d3:e0:cb:2d:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:55:69:E3:7A:D0:4F:2A:4B:78:38:32:A5:BA:2B:1B:AB:CF:59
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.33.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2e:52:4a:2a:cb:a1:ce:30:a7:5a:86:b5:47:1e:ee:aa:51:
22:b0:d6:c9:ef:68:6a:2f:ea:6f:38:90:68:ab:eb:c6:3b:ce:
74:b5:1d:2b:50:c1:f7:af:c3:2f:af:d3:73:de:7f:aa:ab:0d:
38:7b:f5:c1:7d:38:fe:1b:2d:3d:e6:f1:e1:4b:74:f9:9d:de:
d2:83:ed:8d:4f:d3:e4:30:88:a1:5d:1e:ad:85:a5:2d:7e:fa:
17:a3:89:2b:9a:56:d0:4e:81:4a:c6:df:d1:5a:a1:c0:8f:40:
95:bc:37:a1:89:af:79:0b:37:50:8a:f1:11:33:61:14:e4:35:
2c:a7:1c:c3:87:3b:6d:25:cb:c3:a7:ea:67:a6:2f:9b:ac:b2:
55:ab:ae:70:ef:e4:c1:1b:e3:ae:c8:9e:c2:30:07:8e:c3:07:
15:7d:c3:13:c5:ee:56:78:25:a7:aa:34:40:43:80:17:c2:ca:
80:a4:fc:b1:02:49:7e:be:75:3a:d1:cf:6d:91:bc:b8:9b:76:
7b:01:96:3a:22:bf:46:f2:d6:bf:7f:8c:3d:4c:9c:91:24:79:
f2:b5:17:82:b0:17:5d:dd:0e:47:02:77:ff:58:ad:9f:6b:2f:
6f:7a:fd:72:85:92:ea:5e:f1:95:71:4f:a6:5f:5f:95:fe:83:
40:74:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:38 2026 by rpki-client