Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38362e302f32342d3234203d3e203432383331.roa
File: 322e35382e38362e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: 2T8d9j//ixeFGVAUX0jaZjAvKikAyceNqE4eC70GAlk=
Subject key identifier: 86:A8:CB:A1:12:BD:B3:A6:12:C9:E5:DE:90:3E:5A:59:A4:85:78:1A
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7E963F9E964EA0B4120EF5D6C7EAB1B618D210CE
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38362e302f32342d3234203d3e203432383331.roa
Signing time: Mon 05 Oct 2026 16:49:35 +0000
ROA not before: Mon 05 Oct 2026 16:44:35 +0000
ROA not after: Mon 04 Oct 2027 16:49:35 +0000
asID: 42831
IP address blocks: 2.58.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:96:3f:9e:96:4e:a0:b4:12:0e:f5:d6:c7:ea:b1:b6:18:d2:10:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 5 16:44:35 2026 GMT
Not After : Oct 4 16:49:35 2027 GMT
Subject: CN=86A8CBA112BDB3A612C9E5DE903E5A59A485781A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:ba:b5:60:fc:f9:a5:ea:4a:e3:84:d0:63:
45:0c:ad:0a:78:5e:ad:7d:c3:82:48:23:c2:c9:40:
54:6e:e1:9d:2b:ff:72:ee:c6:21:ed:8e:d2:60:36:
4a:c4:9f:42:69:fc:f0:80:ed:7c:15:23:f5:b0:f6:
ad:a6:cc:52:6c:f9:a7:8b:04:a5:62:3d:fa:5b:b9:
29:a7:a4:20:d4:bd:10:ee:b2:cd:26:bd:ca:ae:4a:
16:31:8c:08:91:05:b8:d1:28:11:7f:58:3c:d4:76:
3d:9c:66:63:54:46:af:93:35:f2:0a:ca:8c:45:06:
10:cd:90:d5:cf:3e:d7:be:0f:f6:61:7e:d3:6e:10:
69:ff:9b:40:f0:18:f4:a2:9b:e8:cf:dd:09:9d:90:
db:7b:9a:ce:0b:c0:b1:fe:02:50:62:47:47:0c:4a:
3b:db:6c:98:22:19:26:d6:be:80:51:a0:af:ab:56:
38:07:a0:23:86:98:5b:71:f7:68:23:d5:35:dd:0a:
4f:fd:67:38:95:80:59:70:2f:98:10:c0:18:5b:d0:
5d:c1:c6:7e:a3:d8:29:d1:72:54:0e:73:39:83:9d:
bf:b5:b7:4a:aa:d9:95:c3:94:0f:62:f4:00:91:73:
8e:38:b9:ba:d9:c0:b2:54:ae:96:e2:c2:c2:14:5d:
e5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:CB:A1:12:BD:B3:A6:12:C9:E5:DE:90:3E:5A:59:A4:85:78:1A
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38362e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.86.0/24
Signature Algorithm: sha256WithRSAEncryption
75:9e:8f:fb:b2:c0:0f:36:30:e2:51:7c:50:c4:7d:98:23:c8:
bf:5f:7d:b5:76:fd:c6:69:1f:46:b2:dd:ea:19:23:b5:a7:6e:
ae:fa:e4:02:0c:12:60:48:d8:18:b8:7b:f8:b9:e8:b1:24:3c:
35:aa:8c:f7:15:b9:16:a0:8e:c2:3b:f3:0d:6e:d1:ab:e5:55:
78:66:32:ed:24:1f:f5:58:61:36:d8:d0:87:38:b4:d0:69:65:
f6:65:19:30:50:c6:3a:53:e5:1d:69:a7:f3:87:68:db:18:d8:
ff:8c:bf:74:84:35:a6:82:5b:99:f0:68:db:de:b8:92:b3:d1:
43:dd:fa:de:f8:ae:51:ac:cf:20:bf:f3:24:8b:96:c2:9b:b2:
b3:1f:b1:3f:8e:0e:2e:c7:b9:40:c5:08:98:d1:88:2b:05:8c:
27:51:22:41:d8:5c:7a:c3:83:46:1c:5a:40:a4:c9:1f:c4:1b:
0f:8e:f2:77:c6:4a:66:fd:92:cb:31:9d:66:86:e3:3f:e6:ee:
80:39:9a:78:4e:6a:e2:13:81:f7:43:16:64:ec:5e:18:5d:5e:
8a:c3:58:76:34:72:0e:40:45:da:a7:de:43:bc:98:96:f3:e1:
ce:ce:5a:cf:2b:e8:82:18:f3:f2:6f:aa:9c:a3:a7:3e:7a:f0:
00:e9:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:00:51 2026 by rpki-client