Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20383334.roa
File: 322e35382e38352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: j6vNX2hjfs3UtrL6jevhBNyjXKKZeg2jK8SzjBQWxNI=
Subject key identifier: 1E:00:92:4F:60:36:8C:54:46:1F:09:86:B4:A1:06:58:7D:64:08:C1
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2EB29001B49EE548A6673F3D380262CD3A3CA084
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 00:02:56 +0000
ROA not before: Tue 22 Sep 2026 23:57:56 +0000
ROA not after: Wed 22 Sep 2027 00:02:56 +0000
asID: 834
IP address blocks: 2.58.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b2:90:01:b4:9e:e5:48:a6:67:3f:3d:38:02:62:cd:3a:3c:a0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 22 23:57:56 2026 GMT
Not After : Sep 22 00:02:56 2027 GMT
Subject: CN=1E00924F60368C54461F0986B4A106587D6408C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:27:ef:15:eb:99:3d:93:3f:ec:af:7f:33:
ff:c9:b4:8f:7b:f1:34:ed:d2:21:31:b3:d8:40:c5:
85:de:9e:35:10:b0:eb:81:9e:c3:a3:aa:d5:4e:94:
57:42:b7:0f:60:6e:f1:84:e7:8d:11:bc:b2:39:20:
fc:8c:62:59:89:18:8a:a1:da:37:24:b3:a5:c6:08:
22:02:81:68:75:7d:a6:44:ca:13:bd:9b:0e:39:e7:
54:88:fd:db:3a:c6:f9:e4:66:31:01:de:b3:a6:d5:
2c:2b:f1:a3:b6:77:42:06:59:ff:cc:56:09:07:e6:
af:1d:45:e1:c8:a4:52:44:77:35:33:99:4c:14:f8:
49:7d:73:f7:c6:45:eb:59:60:5c:3c:d5:41:bb:66:
b9:8c:e0:67:cb:87:02:ba:7a:d0:70:ec:11:25:4d:
61:66:6b:1d:0b:51:60:cc:d6:ad:3b:38:75:3b:7f:
0f:da:4f:2d:83:5b:57:3b:32:a8:5e:67:98:37:a9:
18:08:a3:e6:10:0b:da:34:d6:56:d2:fa:0f:26:62:
c7:4a:0d:64:51:f0:bd:35:43:22:ac:fc:69:ca:49:
70:bf:e8:be:85:0f:e1:fb:0c:7b:18:83:0a:b9:8b:
ce:d7:cd:4e:b8:5e:af:f6:fd:b3:15:99:7c:54:4a:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:92:4F:60:36:8C:54:46:1F:09:86:B4:A1:06:58:7D:64:08:C1
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
22:da:fd:43:e5:51:5a:de:f6:af:46:b9:eb:c0:78:2e:b4:e3:
fb:9a:03:7d:af:58:6c:2c:85:48:23:10:61:3f:a4:1e:c9:40:
23:41:f4:f2:63:be:44:67:ff:69:c2:17:83:4c:49:6e:a0:a5:
88:2f:c4:2e:a5:6f:8b:c8:df:11:a0:5d:b9:9e:63:a5:cf:9e:
e7:be:6f:a4:3f:54:91:a5:8c:75:bf:81:1c:1b:3b:b2:e9:4b:
cf:f7:e0:6b:1c:be:b8:ec:97:f6:99:b2:1e:b5:9a:b7:71:13:
42:ed:96:48:63:0e:3e:c3:df:e7:8f:c6:53:b7:29:bb:61:f5:
74:d3:11:ed:86:3e:2e:5d:4a:30:b1:c8:6d:28:32:6d:45:f8:
2b:4f:77:e4:61:ff:47:4e:38:86:70:c4:e1:8e:a4:86:14:fa:
15:3e:18:2f:b0:85:b2:79:e1:5b:5a:41:33:8c:cf:23:3a:a8:
16:d6:77:9f:b9:4e:62:90:c9:1d:22:0c:65:4b:94:14:a2:d1:
c6:7d:28:0c:bd:70:61:5d:2f:bc:65:be:e8:76:62:b6:da:95:
7e:d6:7d:84:55:97:b8:15:0f:db:ce:7c:ae:fe:f0:6a:dc:e8:
d0:53:a7:e0:f4:f9:23:87:e6:9b:b4:f0:82:54:a9:41:4d:05:
4f:f8:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:09:10 2026 by rpki-client