Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e34322e302f32332d3233203d3e203135343139.roa
File: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (raw, json)
Hash identifier: y6p5UjBQPUduUonTPaO5F0JtSCE/pxPOj2iYT5kNMsc=
Subject key identifier: 60:BD:75:5D:B6:A1:39:2A:2A:B7:BB:B4:B8:F3:D6:46:99:F7:1E:9C
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 444CC43876CCEE5EA7B494839D9622AC03A1FB0D
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e34322e302f32332d3233203d3e203135343139.roa
Signing time: Fri 10 Apr 2026 10:11:02 +0000
ROA not before: Fri 10 Apr 2026 10:06:02 +0000
ROA not after: Fri 09 Apr 2027 10:11:02 +0000
asID: 15419
IP address blocks: 89.116.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4c:c4:38:76:cc:ee:5e:a7:b4:94:83:9d:96:22:ac:03:a1:fb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Apr 10 10:06:02 2026 GMT
Not After : Apr 9 10:11:02 2027 GMT
Subject: CN=60BD755DB6A1392A2AB7BBB4B8F3D64699F71E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:38:89:cc:8b:89:90:40:6e:5a:6e:de:90:
bb:14:25:c4:92:9d:08:e8:3e:70:6d:71:31:75:d7:
06:1c:32:b0:2d:38:57:90:86:8e:c3:d8:50:43:84:
d7:55:16:22:c9:83:bb:a0:99:49:22:ab:42:cb:ca:
2d:5d:23:a0:30:ca:60:36:db:09:b3:ef:44:7c:14:
bf:5e:ad:90:ea:88:00:c3:29:75:a1:5a:8f:e6:51:
38:6f:9c:51:e9:68:8f:47:6c:15:62:b1:8a:b9:51:
27:11:3e:60:5b:91:97:f3:ea:4d:cd:d9:b3:39:82:
c3:7e:43:fc:99:b9:de:19:30:41:f5:60:74:f0:ed:
10:ad:d1:e9:4a:da:e1:ed:5c:d9:94:30:99:05:e1:
a7:46:cf:7e:fa:10:36:9c:be:25:32:d4:41:e6:ec:
b2:7a:9c:ce:e7:cb:c6:52:1a:61:ac:00:bd:4e:25:
2c:ee:07:86:e9:f9:7b:db:0d:6b:fd:24:60:ba:90:
26:0b:c6:98:0a:e4:13:5d:49:70:cd:5b:c9:75:c3:
57:c1:de:f1:cf:86:91:39:ff:a0:52:73:e3:79:e7:
97:11:d3:55:72:2a:79:d0:f9:4e:8a:fd:ff:dd:fb:
67:91:07:0b:6b:82:4e:ed:3f:b7:06:7d:50:9e:c3:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BD:75:5D:B6:A1:39:2A:2A:B7:BB:B4:B8:F3:D6:46:99:F7:1E:9C
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/38392e3131362e34322e302f32332d3233203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.42.0/23
Signature Algorithm: sha256WithRSAEncryption
10:78:cf:5f:13:d9:c6:46:a2:71:e0:2a:7b:27:58:a9:14:e2:
94:3f:76:22:97:71:6d:a0:5c:dc:90:f7:d8:25:83:1c:0a:b8:
92:8f:94:c8:81:c7:d2:e3:f3:08:95:00:42:1d:61:55:24:5b:
e1:12:b5:c1:62:ee:6a:c3:e4:fa:f0:f2:d6:f1:a1:be:ce:9f:
6d:9a:48:ed:79:0c:fe:0f:9b:94:f5:1b:6b:cb:91:e3:79:3e:
59:dc:36:d9:7a:ec:42:d0:2c:9f:a2:8b:75:2e:b5:6f:19:e9:
42:d8:fb:be:44:94:54:85:45:b6:a4:bc:a8:e3:88:f4:ca:00:
97:a5:c8:55:89:f8:0b:0f:b2:36:f8:62:77:8a:1f:22:40:96:
c6:e2:da:85:cf:b3:9e:5c:73:28:af:de:4b:1c:19:8a:17:b3:
54:f7:cd:8a:7b:12:3c:68:d1:ef:2f:35:30:53:03:b2:56:6a:
6c:07:de:63:25:6e:f5:9a:47:cd:85:28:3a:fb:ea:63:dc:ba:
c8:7f:20:d6:f4:c9:6e:cf:a3:56:26:8c:8c:a3:0f:7d:ff:63:
f1:26:78:9b:f5:71:0b:0f:9a:03:d8:4e:0a:25:06:63:d6:b1:
dd:de:fc:04:39:41:96:27:0d:7b:7a:ff:b3:66:c8:c0:4a:a2:
05:94:fa:15
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUREzEOHbM7l6ntJSDnZYirAOh+w0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh
MDIxNDRhZTAeFw0yNjA0MTAxMDA2MDJaFw0yNzA0MDkxMDExMDJaMDMxMTAvBgNV
BAMTKDYwQkQ3NTVEQjZBMTM5MkEyQUI3QkJCNEI4RjNENjQ2OTlGNzFFOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sDiJzIuJkEBuWm7ekLsUJcSS
nQjoPnBtcTF11wYcMrAtOFeQho7D2FBDhNdVFiLJg7ugmUkiq0LLyi1dI6AwymA2
2wmz70R8FL9erZDqiADDKXWhWo/mUThvnFHpaI9HbBVisYq5UScRPmBbkZfz6k3N
2bM5gsN+Q/yZud4ZMEH1YHTw7RCt0elK2uHtXNmUMJkF4adGz376EDacviUy1EHm
7LJ6nM7ny8ZSGmGsAL1OJSzuB4bp+XvbDWv9JGC6kCYLxpgK5BNdSXDNW8l1w1fB
3vHPhpE5/6BSc+N555cR01VyKnnQ+U6K/f/d+2eRBwtrgk7tP7cGfVCewyJrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUYL11XbahOSoqt7u0uPPWRpn3HpwwHwYDVR0j
BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0
M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB
aFJLNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMt
ZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0M2IxLzMvMzgzOTJlMzEzMTM2MmUzNDMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNTM0MzEzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVl0
KjANBgkqhkiG9w0BAQsFAAOCAQEAEHjPXxPZxkaiceAqeydYqRTilD92IpdxbaBc
3JD32CWDHAq4ko+UyIHH0uPzCJUAQh1hVSRb4RK1wWLuasPk+vDy1vGhvs6fbZpI
7XkM/g+blPUba8uR43k+Wdw22XrsQtAsn6KLdS61bxnpQtj7vkSUVIVFtqS8qOOI
9MoAl6XIVYn4Cw+yNvhid4ofIkCWxuLahc+znlxzKK/eSxwZihezVPfNinsSPGjR
7y81MFMDslZqbAfeYyVu9ZpHzYUoOvvqY9y6yH8g1vTJbs+jViaMjKMPff9j8SZ4
m/VxCw+aA9hOCiUGY9ax3d78BDlBlicNe3r/s2bIwEqiBZT6FQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:23 2026 by rpki-client