Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31352e302f32342d3234203d3e203135343139.roa
File: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (raw, json)
Hash identifier: BfjOFS0GoZTfjo/xHJvef2THjZzuBY75ujhpTamWG84=
Subject key identifier: 52:AE:60:75:B7:52:4F:4F:72:9E:66:0B:C3:FD:0E:AC:CA:39:59:F0
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 3CDED80F2C3AE555318AF279DB4B31EA02B4DE94
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31352e302f32342d3234203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:11:01 +0000
ROA not before: Fri 10 Apr 2026 10:06:01 +0000
ROA not after: Fri 09 Apr 2027 10:11:01 +0000
asID: 15419
IP address blocks: 89.116.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:de:d8:0f:2c:3a:e5:55:31:8a:f2:79:db:4b:31:ea:02:b4:de:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:06:01 2026 GMT
Not After : Apr 9 10:11:01 2027 GMT
Subject: CN=52AE6075B7524F4F729E660BC3FD0EACCA3959F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:47:d6:76:c0:a9:31:dc:93:1f:9f:f8:f9:
62:a4:26:21:e0:69:20:3c:dc:9b:af:2e:d5:92:48:
5d:1e:4a:19:03:d3:ee:51:1e:3b:9c:83:20:45:e0:
5a:33:6c:73:7b:19:1c:50:e7:99:21:f6:be:f0:96:
3c:7c:96:0e:03:1b:35:c0:39:ea:26:b7:b9:6c:68:
17:cb:c6:6d:1e:ea:28:74:e8:a7:3c:9c:7f:17:5f:
0c:26:fe:1b:76:58:cb:c0:4b:78:cf:88:03:7b:60:
68:fa:47:4e:3c:8f:55:ca:fd:09:b8:27:a9:e9:73:
72:5a:8b:37:61:3c:eb:7f:86:8a:ae:de:ea:5e:e3:
92:b6:b0:f1:54:16:37:ab:b3:4a:a7:ba:88:cb:1f:
37:5b:38:2c:38:18:ec:b3:26:7e:27:b6:88:4d:61:
8b:c3:4c:ab:eb:62:35:c0:b2:ac:a5:d7:d5:d7:0b:
91:b0:82:36:ae:f5:29:4f:3a:cb:8b:02:73:04:1a:
bf:c2:0b:d9:e4:a6:f7:30:e7:2f:d2:6c:2d:c4:2a:
f4:0d:76:71:4c:34:e1:a0:93:a8:0b:d2:3e:ab:91:
e3:9e:34:fd:9a:6c:22:8b:ce:6d:a0:36:9f:13:15:
5a:f9:1a:d3:55:81:b6:dc:5c:30:09:9d:2f:80:ae:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AE:60:75:B7:52:4F:4F:72:9E:66:0B:C3:FD:0E:AC:CA:39:59:F0
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e31352e302f32342d3234203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:6d:1b:f6:6d:c6:4b:72:55:9f:49:37:36:ad:59:78:5d:06:
b5:fc:1b:d5:67:fd:ce:59:f3:9a:1e:68:bd:30:29:c4:dd:70:
8c:e3:82:70:3a:7f:0b:76:8b:94:57:5f:fa:4d:04:dc:1d:1f:
be:62:e1:ad:bb:5b:bd:84:91:df:28:96:73:57:0a:6c:dd:d3:
6c:3a:8b:48:99:b0:e5:9a:b3:58:13:0a:a5:4c:59:2b:22:16:
a2:70:d9:2a:b7:30:8a:4b:95:58:34:7c:bf:a4:39:ee:c5:2a:
12:c1:16:55:db:c5:93:f4:5b:ed:75:43:b3:d5:dd:9b:00:d5:
7a:20:d2:03:1e:7e:e9:d0:49:1b:e2:73:09:1b:ad:f1:cd:1c:
b5:b9:84:14:d5:7f:9d:bd:de:df:0e:5f:6e:ea:6a:75:3f:16:
95:0c:ca:1e:ab:ea:7e:58:d4:73:42:fc:97:3d:0a:22:d7:c5:
f1:c5:ea:ee:af:b3:1e:57:81:57:50:7e:96:c2:29:cd:b3:2f:
e5:3f:e7:cf:ea:9a:16:d4:75:70:b6:76:7f:c7:6d:db:19:bf:
cc:55:4b:6a:cd:2c:8a:6e:85:c7:92:4b:2e:2e:fa:9a:06:8a:
10:e7:f8:1b:c6:e4:21:12:ff:9b:50:64:eb:c6:be:77:db:24:
c7:9c:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:08 2026 by rpki-client