Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e203631353936.roa
File: 322e35382e38372e302f32342d3234203d3e203631353936.roa (raw, json)
Hash identifier: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=
Subject key identifier: 27:88:0D:2C:DC:8D:B5:82:26:FE:79:A7:15:7D:BA:5D:F9:82:78:62
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 63F25AF5709FE1D87A534C3DD9B566781C5F72BE
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e203631353936.roa
Signing time: Mon 03 Nov 2025 22:41:55 +0000
ROA not before: Mon 03 Nov 2025 22:36:55 +0000
ROA not after: Mon 02 Nov 2026 22:41:55 +0000
asID: 61596
IP address blocks: 2.58.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f2:5a:f5:70:9f:e1:d8:7a:53:4c:3d:d9:b5:66:78:1c:5f:72:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Nov 3 22:36:55 2025 GMT
Not After : Nov 2 22:41:55 2026 GMT
Subject: CN=27880D2CDC8DB58226FE79A7157DBA5DF9827862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:49:06:d2:51:f9:57:ae:d1:26:ac:09:7f:
31:99:a6:13:12:ff:fd:b8:7a:cf:d9:2e:b1:93:bc:
dd:dc:0d:8c:1d:8f:d4:b1:d0:0c:87:63:e6:36:55:
2e:3e:0c:19:c7:6c:53:60:fa:ac:95:06:bb:94:09:
40:a9:51:93:27:91:4e:2d:42:e4:fa:49:bc:1b:ad:
6b:6a:4c:a0:b8:df:45:f7:f4:b0:fa:b4:8d:22:e5:
96:b8:95:46:4f:1d:35:66:56:a9:9b:13:cf:18:10:
8d:61:e3:ac:fa:ad:1f:61:45:0a:10:d6:ed:22:88:
00:ae:79:04:fe:60:48:5f:5c:35:77:05:93:98:90:
93:3a:ad:7e:31:b2:6d:cf:15:4a:c4:56:de:3b:ba:
c1:53:a2:60:ec:33:f7:05:b1:d2:ea:02:28:8e:94:
17:08:8e:a7:c8:c6:25:df:34:4f:ce:82:f8:04:71:
43:23:a9:f9:b4:ec:2b:f0:00:6a:6a:da:34:4d:89:
b5:b6:f8:cb:60:a0:0f:01:24:de:37:7f:d2:c9:d6:
b4:39:40:3f:71:68:4b:c6:d7:42:13:14:44:cb:93:
8b:bc:e5:29:8b:6d:c8:3a:6b:e6:9c:bc:ba:af:14:
e1:77:85:d3:df:e3:2c:7d:f8:61:86:11:49:9e:7a:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:0D:2C:DC:8D:B5:82:26:FE:79:A7:15:7D:BA:5D:F9:82:78:62
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38372e302f32342d3234203d3e203631353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.87.0/24
Signature Algorithm: sha256WithRSAEncryption
26:04:3d:5f:4a:5c:dd:e0:4c:45:f7:fd:25:73:11:28:ef:eb:
75:ad:d6:a5:ed:ef:9c:08:1d:3c:13:a9:db:f2:1c:09:03:4d:
39:b0:fb:b9:67:4b:ff:a5:49:fc:33:86:e8:ce:2c:43:39:c3:
e2:e7:a4:f3:f8:d7:40:19:e2:b6:6e:ce:6f:14:07:96:75:45:
2b:93:5d:14:b5:6a:7e:d0:73:ed:d9:cf:d3:66:6e:24:85:2e:
24:b5:32:ab:85:08:dd:55:14:03:52:af:89:35:e3:05:78:3f:
41:1b:8d:df:3e:b9:0d:e3:9f:06:ff:81:4e:fd:c2:bd:8c:2c:
bb:d2:76:50:46:e4:76:7b:32:92:9f:bf:c9:13:63:c5:cd:b3:
6a:a3:70:a3:de:1a:44:0f:ad:30:3e:8e:49:28:58:a9:96:b8:
00:6b:32:db:56:f9:3f:e5:39:72:7c:e5:60:0a:a6:32:55:11:
01:bd:41:0e:32:44:43:68:f2:ee:e8:23:00:0b:05:9b:9b:ad:
99:2e:35:c3:79:69:38:e3:b0:41:de:00:6d:64:ca:04:4c:23:
50:d6:3a:b6:1b:3e:1d:46:a2:cf:70:00:d8:cc:ba:29:a0:99:
60:e3:10:62:e0:ce:ee:d9:6d:53:32:9e:22:67:74:a7:8f:c8:
8a:dd:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:26:37 2025 by rpki-client