Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20323134343833.roa
File: 3132382e302e35392e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: +TWiYnP7E1d41Qo4U5Fnyy9mfsPb5QqnXO8NmiCgsDM=
Subject key identifier: C5:8D:E4:D4:36:78:62:42:AD:BE:4A:E2:56:A3:27:AB:B5:2E:D9:8B
Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial: 2E75F117E2AAE29A11F01D15542EE88AB1B99D65
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20323134343833.roa
Signing time: Mon 14 Sep 2026 12:49:05 +0000
ROA not before: Mon 14 Sep 2026 12:44:05 +0000
ROA not after: Mon 13 Sep 2027 12:49:05 +0000
asID: 214483
IP address blocks: 128.0.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:75:f1:17:e2:aa:e2:9a:11:f0:1d:15:54:2e:e8:8a:b1:b9:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Validity
Not Before: Sep 14 12:44:05 2026 GMT
Not After : Sep 13 12:49:05 2027 GMT
Subject: CN=C58DE4D436786242ADBE4AE256A327ABB52ED98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:bb:fc:ba:19:81:03:da:6c:39:0b:2e:42:
fb:6a:85:b7:15:9b:22:d1:4f:a7:83:49:ff:4b:ad:
d5:77:d0:a1:71:75:13:86:68:2f:88:bb:a1:43:93:
e1:0f:17:fe:30:e7:8b:31:57:21:4c:96:e8:fa:c4:
22:e2:1d:d3:ed:49:e3:58:98:29:88:0f:7d:88:22:
de:14:07:12:86:2b:29:77:a1:fd:73:12:e8:2b:e6:
75:1b:59:84:fd:51:47:61:ea:2b:7a:0d:c2:77:14:
2f:df:fa:f7:4c:c9:ac:39:54:7c:76:1d:61:00:20:
48:01:c4:11:12:39:c4:da:14:4f:2f:90:a5:e0:50:
af:3a:4d:fc:c6:33:d1:a8:4c:35:76:4d:51:c6:35:
46:37:14:bf:c5:42:ac:e9:47:c0:da:fa:b5:b2:c5:
ac:df:7e:5f:18:f0:bc:74:a5:f7:62:60:cf:65:b2:
09:53:83:07:02:7d:55:64:8e:22:56:d0:58:b1:07:
16:47:54:5d:86:77:6b:45:c6:10:02:fa:71:c2:52:
2b:a5:b2:f3:ba:bc:1f:3b:4c:af:4a:8f:64:67:65:
f7:ca:7a:cf:fe:76:02:89:31:44:06:df:63:8b:e6:
18:65:10:7d:f0:f1:de:53:5a:88:82:aa:93:12:bf:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:E4:D4:36:78:62:42:AD:BE:4A:E2:56:A3:27:AB:B5:2E:D9:8B
X509v3 Authority Key Identifier:
keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3132382e302e35392e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.59.0/24
Signature Algorithm: sha256WithRSAEncryption
48:71:ae:29:0c:89:69:8c:e5:91:03:0a:2d:ae:d7:b2:0b:51:
58:8f:99:9d:3f:cb:61:14:52:ab:76:0c:79:d4:7d:e9:f6:63:
12:43:25:fa:29:d2:1f:7b:98:58:00:bb:06:d6:01:6c:7e:46:
7b:bd:51:b1:a3:d2:a6:f6:ff:7b:ae:3c:36:7b:c5:5e:10:6c:
ea:25:03:d4:b6:20:d8:01:3f:0f:10:5a:60:d1:24:1d:50:4f:
c3:98:9b:c3:4c:0f:fc:60:5d:6e:bc:fb:d6:58:2e:84:24:80:
a4:d2:72:90:50:47:db:ac:b0:10:92:c7:25:8b:c1:c7:24:e9:
55:7f:79:63:5d:bf:14:88:91:b2:4e:89:c2:6f:af:b9:14:5a:
c4:b1:13:45:55:2a:f7:bd:c8:2e:ee:13:37:a1:98:6d:68:bb:
d8:9e:4c:f6:b8:55:b9:2f:38:f2:22:74:70:2b:78:86:71:e0:
4f:a0:f9:f5:82:64:79:da:20:ce:18:99:55:d0:90:ec:85:f4:
d0:8d:5c:b1:ba:c0:9d:2c:7d:06:32:18:43:c3:5f:94:5f:7b:
b3:4e:17:83:15:17:67:79:ae:51:bc:90:c7:c2:a6:9a:bd:7f:
a9:29:97:d1:ff:96:3a:db:75:99:4b:61:6f:41:d4:79:3e:90:
00:2f:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:24 2026 by rpki-client