Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37342e302f32342d3234203d3e20323132323338.roa
File: 322e35382e37342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: pPzrFBODS/ovDRLpsSoTrQxraGg8Al+2lQQluKejrXQ=
Subject key identifier: 28:F5:4B:CA:A0:F4:E5:90:52:EB:E8:3F:7B:15:2A:FC:D2:19:0E:59
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5ED2E136F59FE988F03EBBF0F948AFAD42ACD39D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37342e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 01 Jun 2026 22:24:48 +0000
ROA not before: Mon 01 Jun 2026 22:19:48 +0000
ROA not after: Mon 31 May 2027 22:24:48 +0000
asID: 212238
IP address blocks: 2.58.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d2:e1:36:f5:9f:e9:88:f0:3e:bb:f0:f9:48:af:ad:42:ac:d3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 1 22:19:48 2026 GMT
Not After : May 31 22:24:48 2027 GMT
Subject: CN=28F54BCAA0F4E59052EBE83F7B152AFCD2190E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:c8:8a:72:fc:88:c1:bc:a7:c8:88:63:3f:
15:90:8d:0e:be:b3:5a:72:03:a7:b2:47:51:49:8e:
f5:7e:a0:27:c8:31:e3:5d:0b:90:8c:84:60:37:90:
9c:dc:7a:87:f4:84:4a:ab:9d:f3:dc:2a:f0:59:be:
29:da:92:8b:40:92:a3:ce:27:2b:aa:40:05:33:a1:
a8:b3:ad:52:28:01:e2:ef:22:db:48:a6:7c:0c:28:
e7:d8:34:e4:53:a3:ef:70:98:d8:47:4f:8e:94:d6:
9c:9c:e0:fa:fb:46:b6:1b:4e:d1:ed:f2:81:aa:9e:
51:78:0b:d1:d3:2d:51:53:22:c2:74:3c:e4:a1:a9:
a5:49:69:d9:7b:b5:31:9b:ca:77:b4:21:ee:49:56:
28:33:8a:c8:c1:1d:f5:df:1d:1a:96:02:84:f0:dd:
b4:f5:22:40:66:32:ad:52:65:a6:aa:31:7a:73:55:
3b:d6:e6:db:b6:1b:21:7e:eb:4a:fa:02:f7:ee:6b:
28:5c:08:8f:8a:a3:6d:00:35:22:fc:b0:65:d5:f3:
a2:f8:8d:76:fa:18:20:66:b7:0a:7f:58:65:9b:37:
64:e6:d0:64:c2:b6:f2:40:b8:76:93:d4:fc:43:2e:
22:40:9f:9a:cc:d3:97:81:18:ae:90:92:6b:81:c6:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F5:4B:CA:A0:F4:E5:90:52:EB:E8:3F:7B:15:2A:FC:D2:19:0E:59
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.74.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:bd:f1:10:d5:71:2a:98:2e:b5:f8:b7:ba:9d:82:ae:45:b8:
68:a8:04:61:78:5e:53:f4:e4:79:6e:cf:7b:7b:94:99:b6:be:
16:32:0e:5c:96:99:b0:8a:56:9e:6a:17:da:ce:a2:ca:89:0d:
b7:3b:34:ca:f5:a5:4c:ee:9f:7c:70:ab:78:77:30:c3:83:d6:
4a:ef:b0:c8:5b:c4:c1:02:99:13:d1:5e:41:ba:30:81:5d:a8:
81:c6:e8:2b:81:96:d7:e0:b6:cb:ff:56:9b:2b:44:d2:8b:85:
e6:4d:9e:d7:0d:c3:ad:46:79:12:02:a3:97:95:43:12:5e:4e:
0c:b9:ba:c3:f4:27:68:c5:ca:2d:c6:00:9b:7d:48:16:3e:56:
15:a5:9a:1a:bf:78:90:e4:8a:69:89:9e:a7:35:b4:a4:14:b3:
37:97:04:14:02:b2:c0:af:dd:69:58:ad:9d:dd:10:bf:98:87:
ef:e4:60:f2:67:aa:d3:a7:54:d4:dd:c5:04:95:32:ba:f5:e8:
4e:e2:f8:79:30:14:5b:94:05:eb:b2:84:1c:67:ee:05:ee:60:
a3:2f:c2:82:a3:21:46:a6:d8:69:85:c7:58:98:34:64:8e:f6:
09:53:d4:ba:3d:91:4d:48:3d:a4:b1:47:65:1c:20:d3:2e:7a:
b6:2c:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:00:03 2026 by rpki-client