Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e203230343733.roa
File: 38322e3131382e32362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: ehPepp8T9fMxkWHfeM1DFNS3uoU2yxzrYhZCdyk3PwY=
Subject key identifier: DE:4F:C7:27:DD:D6:7D:F7:7B:70:68:D0:DD:D9:94:8A:EA:A8:B2:69
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 59A45EFD27C4BAF1FC86ACB31686FC09B51C7C0E
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e203230343733.roa
Signing time: Mon 05 Oct 2026 15:39:53 +0000
ROA not before: Mon 05 Oct 2026 15:34:53 +0000
ROA not after: Mon 04 Oct 2027 15:39:53 +0000
asID: 20473
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a4:5e:fd:27:c4:ba:f1:fc:86:ac:b3:16:86:fc:09:b5:1c:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 5 15:34:53 2026 GMT
Not After : Oct 4 15:39:53 2027 GMT
Subject: CN=DE4FC727DDD67DF77B7068D0DDD9948AEAA8B269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:8c:7f:1f:ee:df:82:12:b5:2c:3a:be:77:
21:19:90:7f:c6:26:52:5e:12:8b:19:a5:82:37:2f:
4e:cb:29:33:a2:7c:7d:6f:7c:02:5c:04:bf:d3:0c:
88:cb:25:14:d6:4d:c6:8f:a4:a9:3b:1b:aa:19:c0:
c3:00:d8:0f:b7:13:14:73:fb:50:fb:8a:a0:c6:a0:
b4:d5:a5:a5:ab:50:87:06:cd:91:51:1b:8f:31:5c:
4b:6b:91:c4:54:f4:4a:11:9d:a7:3a:08:01:bc:f5:
83:d3:6b:c9:fb:8e:32:e4:4f:15:b5:2d:8a:e2:8c:
fa:d8:29:ed:d6:9e:58:b1:1f:78:27:36:00:2a:43:
6a:50:4a:1d:f1:37:8c:bf:ec:7c:78:db:34:4c:d2:
ac:56:80:6b:80:c2:f3:e4:1d:8c:61:3c:a4:75:05:
03:ed:94:ec:ef:36:da:84:11:8a:71:f3:40:98:69:
53:ba:c5:24:1f:3c:18:dc:46:7e:81:c1:65:d0:ba:
3c:ad:50:5d:a3:b8:0e:22:9f:52:69:85:c0:6d:28:
05:35:c3:21:ac:df:89:7f:d2:a5:42:ce:82:30:ac:
2e:a3:c7:19:62:31:ac:93:1b:d4:4e:17:2e:91:33:
f6:79:c1:0d:58:2c:53:f1:77:b8:34:1b:7e:8d:ca:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:C7:27:DD:D6:7D:F7:7B:70:68:D0:DD:D9:94:8A:EA:A8:B2:69
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:2c:9c:6a:c2:40:be:79:d4:8d:8f:35:35:6b:59:b0:1d:8e:
28:bb:1e:78:c4:01:dc:9f:da:5a:d3:c7:69:10:a6:b4:3d:49:
96:79:01:c7:d4:76:5f:58:27:6e:6f:dc:b5:42:e4:7a:d1:b6:
51:d1:06:cf:7d:64:ad:66:28:d6:4a:75:07:36:f1:6c:e7:c8:
c7:4e:ad:04:c1:8a:06:fc:bc:09:e5:c4:74:c2:d7:e1:54:32:
39:b1:e5:69:dc:35:4f:e2:65:30:f0:38:9d:19:e0:a7:df:48:
c4:b3:0c:59:4f:65:28:44:38:88:18:55:90:c1:20:eb:63:9f:
5d:5e:c6:1c:4c:0b:c8:cf:88:18:c4:1b:86:85:80:1d:eb:24:
19:d8:57:ab:fa:8d:4c:47:52:a0:10:d6:42:00:d3:22:c0:cb:
b9:62:ad:41:cf:a9:34:95:7d:46:b3:d8:ad:e4:72:64:d6:68:
22:35:ee:6d:a9:ed:0c:5a:6f:0a:e3:ed:dc:2c:c1:3c:d8:92:
b6:f2:b4:79:5f:c0:6e:74:41:30:36:28:1e:3f:23:73:e4:af:
ff:17:67:61:34:e9:ca:ec:20:0e:eb:9f:42:f3:52:e2:1a:ab:
a3:af:97:6b:5a:b9:ae:0e:00:68:8c:d5:52:a4:74:ab:94:96:
43:e5:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:29:15 2026 by rpki-client