Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e20323634343039.roa
File: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (raw, json)
Hash identifier: iUAlfRBN5KS/1VqvPfEgfqMU6CFwcD1SlH+jygOFSU8=
Subject key identifier: 1B:59:A5:E8:C7:56:86:B5:9B:22:98:84:97:C7:08:E9:48:3E:3E:5A
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 41408DFD394203898C54B3631D579E40E63B1D69
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e20323634343039.roa
Signing time: Mon 05 Oct 2026 20:49:35 +0000
ROA not before: Mon 05 Oct 2026 20:44:35 +0000
ROA not after: Mon 04 Oct 2027 20:49:35 +0000
asID: 264409
IP address blocks: 2.58.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:40:8d:fd:39:42:03:89:8c:54:b3:63:1d:57:9e:40:e6:3b:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 5 20:44:35 2026 GMT
Not After : Oct 4 20:49:35 2027 GMT
Subject: CN=1B59A5E8C75686B59B22988497C708E9483E3E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:0e:7f:ae:14:05:9f:9b:87:30:d4:68:de:
5d:ce:60:03:3b:0a:ae:99:36:d4:26:aa:da:60:e9:
bc:2c:21:01:13:aa:f8:f8:6c:b1:fa:02:84:49:ce:
3e:56:2a:37:fd:fa:fb:d4:5c:cc:b2:97:76:12:ad:
1a:57:d1:bb:20:70:f5:32:aa:af:b6:81:54:91:c1:
c6:bc:69:8c:f5:f6:53:14:97:cc:0d:3c:49:86:d6:
6d:3a:40:de:f3:f5:01:d2:38:70:28:6e:63:73:dc:
08:05:6c:ce:d2:f1:46:d8:c8:1b:1c:a1:ad:4c:2f:
85:f9:b1:9b:c8:41:e3:39:dd:98:a9:10:03:03:a6:
da:01:13:c2:fa:8b:60:c5:23:f2:52:00:df:9b:0e:
d3:54:07:8f:4a:f0:39:70:88:7b:fb:bc:1d:33:cf:
71:05:82:61:13:cb:86:25:62:2e:f5:42:d1:a4:bd:
fd:05:4c:4e:25:ff:38:67:85:24:97:c4:eb:0b:85:
83:ce:16:40:5e:36:58:b5:0d:a0:65:af:e5:b5:66:
11:cf:cb:dc:84:58:38:24:ae:f3:a9:a0:9e:6a:14:
21:e6:7f:bb:b9:cc:ec:49:b3:1a:84:75:af:a7:f0:
25:49:e7:fe:99:b9:be:35:33:f9:19:e5:ed:b0:ed:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:59:A5:E8:C7:56:86:B5:9B:22:98:84:97:C7:08:E9:48:3E:3E:5A
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e20323634343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.87.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ef:9f:12:d0:24:a9:74:3e:23:d5:eb:a6:f7:cf:7a:5a:d1:
56:b6:dc:84:96:64:2c:26:d8:29:02:57:38:59:a5:3d:39:ba:
74:d0:33:98:8f:96:0d:ae:94:5f:39:92:26:bd:50:45:2e:e5:
d9:df:18:c7:56:e9:dc:98:23:bf:2a:80:2e:40:d6:1b:06:39:
30:4d:61:1f:93:20:b9:a0:de:0b:89:d4:2d:16:36:25:7f:ee:
9f:b0:f1:95:ea:e5:f4:a9:b7:d5:ec:76:32:30:ad:d7:14:6e:
3a:c1:37:9b:79:c5:13:4c:fc:3b:31:cd:34:a3:ee:9e:a7:ec:
cf:a4:ca:84:92:c2:58:c2:31:f6:f0:fd:26:b2:ec:84:30:89:
23:21:9c:bb:53:30:8b:8f:22:49:3d:3e:9a:b5:34:42:1b:be:
10:f1:6c:19:35:5f:ea:6f:6d:17:6f:f0:1d:4c:81:97:e2:b5:
a9:f1:6d:d5:19:c3:a7:13:da:b3:6b:eb:33:a1:77:cd:16:fc:
2e:88:00:65:3b:86:a0:04:c5:1b:e2:92:c5:77:fc:08:ab:85:
e7:80:de:24:dc:f8:16:7a:36:5e:d7:e0:75:3e:3e:e7:25:9e:
15:3e:3e:98:a2:76:12:81:91:30:dc:3a:0f:97:63:d7:46:01:
27:0b:22:fa
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQUCN/TlCA4mMVLNjHVeeQOY7HWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjEwMDUyMDQ0MzVaFw0yNzEwMDQyMDQ5MzVaMDMxMTAvBgNV
BAMTKDFCNTlBNUU4Qzc1Njg2QjU5QjIyOTg4NDk3QzcwOEU5NDgzRTNFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+LQ5/rhQFn5uHMNRo3l3OYAM7
Cq6ZNtQmqtpg6bwsIQETqvj4bLH6AoRJzj5WKjf9+vvUXMyyl3YSrRpX0bsgcPUy
qq+2gVSRwca8aYz19lMUl8wNPEmG1m06QN7z9QHSOHAobmNz3AgFbM7S8UbYyBsc
oa1ML4X5sZvIQeM53ZipEAMDptoBE8L6i2DFI/JSAN+bDtNUB49K8DlwiHv7vB0z
z3EFgmETy4YlYi71QtGkvf0FTE4l/zhnhSSXxOsLhYPOFkBeNli1DaBlr+W1ZhHP
y9yEWDgkrvOpoJ5qFCHmf7u5zOxJsxqEda+n8CVJ5/6Zub41M/kZ5e2w7XqjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUG1ml6MdWhrWbIpiEl8cI6Ug+PlowHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzIyZTM1MzgyZTM4MzcyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNDMwMzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAACOlcw
DQYJKoZIhvcNAQELBQADggEBAHHvnxLQJKl0PiPV66b3z3pa0Va23ISWZCwm2CkC
VzhZpT05unTQM5iPlg2ulF85kia9UEUu5dnfGMdW6dyYI78qgC5A1hsGOTBNYR+T
ILmg3guJ1C0WNiV/7p+w8ZXq5fSpt9XsdjIwrdcUbjrBN5t5xRNM/DsxzTSj7p6n
7M+kyoSSwljCMfbw/Say7IQwiSMhnLtTMIuPIkk9Ppq1NEIbvhDxbBk1X+pvbRdv
8B1MgZfitanxbdUZw6cT2rNr6zOhd80W/C6IAGU7hqAExRviksV3/AirheeA3iTc
+BZ6Nl7X4HU+PuclnhU+PpiidhKBkTDcOg+XY9dGAScLIvo=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:07:10 2026 by rpki-client