Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33342e302f32342d3234203d3e20323033333830.roa
File: 322e35382e33342e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: XCuiWV/x6FxAWufLtG1gMqspCcWWLSwUs1+9ctPafns=
Subject key identifier: C0:8F:2E:8E:CA:30:1E:1E:6D:24:50:44:40:D7:A8:5F:19:C1:85:E6
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 348EE03B3F7E309D4D03B2074CA2EA660F38300D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33342e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 16 Oct 2026 11:16:41 +0000
ROA not before: Fri 16 Oct 2026 11:11:41 +0000
ROA not after: Fri 15 Oct 2027 11:16:41 +0000
asID: 203380
IP address blocks: 2.58.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 07:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8e:e0:3b:3f:7e:30:9d:4d:03:b2:07:4c:a2:ea:66:0f:38:30:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 11:11:41 2026 GMT
Not After : Oct 15 11:16:41 2027 GMT
Subject: CN=C08F2E8ECA301E1E6D24504440D7A85F19C185E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:41:b7:fc:16:f7:07:11:d8:36:5e:7c:26:
e2:36:70:bc:90:e9:6e:00:3b:02:5d:c7:d0:2c:c4:
38:67:1c:f6:8c:ab:67:5d:52:6c:e0:89:56:65:96:
99:9c:56:f4:3b:50:13:73:4d:f9:e8:e5:da:91:71:
07:bb:bc:58:52:ec:66:5c:47:5b:6b:0e:0c:fd:e9:
cf:fc:b1:20:c5:d1:fc:4f:6b:3c:69:6b:6c:f2:7d:
17:50:11:a9:24:36:ce:1a:8b:1b:ee:f5:be:e5:b5:
cf:fe:8a:9a:68:03:0b:4e:57:8b:d7:bf:ee:51:fe:
93:78:d8:71:80:4c:2e:d0:07:48:2c:7b:e8:11:df:
7c:34:64:50:0e:7d:d2:8f:c3:19:0f:6a:60:12:9a:
a2:c7:41:78:48:4b:75:63:e6:11:be:3a:36:58:1f:
7a:26:b5:dc:58:dc:70:7b:e2:c9:fe:74:50:84:fc:
58:0f:14:6e:10:81:2f:fb:3b:d9:d0:bb:90:0a:47:
52:fe:4c:ac:58:ee:b3:3f:17:ee:8a:7f:22:cb:6d:
5c:43:fb:9b:cf:02:c5:dc:9f:b8:43:fc:16:8a:fb:
6b:4e:c0:fe:88:5e:76:fd:66:5a:81:ea:53:31:0e:
c2:82:10:39:69:a4:0f:ef:d3:1a:4e:8f:91:6a:75:
ce:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:2E:8E:CA:30:1E:1E:6D:24:50:44:40:D7:A8:5F:19:C1:85:E6
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33342e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.34.0/24
Signature Algorithm: sha256WithRSAEncryption
84:be:9e:ae:4f:48:73:38:2d:52:d7:4b:92:d7:bf:71:fc:c7:
b6:26:db:67:0e:ef:13:79:9a:55:58:6c:1a:74:83:56:f4:8b:
a5:17:ba:8c:a1:a4:0d:f0:0f:ae:f7:b2:d4:24:d1:56:2a:a6:
b3:2b:5f:29:e9:94:ed:05:6d:27:e0:f0:39:5d:7b:7b:11:c3:
3e:52:c9:63:ad:b9:c7:d1:12:c5:8f:51:31:bc:15:ff:a0:29:
15:cc:4b:f8:87:38:6e:57:b6:e5:33:d4:95:3c:0c:24:ff:fc:
6d:dc:66:99:66:66:7e:65:5f:79:da:f2:0a:a6:3b:47:d0:97:
fd:62:4d:fc:80:49:7f:ef:e1:38:48:53:d0:ba:40:57:f9:ae:
c1:95:64:6d:e1:a9:71:b5:d9:93:0b:bb:8d:5e:82:4d:6d:4b:
1a:97:80:26:6b:6f:71:56:21:43:b9:51:bd:da:d8:fc:f3:a9:
55:88:b9:c1:14:ec:66:a0:b0:99:13:fe:80:7f:b6:58:de:ee:
5d:02:8d:b0:7a:cc:52:35:08:78:b8:1d:f4:0a:70:a7:1c:2c:
31:ab:6c:11:22:f7:82:f0:10:17:83:4e:cc:e0:c1:ce:d9:8c:
dd:79:46:dc:03:b8:fc:86:da:90:9b:bb:f0:c3:97:fb:b2:fd:
32:e1:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:15:29 2026 by rpki-client