Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35382e302f32342d3234203d3e20313939373431.roa
File: 3132382e302e35382e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier: dPbHho6iTcQIG+0BsC5wZPo2O6v01Il+PGYgWNsq2nE=
Subject key identifier: F9:EE:7D:90:3D:BF:81:91:09:22:CE:26:EE:7D:C7:EE:16:F3:71:14
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 086439BC435743ECC07BB9642BD7F3529640A04A
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35382e302f32342d3234203d3e20313939373431.roa
Signing time: Mon 05 Oct 2026 20:24:52 +0000
ROA not before: Mon 05 Oct 2026 20:19:52 +0000
ROA not after: Mon 04 Oct 2027 20:24:52 +0000
asID: 199741
IP address blocks: 128.0.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:64:39:bc:43:57:43:ec:c0:7b:b9:64:2b:d7:f3:52:96:40:a0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Oct 5 20:19:52 2026 GMT
Not After : Oct 4 20:24:52 2027 GMT
Subject: CN=F9EE7D903DBF81910922CE26EE7DC7EE16F37114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:7b:09:51:5a:c2:f1:2a:7c:27:94:d6:60:
5a:24:42:65:c0:9a:d3:98:24:2b:58:82:40:fe:3f:
83:42:3a:26:25:e3:23:3d:40:6d:88:a6:d3:e6:28:
a4:1f:44:9d:bf:a3:a7:12:b8:74:56:7f:02:18:eb:
20:a2:15:24:36:a3:73:00:4e:c4:65:60:01:4d:d6:
5e:77:e4:73:f7:3a:63:67:43:21:5c:ae:62:00:a4:
af:06:88:0a:a1:85:d4:3e:0a:a7:c3:3a:79:84:35:
ff:b3:cf:92:ca:bb:51:72:03:b4:eb:4c:3c:14:4d:
38:94:d5:1e:a6:6c:7d:8c:b4:64:62:f4:d2:97:6d:
4d:aa:fa:0d:55:1c:b5:a3:9b:31:a4:c1:4d:97:38:
f7:1d:18:f5:c4:e0:d0:c5:96:30:1d:2a:63:52:cd:
df:1f:fe:e4:08:57:fc:37:06:8b:84:93:c0:9d:90:
74:e1:5b:d4:a2:58:af:7c:e3:7d:c0:04:c0:eb:d3:
bd:a5:07:a7:ec:eb:99:70:3c:f7:a0:4a:0a:a6:5c:
92:48:ba:eb:db:64:2d:57:8c:1d:6e:2d:34:b9:0d:
52:8b:1b:b8:d5:56:fd:7a:1d:b9:1a:bc:ef:86:6a:
3f:20:f6:a7:94:64:05:44:e1:df:cb:9b:95:c5:00:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EE:7D:90:3D:BF:81:91:09:22:CE:26:EE:7D:C7:EE:16:F3:71:14
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35382e302f32342d3234203d3e20313939373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.58.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4c:3b:46:d0:8d:00:84:ec:bc:30:0a:fe:31:66:9a:c7:e8:
b5:0c:0b:bc:87:ed:22:3b:8f:26:89:86:a5:89:2b:23:60:8e:
49:8f:59:b8:3b:96:89:3c:62:00:ac:32:93:43:f1:f7:ab:bf:
bf:18:41:f7:fe:25:8f:51:22:9e:ac:b9:68:0d:ce:88:b1:3e:
d4:0a:54:96:66:d3:94:65:b6:c3:d9:7e:7c:40:b5:7b:2c:e1:
4e:06:4c:fd:a2:91:85:c9:2d:68:ee:30:e2:73:f9:e9:7f:32:
df:39:8b:a7:ab:d0:9e:72:ef:e0:fa:6d:d4:8c:dd:49:16:f5:
08:9d:ab:00:97:21:64:3e:69:ed:97:0f:67:7f:19:95:8d:f5:
6e:84:62:df:8c:c2:77:9c:85:cf:87:62:a4:b5:ea:45:06:cc:
4a:12:8b:d3:69:ed:5f:bf:a2:f2:e8:d5:c6:0c:60:c4:d9:50:
e1:40:c3:3e:70:b3:e0:f6:e9:81:98:e0:fa:d5:95:a8:91:97:
84:ff:87:96:88:ca:99:73:bb:1c:12:36:40:e0:96:48:78:b2:
f3:ec:b0:00:3e:8b:a7:ba:64:cc:96:f6:65:a0:ff:4b:78:75:
20:ad:ce:44:8f:21:e3:66:e9:c9:61:9c:cd:af:55:46:16:ec:
8b:74:6b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:54 2026 by rpki-client