Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32332d3234203d3e20383334.roa
File: 322e35392e36322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: U8K8ByMMhjORRMnN107C0qHzPl2EMue6t1DEVbbMMv4=
Subject key identifier: 13:94:61:51:3A:8A:4F:6F:A1:28:64:88:8C:68:30:E0:4E:01:2E:AD
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 70CC387F4467ECE51E9E3342E4BC0E5A57C47494
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32332d3234203d3e20383334.roa
Signing time: Tue 28 Jul 2026 00:06:40 +0000
ROA not before: Tue 28 Jul 2026 00:01:40 +0000
ROA not after: Tue 27 Jul 2027 00:06:40 +0000
asID: 834
IP address blocks: 2.59.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 01:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:38:7f:44:67:ec:e5:1e:9e:33:42:e4:bc:0e:5a:57:c4:74:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 28 00:01:40 2026 GMT
Not After : Jul 27 00:06:40 2027 GMT
Subject: CN=139461513A8A4F6FA12864888C6830E04E012EAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:aa:99:7e:0a:06:99:14:6d:fa:8e:6e:9c:16:
f5:6c:8c:2e:25:15:ac:f2:ba:0c:2b:ad:a9:e0:21:
47:20:6c:56:75:26:7b:e2:25:48:d1:3c:d5:e7:d9:
c4:82:78:20:59:1d:b8:87:55:02:70:88:23:77:62:
f9:27:f1:1a:16:52:f5:0f:0a:e2:44:5a:ec:86:5e:
f3:b3:06:cb:c1:51:11:6e:e9:c5:8b:42:3b:4e:59:
83:fc:a4:0b:ca:6b:ea:b4:65:a9:7c:4b:e3:14:94:
3e:64:d4:b1:e4:64:a8:94:4d:29:88:f3:6f:91:c1:
05:db:70:b2:b8:01:78:8b:bf:9e:05:00:e8:d3:a2:
a9:06:a8:54:dc:d4:b4:e7:12:4e:1f:aa:54:c2:b7:
3a:2e:17:53:d1:98:fe:ec:43:42:5b:29:bb:8d:7a:
a9:df:99:78:ec:54:85:5a:05:28:f0:af:fe:30:20:
9b:15:95:e4:f9:15:20:ca:8d:ae:98:2d:e4:17:3c:
da:95:65:f6:34:e7:44:54:2b:52:d2:9a:09:80:2e:
0e:08:f2:3f:e4:2b:b5:f8:b2:d3:1a:4a:1b:be:e2:
61:5f:52:ef:b3:39:da:9f:44:c6:a8:74:29:f3:b6:
23:0a:23:43:40:25:0a:ee:3e:cf:fb:36:c2:0b:b6:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:61:51:3A:8A:4F:6F:A1:28:64:88:8C:68:30:E0:4E:01:2E:AD
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/322e35392e36322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.62.0/23
Signature Algorithm: sha256WithRSAEncryption
00:88:56:d8:99:86:f7:1a:21:e7:eb:3e:0d:32:8d:7c:55:6b:
7d:09:04:64:b5:35:46:3f:a3:06:71:c0:c1:0f:88:94:98:dd:
6f:72:0b:f3:c4:da:58:72:e7:cf:ff:63:d0:c6:da:51:a8:60:
6e:41:51:b4:74:89:b2:0b:d9:72:53:79:7c:e1:5f:96:0d:13:
e0:43:2f:b8:cb:51:7c:b4:7d:d7:e6:11:9c:72:3e:ff:bb:78:
58:d5:ef:50:c7:26:bb:05:f9:0f:ff:c2:c1:31:40:29:7b:78:
76:16:09:26:0a:f2:3e:6b:50:69:d0:f2:a7:4b:dd:e9:56:28:
c7:75:dd:28:97:62:ee:1e:4b:d9:f3:01:d7:71:68:b7:66:bc:
55:5d:9f:de:e2:05:b6:5b:3b:d2:d4:81:13:dc:22:5d:1a:66:
51:07:20:64:19:6e:28:dc:64:4e:c7:39:28:8b:42:d8:75:b3:
e2:d9:86:89:1c:0e:17:f2:b5:d0:39:31:c1:39:15:74:02:30:
ed:65:f4:cb:e4:77:69:b4:9b:70:96:ee:39:a9:c4:cb:14:0d:
6a:50:16:8f:20:a6:45:94:eb:45:9d:aa:1d:28:aa:e5:43:47:
65:d9:f6:4f:6f:de:10:98:e8:72:68:f4:de:d4:b9:26:67:f9:
77:0d:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:45 2026 by rpki-client