Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e322e302f32332d3233203d3e203135343139.roa
File: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (raw, json)
Hash identifier: aSFnF5KE0HZKqtoTzaJ7DbcDwDtYbFqkJ83NVi96KOw=
Subject key identifier: D2:B7:28:43:EA:B4:CC:00:CC:4F:21:9D:55:33:53:8C:90:5D:2B:93
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 14A1117E603AC41D0F21EAA2A572EE95FCE2B820
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e322e302f32332d3233203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:11:02 +0000
ROA not before: Fri 10 Apr 2026 10:06:02 +0000
ROA not after: Fri 09 Apr 2027 10:11:02 +0000
asID: 15419
IP address blocks: 89.116.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:11:7e:60:3a:c4:1d:0f:21:ea:a2:a5:72:ee:95:fc:e2:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:06:02 2026 GMT
Not After : Apr 9 10:11:02 2027 GMT
Subject: CN=D2B72843EAB4CC00CC4F219D5533538C905D2B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:db:89:91:89:f3:3a:d6:9e:f3:12:4d:18:
53:c6:35:5f:63:6d:d5:ef:c7:53:c7:4e:9c:52:14:
b5:7c:19:33:23:5c:7c:89:a0:44:82:57:f9:e8:61:
57:a4:ea:41:39:31:11:41:60:4c:29:c9:6f:38:73:
93:00:99:ee:2f:d9:62:a7:88:eb:c2:80:d3:9a:82:
40:5c:0c:34:58:c5:c2:0c:3a:5c:7a:7f:e6:4a:31:
dd:65:8b:ae:13:65:15:b6:e5:b0:d1:18:8a:b4:61:
bf:fa:7b:eb:b1:6e:e4:f6:2a:80:c1:82:6e:ad:c5:
da:09:78:fe:3f:4e:59:97:c1:77:1d:79:44:de:2f:
f7:20:a1:9a:48:b9:46:4f:42:0a:8b:2d:aa:cc:6e:
1e:96:8a:c7:c6:b1:9e:cb:bc:4f:aa:6b:cb:3c:4e:
e2:0d:5e:f0:3d:32:03:bf:9a:52:e5:5a:8e:91:02:
bc:a9:9b:a1:f5:c0:74:f3:a0:8d:c8:14:e9:88:cb:
b2:cf:44:f2:a7:a6:41:f5:de:ad:cb:20:6a:ef:e1:
20:6e:b9:db:e5:d1:ad:c3:09:ef:23:1e:34:11:bb:
2a:b2:ae:95:fe:b1:8e:09:ba:e8:45:2a:93:7d:23:
aa:74:6b:d2:71:51:3a:8a:0b:42:03:fe:34:a1:33:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:28:43:EA:B4:CC:00:CC:4F:21:9D:55:33:53:8C:90:5D:2B:93
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e322e302f32332d3233203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.2.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d1:95:8f:5a:c3:7f:c2:c0:d9:a1:d2:b5:e5:45:83:e5:29:
a8:fb:84:45:e6:44:24:1f:c0:27:8d:ee:3f:3d:43:1b:ad:58:
46:01:b2:74:49:93:2a:13:47:06:ee:4c:35:40:97:57:1c:0b:
5a:76:e7:6b:f5:54:e9:6c:5e:44:ea:52:11:9f:38:20:41:1e:
86:6b:a7:b4:93:67:bc:89:42:8d:80:85:97:b2:0a:74:91:42:
54:90:a2:3c:9d:76:2f:74:ab:0e:fd:bc:22:ec:8e:47:0b:6a:
42:6e:6b:c6:cf:d4:96:3b:18:d8:48:13:f4:be:7f:bc:30:5f:
20:98:98:96:0b:00:55:8c:15:13:7f:b2:ad:1b:78:10:90:7e:
2e:90:91:84:04:33:cd:c5:96:e7:e9:fd:06:4f:4f:d6:59:1a:
19:93:5f:c6:de:8f:73:83:6c:f3:ea:65:6b:52:0a:d4:cf:00:
65:fa:08:b1:85:f4:20:ab:95:8a:c2:55:44:60:73:10:ec:b6:
4d:32:a5:d2:75:f5:2f:96:4a:c3:70:ce:99:54:eb:f0:f3:0a:
de:8b:50:30:6d:82:a8:bf:dd:4d:4b:91:d3:0f:12:0b:c9:ba:
69:9e:5e:4b:5f:00:8b:86:a2:4e:17:21:0d:e0:af:d8:ea:23:
4e:73:8e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:47 2026 by rpki-client