Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20323138353339.roa
File: 38322e3131382e32372e302f32342d3234203d3e20323138353339.roa (raw, json)
Hash identifier: eoSFnjk26AOiA9anCcIkliD88ldcO2hSMd/eJeay9iQ=
Subject key identifier: DC:A2:59:18:0E:2A:3C:78:2E:D6:73:5E:27:22:06:01:45:08:C1:EF
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 3228883ECDE87C076166FF494F8A2F63C68C7268
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20323138353339.roa
Signing time: Mon 05 Oct 2026 13:22:05 +0000
ROA not before: Mon 05 Oct 2026 13:17:05 +0000
ROA not after: Mon 04 Oct 2027 13:22:05 +0000
asID: 218539
IP address blocks: 82.118.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:28:88:3e:cd:e8:7c:07:61:66:ff:49:4f:8a:2f:63:c6:8c:72:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Oct 5 13:17:05 2026 GMT
Not After : Oct 4 13:22:05 2027 GMT
Subject: CN=DCA259180E2A3C782ED6735E272206014508C1EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:07:9a:5c:ec:35:05:b4:1f:20:60:c7:0f:
bb:5b:64:bb:ee:06:1b:c6:a0:4c:ed:f7:1d:55:67:
16:d8:af:5b:46:a0:e4:91:b6:02:d6:5b:0f:bb:44:
2d:b3:74:de:7c:10:2a:8a:c5:6c:0c:2d:1c:89:b0:
dc:1b:5d:7a:9c:75:b0:b9:8b:e8:f1:ef:ed:b9:93:
33:30:e1:d3:1a:1a:25:9f:50:86:63:e6:57:f4:26:
99:68:0f:c6:4c:51:bf:eb:8e:d9:20:00:b6:9c:0c:
e5:91:4f:9b:24:65:da:96:ff:d1:f5:bb:ef:e8:60:
e5:1a:5f:14:52:06:76:29:25:70:69:e8:31:28:2c:
56:92:1f:5d:99:28:b8:1a:32:af:62:2e:9d:8b:52:
87:f4:fe:da:b8:8d:c4:8b:cc:60:42:89:c2:f6:05:
50:81:b0:8d:64:5a:13:d0:64:8a:3e:82:24:1f:98:
6b:16:f1:58:c7:0e:42:9b:ed:0b:92:e3:66:15:de:
67:82:97:47:a0:06:10:66:69:89:7b:4f:8d:3f:35:
db:f5:14:8d:f3:ac:a2:fb:69:18:8d:0e:32:d9:24:
3a:c8:d6:c8:0d:ab:67:f6:45:dc:bc:5c:81:ae:1a:
d3:e0:8f:8b:ae:32:48:a4:64:c5:40:69:46:28:8c:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A2:59:18:0E:2A:3C:78:2E:D6:73:5E:27:22:06:01:45:08:C1:EF
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20323138353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dc:3d:a9:d9:af:47:36:35:e0:42:61:c9:4e:e8:ca:87:d2:
f7:10:84:2b:68:f4:aa:4b:83:f9:05:14:85:a3:35:f8:c8:c8:
ae:18:b8:66:2a:0e:65:cb:79:31:de:16:32:cd:ed:c5:ea:6d:
01:c3:d5:d9:fe:60:a5:18:50:14:84:2d:e6:70:4f:36:0f:b1:
26:33:21:e3:69:24:94:56:38:79:41:88:13:de:94:74:a4:82:
de:1d:f0:bc:4f:d7:68:a1:bb:57:32:20:96:cb:12:a6:8d:89:
58:fc:36:ba:e4:4f:13:68:6e:18:b5:53:75:7e:4c:7e:eb:67:
f8:49:16:8d:ce:bf:64:ca:f5:77:31:2e:38:ad:21:6e:77:e9:
e3:db:63:c7:4b:19:75:ce:ea:ed:20:d9:d6:79:d2:d5:61:4a:
05:3a:d0:1d:98:89:b5:66:73:a9:c9:4a:25:ab:65:3b:78:1e:
02:24:5a:c2:c8:1c:13:8b:d6:92:6f:9b:45:2a:a6:dd:27:e7:
70:59:39:81:6e:e7:b9:ae:1d:73:41:f6:c9:6d:2f:89:9d:e3:
fb:63:5c:5d:0b:08:af:43:cb:53:7b:8b:b4:d0:7a:b6:a6:e0:
d9:80:f8:50:8c:06:0b:09:5d:51:df:ba:f3:a9:e4:eb:5e:f0:
15:ee:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:07:10 2026 by rpki-client