Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33352e302f32342d3234203d3e20323033333830.roa
File: 322e35382e33352e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: dFCDlV5Y5zVRGXqHZ9KwcYwDlv5csz0Tzycifi0FAHY=
Subject key identifier: 17:BE:7C:00:E6:27:C9:AF:0E:77:A4:06:BD:15:50:7F:09:FD:86:F7
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2C4B260AB1EB169CCD3569B3C93E321FC20DFB15
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33352e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 16 Oct 2026 11:16:43 +0000
ROA not before: Fri 16 Oct 2026 11:11:43 +0000
ROA not after: Fri 15 Oct 2027 11:16:43 +0000
asID: 203380
IP address blocks: 2.58.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4b:26:0a:b1:eb:16:9c:cd:35:69:b3:c9:3e:32:1f:c2:0d:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 11:11:43 2026 GMT
Not After : Oct 15 11:16:43 2027 GMT
Subject: CN=17BE7C00E627C9AF0E77A406BD15507F09FD86F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c3:ec:0a:fc:ea:3a:7c:a1:ff:53:a4:5a:92:
b1:50:f4:f1:bc:c6:e8:9b:78:ca:a8:f3:b7:ab:15:
f4:30:6f:c6:02:c0:d3:66:49:6e:3f:77:ad:84:7d:
60:eb:40:68:0d:3d:42:fa:8a:a8:4a:27:b1:55:98:
72:e1:c3:c1:3c:10:5d:fb:2f:0e:7a:c9:43:ed:1b:
90:4a:60:0a:e7:59:64:b0:30:0e:f4:5b:9d:03:55:
6a:48:62:f1:5d:4a:fc:e2:e2:dc:37:10:97:01:01:
a0:b7:8c:d5:9b:7e:42:7c:15:7f:ca:40:01:5c:c1:
11:1b:e7:d9:d2:44:c2:02:43:e1:c4:cc:78:4a:1b:
f7:a6:38:cd:a9:df:98:78:d4:60:26:82:18:d1:2c:
42:3c:42:99:73:a0:34:83:50:62:cc:72:78:d6:e5:
26:71:79:05:4a:bd:df:1c:5c:d3:d6:f9:3a:f0:7b:
68:3e:07:88:e7:4a:78:02:b1:9a:15:a3:d3:f2:bb:
1d:39:7d:39:18:08:a7:f7:d3:37:58:52:dc:5b:81:
d0:73:5e:15:bb:f1:80:65:5c:75:17:8b:2f:a0:00:
06:3d:dd:99:df:06:54:c4:23:94:f1:f0:2b:8d:ec:
31:4d:51:c4:3f:bf:a2:f1:24:dd:5c:64:78:74:9e:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:7C:00:E6:27:C9:AF:0E:77:A4:06:BD:15:50:7F:09:FD:86:F7
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35382e33352e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ab:b1:9a:7d:64:58:90:9f:17:29:f9:7e:51:82:24:0b:d2:
bb:0a:56:da:fb:59:cf:57:f6:cd:22:3a:35:37:95:67:31:05:
ba:8e:3c:8c:a6:96:d5:8d:21:2e:56:88:48:97:70:c2:e5:98:
d5:03:c2:8c:cf:56:9b:7b:f2:04:90:96:56:13:a5:9b:43:17:
c7:0b:5c:88:95:1f:db:c2:d4:be:4d:e5:23:c4:ce:d4:1a:83:
fa:3c:01:80:13:9f:05:1f:b0:2d:9a:fc:59:56:a7:2a:e4:45:
db:0a:56:4a:8b:4e:80:5a:f8:f3:e9:cc:03:b4:34:7d:5a:60:
85:97:32:1e:b1:d1:d2:a9:bb:65:00:00:d6:a6:68:c5:2b:9f:
66:8a:c8:02:3f:8d:16:74:6e:1b:0f:00:0e:70:6c:b5:9b:5f:
ea:a5:fa:74:c3:db:50:d3:b3:73:de:20:eb:09:6a:e0:20:aa:
7e:8e:bf:82:3e:ec:f4:35:e2:5c:0c:73:a5:0e:c0:10:b8:31:
eb:ce:8a:fa:12:9d:e2:08:d3:03:0c:43:a5:14:46:5b:90:8a:
10:c7:d3:18:8f:a4:76:58:15:56:b0:af:ea:e1:4d:e5:bf:e1:
ec:72:7c:c6:70:4b:01:e6:87:da:e2:39:99:9d:ff:0d:87:6d:
bd:14:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:19 2026 by rpki-client