Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e3131362e302f32322d3232203d3e203135343139.roa
File: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (raw, json)
Hash identifier: vuC6A6enLxPTXBOwLw9tBCemQGy3gdCRudl05Im1bw0=
Subject key identifier: A6:F5:C7:1D:69:39:7F:33:33:3D:C0:76:CD:6E:0D:8F:1B:6A:14:B0
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 01797001B9384ADC97D4E058167067BFC1411F6D
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e3131362e302f32322d3232203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:10:59 +0000
ROA not before: Fri 10 Apr 2026 10:05:59 +0000
ROA not after: Fri 09 Apr 2027 10:10:59 +0000
asID: 15419
IP address blocks: 89.116.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:79:70:01:b9:38:4a:dc:97:d4:e0:58:16:70:67:bf:c1:41:1f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:05:59 2026 GMT
Not After : Apr 9 10:10:59 2027 GMT
Subject: CN=A6F5C71D69397F33333DC076CD6E0D8F1B6A14B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:08:14:94:f5:7f:30:47:74:be:f2:2c:0a:
20:6e:4b:90:1c:a7:3e:ef:cd:be:2e:f8:54:57:5d:
c3:89:ba:50:d7:6f:48:fb:e7:96:ba:89:e6:e9:72:
cb:04:26:2a:bf:cd:7c:6b:dd:cf:74:21:f0:4b:9f:
c2:42:c5:16:b8:fa:86:1f:ef:b1:24:b8:bd:87:40:
14:4e:7d:b2:09:dd:bd:4e:69:72:5b:0b:ee:d0:44:
45:15:11:cd:f8:e9:9c:58:ba:99:85:76:39:d5:71:
75:40:4a:d2:81:2d:6a:8d:e9:34:01:93:10:4d:9c:
3b:80:28:8b:96:27:1e:7d:ff:32:f0:ff:b9:fc:8c:
bc:c5:04:c0:d9:0c:f7:9e:f5:26:7a:9c:3c:70:29:
a3:af:7f:95:55:f9:1a:79:57:3c:b2:39:88:87:73:
ee:ec:ad:e7:fa:18:19:fe:59:ed:a6:0f:c3:66:98:
60:c1:b8:16:86:b1:7c:02:b8:1a:ae:ea:58:d2:dc:
84:6c:3b:31:00:6b:9d:70:33:ba:92:cf:7f:7b:17:
93:19:21:ec:4d:19:ec:8f:cf:48:3c:d1:7f:2e:0d:
6b:99:a5:52:67:7e:73:9a:0d:08:10:ea:38:3c:4e:
bd:cb:06:ec:5a:59:20:43:01:3c:15:97:52:67:9a:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:C7:1D:69:39:7F:33:33:3D:C0:76:CD:6E:0D:8F:1B:6A:14:B0
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e3131362e302f32322d3232203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:0d:2d:dd:a3:4b:fe:7b:b4:4c:c3:70:1f:01:af:c0:f5:37:
34:c0:eb:a5:8c:c7:02:3b:41:83:f8:26:78:40:f0:e6:97:96:
ae:d7:4b:4c:10:38:97:24:ca:e6:4c:7f:d0:ea:ff:8d:fb:c3:
bb:98:11:60:56:4d:ba:a0:c8:26:c2:7a:fa:27:49:cb:dd:f1:
08:0d:21:bb:37:03:7d:6e:fa:2b:a7:21:39:57:25:c0:b3:bb:
46:6b:bb:dd:81:d5:c4:97:df:a1:b4:c4:92:d8:d0:2f:fa:34:
3b:e3:33:b4:f7:17:cd:3d:ec:98:22:d4:66:08:19:b6:8b:05:
ea:84:78:6e:3e:a9:8d:fe:0d:31:48:a7:9d:fd:55:db:0e:5a:
a1:26:87:18:ba:8b:1e:ff:d1:d9:bb:66:28:21:6b:85:00:c0:
57:20:b6:45:bc:32:57:b2:62:c9:3e:52:0c:da:09:55:63:b7:
b4:f7:d8:50:22:d7:b9:ed:85:6b:f9:29:7d:4d:3d:45:6a:8f:
de:f4:dc:a8:db:15:01:57:41:79:f3:94:fe:6b:ef:07:a5:d8:
cc:5c:f9:9f:21:73:05:69:87:7f:76:9c:39:3c:38:97:a6:90:
78:09:b0:75:06:c7:45:00:4d:79:3b:6f:e8:1f:a4:f0:ef:d4:
b6:77:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:45 2026 by rpki-client