Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135382e302f32342d3234203d3e20323136323533.roa
File: 322e35392e3135382e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 0SifUp88UPsd53XXdsAW5F0ht83fGQdeTNahJYh4xYI=
Subject key identifier: 38:A8:AD:9D:2E:7B:07:9F:4E:B0:2A:46:7F:07:50:F8:18:C1:10:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E7139AB1F2A72BFFEFB2304B2A780EC9D97CFB9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135382e302f32342d3234203d3e20323136323533.roa
Signing time: Wed 23 Sep 2026 20:00:45 +0000
ROA not before: Wed 23 Sep 2026 19:55:45 +0000
ROA not after: Wed 22 Sep 2027 20:00:45 +0000
asID: 216253
IP address blocks: 2.59.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:71:39:ab:1f:2a:72:bf:fe:fb:23:04:b2:a7:80:ec:9d:97:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 23 19:55:45 2026 GMT
Not After : Sep 22 20:00:45 2027 GMT
Subject: CN=38A8AD9D2E7B079F4EB02A467F0750F818C11018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:2c:c6:e6:6d:4e:e0:75:15:24:40:55:75:
3f:71:92:a1:04:ec:36:bb:dc:68:11:c3:a1:65:fd:
d8:31:9a:04:36:92:a5:e1:14:4a:8d:39:0a:e5:13:
18:43:ac:c3:05:be:40:b2:c3:e6:7c:a8:b6:52:96:
ab:dc:31:75:19:e7:b9:1e:8d:74:93:6a:0c:07:77:
33:21:6b:3f:49:64:ce:37:e0:f8:fd:64:23:31:11:
d4:97:03:5e:28:a0:53:e0:35:ed:9e:70:b7:91:5e:
fc:b1:0a:0f:ac:34:aa:df:55:04:4c:e7:23:82:ed:
d3:4e:4b:04:53:79:2e:fc:d0:75:50:05:22:b5:b8:
e6:5f:af:31:90:d1:8f:90:f5:d0:15:fc:31:47:25:
3a:88:28:87:76:63:b1:e9:0e:84:38:4a:d3:23:40:
50:96:21:81:c4:f3:c5:a5:1f:24:0b:23:1f:94:26:
21:e6:23:e9:78:9b:dc:6d:e1:44:d8:d1:49:4a:b1:
96:2c:ec:8f:59:2c:f3:ce:4c:60:e3:b8:07:ab:b4:
57:bc:9e:61:15:00:97:84:74:0e:35:c1:ec:cd:6b:
f9:18:b7:2c:eb:3c:d1:14:01:a3:b3:df:0c:ca:2c:
96:36:a6:f8:94:74:0f:73:ce:cb:59:f1:48:e3:36:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A8:AD:9D:2E:7B:07:9F:4E:B0:2A:46:7F:07:50:F8:18:C1:10:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135382e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.158.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0c:ce:ff:52:95:04:fd:2e:6e:f7:03:0d:b1:96:be:94:23:
e8:2c:b5:ce:5f:57:61:5a:f3:a0:17:f9:ac:2f:ed:ac:6c:6d:
dc:38:5f:68:eb:0f:73:ea:d9:f0:0b:54:b5:a6:49:f4:88:42:
06:b2:7e:49:ba:59:96:7d:dd:4c:dd:1b:31:6a:24:18:82:b1:
af:ae:7e:18:c4:ed:c6:7e:04:8b:50:b7:2b:b6:8b:e0:4f:b6:
12:dd:0c:51:28:33:26:6f:54:07:e9:d9:fb:3e:cc:73:84:a8:
02:f6:bd:68:b9:99:e3:48:c6:46:7d:46:7c:4d:e8:bf:48:cd:
b4:93:dd:90:b1:bd:3a:79:cd:d8:12:42:c1:6a:38:ff:59:c7:
fa:0c:11:d4:cd:1a:a8:5a:a6:16:bd:de:97:e8:32:5a:e1:d4:
ad:da:aa:b7:33:8d:13:36:3f:24:2d:4d:83:f9:47:0f:52:db:
87:e5:b7:7e:ef:c4:1d:d4:06:01:20:89:97:14:ff:3a:87:dd:
dd:31:05:27:0d:62:00:ea:bd:c6:f0:0c:80:a3:89:ec:08:e3:
2a:f0:0d:3f:91:c5:88:e1:8b:84:aa:39:89:6d:a9:89:14:0e:
5a:71:31:23:42:24:88:41:e5:7e:38:1c:fc:5f:ef:d8:06:e1:
67:9f:e6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:30 2026 by rpki-client