Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e342e302f32322d3232203d3e203135343139.roa
File: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (raw, json)
Hash identifier: T273PKOaqPzw+ef1HYHPIsAsFc8LZnkPiPIyWBRhHPE=
Subject key identifier: 1F:8B:1E:C0:60:26:56:37:4A:D8:9E:EE:87:5F:77:AD:BE:CB:3A:F6
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 5DC87581FA4DAA81B4C65138216D328EF3DEDF55
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e342e302f32322d3232203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:11:01 +0000
ROA not before: Fri 10 Apr 2026 10:06:01 +0000
ROA not after: Fri 09 Apr 2027 10:11:01 +0000
asID: 15419
IP address blocks: 89.116.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c8:75:81:fa:4d:aa:81:b4:c6:51:38:21:6d:32:8e:f3:de:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:06:01 2026 GMT
Not After : Apr 9 10:11:01 2027 GMT
Subject: CN=1F8B1EC0602656374AD89EEE875F77ADBECB3AF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:27:64:b6:b0:22:fb:99:bf:c3:5e:ef:f4:
9b:92:ec:3c:0e:13:cb:79:17:e1:e4:ff:21:55:1d:
06:3e:dc:dc:39:29:60:8d:43:d0:42:de:e8:c1:0a:
04:d0:23:96:d1:4e:31:6f:35:a6:4b:b0:fa:cb:14:
3a:0e:1d:11:8b:f5:a1:02:cb:3d:07:d5:f5:99:35:
8a:6d:36:d0:46:cf:7f:a2:1a:0a:1e:ba:83:cd:7d:
a3:bd:73:c7:4b:46:a8:14:b3:75:f8:b6:7a:c1:c4:
e2:91:61:01:f9:09:e1:4f:4a:59:87:45:52:71:67:
b8:ab:a4:a8:d0:a8:0e:c1:8d:f2:e9:7b:b9:81:25:
af:4a:b7:df:f1:cc:ee:c2:16:b8:64:20:d5:77:92:
d6:66:fd:c6:6e:fa:f7:08:df:f9:af:b2:f5:29:44:
15:aa:aa:e2:9e:62:0d:72:85:4f:58:10:2d:fb:95:
2c:c1:64:78:87:04:68:7b:d6:0b:ab:31:80:de:a7:
90:f1:d5:97:a1:99:31:27:a3:3a:11:78:46:3f:42:
97:fe:09:8c:9f:d1:31:e7:13:bd:80:9e:71:36:7a:
73:2a:19:f8:9b:e2:5c:53:96:25:53:1e:56:87:29:
19:2c:ca:8b:6b:c5:1b:a3:3c:f8:17:a9:61:cf:be:
0f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:1E:C0:60:26:56:37:4A:D8:9E:EE:87:5F:77:AD:BE:CB:3A:F6
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e342e302f32322d3232203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.4.0/22
Signature Algorithm: sha256WithRSAEncryption
84:29:ba:75:59:8f:7a:82:d9:81:74:2c:b8:8d:b0:05:e6:5c:
bf:8e:ea:4c:c2:92:99:68:0f:68:3f:be:fb:15:c0:fa:e2:cc:
80:01:9f:ca:d8:6e:b7:20:98:6e:38:34:51:34:39:49:d7:c1:
d0:da:7b:63:51:a0:53:bc:ba:a0:77:52:9c:72:32:28:27:69:
04:5f:d0:35:9c:08:95:5f:1c:cb:f4:36:dc:86:6c:88:5e:13:
2b:1d:85:51:78:ed:fe:19:20:01:cb:cf:5b:00:a6:57:99:0b:
d1:84:57:88:31:fa:f0:19:53:ba:52:81:40:bd:c6:94:0f:f4:
13:3a:a1:0b:cf:28:b0:fb:bc:b3:78:e4:67:ac:18:71:cd:94:
94:ba:c7:07:dd:12:c9:37:15:ef:50:47:3d:53:9c:31:d6:4c:
0c:cf:c6:ae:63:1f:e6:08:14:36:63:79:75:50:97:0c:30:30:
d1:20:70:06:39:0a:37:21:85:db:b9:50:8b:6a:14:1a:28:11:
66:b3:ee:c6:88:5e:b6:e8:6a:d3:41:fd:48:88:fb:c1:5b:e6:
98:44:df:c9:27:a7:ae:3a:9c:52:b9:11:ea:d4:91:40:88:46:
8d:a2:ce:8a:be:ac:77:3d:14:fb:82:68:03:d1:8b:c1:58:fb:
fd:a1:40:da
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUXch1gfpNqoG0xlE4IW0yjvPe31UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh
MDIxNDRhZTAeFw0yNjA0MTAxMDA2MDFaFw0yNzA0MDkxMDExMDFaMDMxMTAvBgNV
BAMTKDFGOEIxRUMwNjAyNjU2Mzc0QUQ4OUVFRTg3NUY3N0FEQkVDQjNBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKydktrAi+5m/w17v9JuS7DwO
E8t5F+Hk/yFVHQY+3Nw5KWCNQ9BC3ujBCgTQI5bRTjFvNaZLsPrLFDoOHRGL9aEC
yz0H1fWZNYptNtBGz3+iGgoeuoPNfaO9c8dLRqgUs3X4tnrBxOKRYQH5CeFPSlmH
RVJxZ7irpKjQqA7BjfLpe7mBJa9Kt9/xzO7CFrhkINV3ktZm/cZu+vcI3/mvsvUp
RBWqquKeYg1yhU9YEC37lSzBZHiHBGh71gurMYDep5Dx1ZehmTEnozoReEY/Qpf+
CYyf0THnE72AnnE2enMqGfib4lxTliVTHlaHKRksyotrxRujPPgXqWHPvg+LAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUH4sewGAmVjdK2J7uh193rb7LOvYwHwYDVR0j
BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0
M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB
aFJLNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMt
ZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0M2IxLzMvMzgzOTJlMzEzMTM2MmUzNDJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzUzNDMxMzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJZdAQw
DQYJKoZIhvcNAQELBQADggEBAIQpunVZj3qC2YF0LLiNsAXmXL+O6kzCkploD2g/
vvsVwPrizIABn8rYbrcgmG44NFE0OUnXwdDae2NRoFO8uqB3UpxyMignaQRf0DWc
CJVfHMv0NtyGbIheEysdhVF47f4ZIAHLz1sApleZC9GEV4gx+vAZU7pSgUC9xpQP
9BM6oQvPKLD7vLN45GesGHHNlJS6xwfdEsk3Fe9QRz1TnDHWTAzPxq5jH+YIFDZj
eXVQlwwwMNEgcAY5Cjchhdu5UItqFBooEWaz7saIXrboatNB/UiI+8Fb5phE38kn
p646nFK5EerUkUCIRo2izoq+rHc9FPuCaAPRi8FY+/2hQNo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:29 2026 by rpki-client