Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e203633313939.roa
File: 38322e3131382e32372e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: V+jeVcogjVd1VC8CUmfpfLrIfXxrhrosPsDTqxOFxGU=
Subject key identifier: 29:5D:E4:1A:E0:97:14:19:8F:B9:4A:D1:8F:71:57:4E:CD:9A:D1:B8
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 1DEF190F27E614279CEE69773105D0DB65F29717
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e203633313939.roa
Signing time: Fri 06 Feb 2026 15:02:12 +0000
ROA not before: Fri 06 Feb 2026 14:57:12 +0000
ROA not after: Fri 05 Feb 2027 15:02:12 +0000
asID: 63199
IP address blocks: 82.118.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ef:19:0f:27:e6:14:27:9c:ee:69:77:31:05:d0:db:65:f2:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 6 14:57:12 2026 GMT
Not After : Feb 5 15:02:12 2027 GMT
Subject: CN=295DE41AE09714198FB94AD18F71574ECD9AD1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:53:c2:38:20:88:e7:d3:84:40:12:56:4b:
0e:95:ad:47:bb:c1:c1:74:48:d7:21:b3:02:af:30:
3b:01:49:df:63:f7:2c:6d:1b:4e:9a:38:10:8e:da:
bb:f2:19:b3:f4:56:66:e6:11:72:cd:e3:6b:b1:f5:
13:9a:8f:70:73:69:97:98:7d:f4:20:a6:96:c5:c4:
21:93:61:dc:d2:32:8b:72:73:56:39:8d:46:bd:d8:
8d:a8:19:28:da:2a:39:0a:ee:a9:59:30:59:e3:30:
a5:6f:b2:ba:82:a9:d4:67:b5:df:fb:cb:56:a1:08:
d8:7d:40:f5:72:86:da:b2:0f:34:4c:53:04:77:06:
7f:01:75:e0:d5:af:ae:a8:bd:f1:a9:1e:59:1b:a5:
d0:ba:68:e7:4d:48:be:46:5e:70:e5:51:79:37:a1:
9f:b4:0d:76:e7:91:59:47:76:23:b3:54:55:3e:52:
d3:73:96:22:61:d1:2a:a2:13:25:45:43:15:0a:ce:
20:02:27:8e:e8:51:9b:3c:fa:e9:62:02:8a:88:bc:
be:e5:5b:d9:66:95:b6:a0:7b:1e:dd:2a:9e:9d:84:
58:8e:46:be:6b:e1:58:fa:ac:ec:ae:68:05:54:bc:
51:fa:fa:d2:21:2b:e6:8f:6d:f1:12:2c:b0:68:f4:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:E4:1A:E0:97:14:19:8F:B9:4A:D1:8F:71:57:4E:CD:9A:D1:B8
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:78:9d:22:b7:b6:d8:87:65:c0:25:c4:a9:23:56:9e:bb:81:
41:c0:f4:82:2d:60:24:e8:c8:ef:8f:bd:0e:41:5c:ad:fd:28:
d2:97:fa:b3:e1:5a:d7:08:62:57:87:9b:40:6e:8e:da:cc:45:
1f:ca:0f:0d:08:5e:03:54:80:72:9d:ce:61:77:d4:b4:ec:3c:
fa:da:dc:f7:0e:d3:5b:5b:d8:e8:03:c6:34:9b:63:9f:d0:38:
7a:0f:16:1f:62:9a:67:df:4c:af:4c:cf:e5:e0:7c:cb:6d:98:
bc:ca:92:94:d3:22:23:d2:df:ae:58:15:bf:b7:93:7f:b7:7e:
ee:91:22:1b:9b:9a:ef:d7:e8:f4:cd:f7:26:41:23:db:f0:64:
b8:f8:54:d8:bd:3e:71:50:36:f8:ed:35:7b:eb:d9:3a:74:3d:
ed:0b:b4:d7:06:eb:eb:0d:fc:01:0f:9b:ba:f0:91:f0:31:44:
4c:b4:28:89:b1:3b:54:3a:b0:12:64:10:b7:30:9b:3e:ca:29:
7e:fa:30:8e:89:d9:97:20:f0:7d:fd:ef:11:fc:2c:d1:a3:07:
8b:14:02:21:42:6f:4e:1a:3e:01:1f:11:06:72:20:ca:27:c4:
5a:00:26:c7:c7:a6:50:a8:c3:73:15:52:04:fd:41:ab:ed:e5:
2d:6e:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:47 2026 by rpki-client