Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e203631353936.roa
File: 322e35382e38372e302f32342d3234203d3e203631353936.roa (raw, json)
Hash identifier: DqkOkBW2woP2N8YHrabfFdqR1xr69WhJQBP7HpN+bxQ=
Subject key identifier: C8:64:80:13:65:D6:C9:3F:C2:DF:DA:0A:31:29:86:1D:D1:BB:F4:DF
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 4DE3234E2C551DBAACE7D6967BE441756BD4AEB0
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e203631353936.roa
Signing time: Mon 05 Oct 2026 22:49:35 +0000
ROA not before: Mon 05 Oct 2026 22:44:35 +0000
ROA not after: Mon 04 Oct 2027 22:49:35 +0000
asID: 61596
IP address blocks: 2.58.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:42:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e3:23:4e:2c:55:1d:ba:ac:e7:d6:96:7b:e4:41:75:6b:d4:ae:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 5 22:44:35 2026 GMT
Not After : Oct 4 22:49:35 2027 GMT
Subject: CN=C864801365D6C93FC2DFDA0A3129861DD1BBF4DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c3:4e:3e:05:cb:f9:4d:c5:4d:95:59:97:b3:
ff:d5:29:7c:68:98:81:11:f4:57:19:2b:58:65:84:
d8:73:f1:6e:af:51:72:05:12:51:9f:3c:12:69:92:
9b:80:fd:8c:93:57:03:a6:de:d6:ef:b8:fb:63:79:
2c:9f:de:68:ba:b7:43:d4:6f:77:2d:f7:23:18:c7:
f0:21:90:6c:d0:64:87:f0:39:23:ac:9c:6c:63:ac:
d2:ad:e0:2f:d6:d9:55:f5:ff:29:4f:42:4e:c8:a6:
e9:59:65:39:52:78:57:02:39:4f:26:ed:11:2f:53:
c0:6c:0a:37:8a:1d:bd:be:82:f2:02:5e:91:98:3b:
d9:2d:5d:b9:3f:0f:87:c3:55:d5:c2:b3:84:41:df:
3c:d3:1c:15:4c:88:3c:b9:78:fe:7b:21:59:21:22:
c9:83:7d:ab:38:e9:d2:ed:ab:ca:3a:20:77:81:41:
75:28:91:8b:9b:2b:43:a5:92:55:27:4d:fe:50:58:
36:9a:1d:91:92:cb:08:df:b7:e1:77:58:18:83:4c:
26:e9:58:00:c9:e1:74:de:67:ce:21:f2:86:14:08:
d9:d9:e3:f2:d1:df:e8:25:36:ac:1a:a1:3f:16:87:
69:f3:1b:2f:d8:cb:c2:8f:a0:25:2a:e4:95:8e:be:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:64:80:13:65:D6:C9:3F:C2:DF:DA:0A:31:29:86:1D:D1:BB:F4:DF
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e203631353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.87.0/24
Signature Algorithm: sha256WithRSAEncryption
38:1d:70:5f:62:dc:c0:cb:26:f1:1c:90:15:61:a4:a7:f2:55:
82:b8:f9:79:25:be:99:d7:31:b4:c9:fd:a3:10:ee:9e:eb:40:
59:e3:bb:ee:ff:0a:0c:4d:92:14:a4:a9:31:e5:83:0a:32:7e:
b0:33:00:ea:24:bc:5b:c9:f0:ca:10:8a:57:33:26:16:ba:23:
db:15:c6:d8:f1:05:7f:f5:49:5f:4d:95:b5:c4:04:12:0a:b2:
73:29:8b:5a:f9:e5:be:87:d3:61:fb:26:35:81:84:6e:b7:c3:
8f:f1:37:69:5d:d8:7f:3a:db:e3:70:ee:5c:f3:9b:50:2d:1e:
03:1a:0f:2d:f4:ed:c0:7b:f1:d1:d4:49:19:d4:2f:7d:85:07:
0d:d6:ca:57:39:55:b6:e0:af:b8:41:78:48:30:01:59:8f:7d:
73:e4:9d:b8:de:b6:0b:f8:0f:17:80:5d:3b:1c:bf:19:1e:9f:
22:69:7d:dd:d8:7c:a2:fd:1b:f0:59:4b:40:d9:a1:76:33:fc:
e2:f1:52:79:b3:c5:ed:80:f3:02:c7:9d:0a:8a:20:d6:fe:23:
cc:49:8f:0f:6c:15:e6:a3:24:77:62:a8:a4:9f:74:c9:4f:87:
60:19:56:cb:3c:07:7f:3b:53:4b:89:62:f7:6f:ad:9b:43:64:
22:19:0b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:22:49 2026 by rpki-client