Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa
File: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (raw, json)
Hash identifier: KTVPVjJUeOuLavU6Oa4i7/jMWolwdDs6JMPn908p4QE=
Subject key identifier: 38:56:CF:4E:94:42:BA:10:DE:D5:7C:DC:48:34:FD:DA:DD:1B:64:AF
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 75288ADCC0AEF4602CF6ED8C39A1EE67C71BC497
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa
Signing time: Wed 15 Apr 2026 15:47:05 +0000
ROA not before: Wed 15 Apr 2026 15:42:05 +0000
ROA not after: Wed 14 Apr 2027 15:47:05 +0000
asID: 213724
IP address blocks: 85.117.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:28:8a:dc:c0:ae:f4:60:2c:f6:ed:8c:39:a1:ee:67:c7:1b:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Apr 15 15:42:05 2026 GMT
Not After : Apr 14 15:47:05 2027 GMT
Subject: CN=3856CF4E9442BA10DED57CDC4834FDDADD1B64AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:2d:a1:87:b0:e2:36:89:62:53:22:57:e1:
f4:7f:90:1d:77:b9:ed:37:83:ea:3c:85:cf:a9:ea:
0f:8d:ba:ec:4c:0a:3f:5c:8d:d3:9a:a6:9b:81:b2:
45:79:8a:f7:41:cf:8f:34:d2:44:ac:5e:ca:43:5c:
a4:66:10:cb:e3:0d:e3:a0:1c:d7:de:2b:ee:41:71:
5a:93:05:27:6f:af:f1:02:1a:d3:69:5c:70:de:c3:
42:c3:51:b3:65:fa:ec:24:cd:fb:79:5f:12:83:ac:
c5:0c:b5:5b:49:c3:af:41:de:99:18:bf:ea:ab:f1:
a0:29:0c:6d:94:07:b3:e9:4f:85:c8:70:40:d1:6c:
1e:fc:71:d8:ec:01:ed:79:ae:1c:6c:e9:9c:21:54:
56:28:5a:3c:38:0e:08:10:d2:5a:09:1e:b2:e8:2d:
9c:4c:52:32:13:33:1c:41:88:c0:3e:19:39:7a:82:
61:d5:a3:90:00:a5:44:be:60:62:7c:eb:22:6c:44:
02:9a:fd:68:ad:11:22:84:03:6f:34:93:a3:cd:b0:
2c:c3:6b:93:99:92:a7:86:7a:2a:3b:5f:a6:c0:af:
5a:6d:50:4a:51:03:f0:6c:99:e2:94:7e:02:65:9d:
1f:eb:17:3c:31:31:a2:18:36:81:6e:54:24:92:72:
d2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:CF:4E:94:42:BA:10:DE:D5:7C:DC:48:34:FD:DA:DD:1B:64:AF
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.231.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a6:97:47:d3:22:7f:20:f0:cb:e7:56:eb:5b:b1:96:bd:ee:
6e:e3:4d:fd:40:b0:94:58:5d:0b:6e:b0:fc:c3:fb:79:b3:cf:
21:4d:5c:fe:96:f0:04:b3:95:dd:e9:84:da:e7:10:06:f8:09:
a4:48:de:78:6f:76:3c:56:3d:eb:cc:df:21:8b:5c:77:1b:cc:
30:46:e8:80:bd:19:f2:ca:96:64:22:eb:9b:40:93:67:86:26:
f4:dc:13:a0:49:de:2b:d9:a2:fe:2e:7f:2b:b6:64:cd:e8:42:
1e:dc:7b:1d:68:f6:4e:cb:b1:ac:11:07:21:b9:fe:2e:a7:16:
eb:d6:99:9d:92:00:e6:f9:89:21:13:59:7f:00:c0:35:26:b4:
21:9b:f4:5b:31:c7:a6:c1:a4:db:6c:e3:0e:c9:a3:c4:74:38:
b3:72:2c:6f:2d:0c:35:26:d3:74:b4:22:cb:e7:1b:f6:00:51:
73:56:10:90:da:db:a3:a9:a1:ba:4c:4e:e7:ee:e8:c8:1f:78:
56:82:ba:18:a0:25:0b:7d:5e:06:71:0f:06:2c:f0:a3:c9:ad:
f2:2c:cf:4b:56:14:27:33:70:01:1c:28:24:f2:2a:07:98:49:
8f:27:6b:00:84:c2:fd:f5:e2:0e:c9:01:3a:75:d0:2e:fc:bf:
c8:6d:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:11 2026 by rpki-client