Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35382e302f32342d3234203d3e2039333034.roa
File: 3132382e302e35382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: jG1FDhOJdHUoixVTUUOe5WGR+SSZrEfd5qIkGJD//H8=
Subject key identifier: C7:9C:D8:6C:5E:83:86:F2:F1:5C:22:14:B2:B4:F5:BA:94:9E:11:9E
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 2786548FD8850186DB39ECD649322DC08AA2D988
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35382e302f32342d3234203d3e2039333034.roa
Signing time: Fri 05 Jun 2026 06:29:11 +0000
ROA not before: Fri 05 Jun 2026 06:24:11 +0000
ROA not after: Fri 04 Jun 2027 06:29:11 +0000
asID: 9304
IP address blocks: 128.0.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 14:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:86:54:8f:d8:85:01:86:db:39:ec:d6:49:32:2d:c0:8a:a2:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Jun 5 06:24:11 2026 GMT
Not After : Jun 4 06:29:11 2027 GMT
Subject: CN=C79CD86C5E8386F2F15C2214B2B4F5BA949E119E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:00:af:5c:e7:18:37:5f:54:07:55:46:9b:
3e:b7:5a:60:5e:5b:4d:08:38:56:b1:ad:05:d9:62:
7c:20:04:99:6d:fb:73:fe:bd:4b:71:a1:c2:9f:70:
7e:d1:ed:8c:69:a9:bd:47:e7:9c:bf:92:2f:91:a9:
51:50:43:d2:96:dc:f0:dc:61:89:fd:98:36:52:0f:
1e:fa:1a:fe:b5:99:4d:9b:74:20:7f:90:79:2b:54:
82:6a:03:d8:b6:dc:8d:6b:c2:31:23:8a:ff:00:8d:
b5:7b:36:17:16:88:8a:fd:94:fe:1e:f8:1b:1b:2f:
7f:94:7d:02:24:bf:a5:8c:09:28:89:2a:83:64:5c:
d6:b0:ec:fc:df:b0:d5:fa:13:1f:05:1a:51:f1:92:
c5:3f:25:ea:40:02:de:61:b3:85:62:7d:a9:f8:2d:
c6:8a:b7:0d:69:9f:c7:86:f3:eb:b2:37:3a:57:06:
ef:8a:62:c2:5d:44:ea:a9:2d:98:32:8d:c0:61:c2:
e5:dd:15:30:09:7a:f7:ba:33:ee:ce:9e:d0:a0:31:
1e:b6:eb:39:6a:70:5e:43:1c:b5:bc:82:81:dc:d6:
df:2a:cb:97:ac:05:f5:3d:bd:a3:ca:10:7a:95:ad:
40:9e:e4:1d:a4:8e:ff:8a:b8:9b:83:ed:51:99:52:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:D8:6C:5E:83:86:F2:F1:5C:22:14:B2:B4:F5:BA:94:9E:11:9E
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cc:12:dd:c7:c5:e4:66:01:02:dd:5b:ff:8b:c5:ef:7f:28:
5c:69:87:a2:38:f6:2f:5e:3b:e5:1e:e5:e6:17:fe:a9:29:bb:
1f:98:2a:de:58:46:0c:f2:4d:e0:f1:94:92:a0:b3:85:0e:ff:
17:19:2e:47:f4:f9:4c:15:15:23:29:5d:17:e0:f0:81:05:d2:
5d:8e:d0:44:24:da:f5:01:0b:56:51:70:11:cf:87:50:3b:81:
b2:e9:72:99:95:9a:0e:c9:8f:92:15:8a:23:f5:55:a9:86:c9:
a8:ca:0d:ed:4f:d3:fe:c9:8c:0e:7e:cb:14:e5:86:1f:41:91:
d9:90:16:11:51:59:93:6c:13:f4:ce:d3:ed:48:9a:35:1a:5b:
00:61:6a:13:dd:6e:13:69:46:0f:dc:40:27:29:91:5e:4d:29:
c8:79:45:05:9c:0a:33:80:01:c4:57:db:6a:b9:49:de:77:41:
d2:fd:2b:bc:dc:c5:5d:5f:e3:f8:41:14:d0:f4:36:3e:15:e3:
f5:07:59:ca:7f:f7:f9:bb:b1:65:78:6f:1c:2f:f3:60:64:01:
73:38:f2:f3:68:a9:f9:9e:b4:87:68:5c:5d:bd:81:5f:fe:45:
c2:89:c8:cd:4c:88:fb:aa:61:d3:e1:22:0a:31:9d:15:3b:38:
69:35:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:16 2026 by rpki-client