Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203631333137.roa
File: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: ddUfkHeCwtKl5WGfj5ycG+M0yfiLFFTumHKpeiCmC6o=
Subject key identifier: B3:49:34:81:B2:9B:4F:08:96:50:0E:46:6B:D7:55:B1:68:B0:83:00
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 50F416972DEC8F784373F49C9FA869FFAA1AE4B1
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203631333137.roa
Signing time: Wed 27 May 2026 13:47:17 +0000
ROA not before: Wed 27 May 2026 13:42:17 +0000
ROA not after: Wed 26 May 2027 13:47:17 +0000
asID: 61317
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f4:16:97:2d:ec:8f:78:43:73:f4:9c:9f:a8:69:ff:aa:1a:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: May 27 13:42:17 2026 GMT
Not After : May 26 13:47:17 2027 GMT
Subject: CN=B3493481B29B4F0896500E466BD755B168B08300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:e1:1a:d2:90:1d:30:02:b7:0f:f8:ee:d4:
d9:80:ae:af:7e:bb:8f:d7:14:2d:96:38:a6:c6:c5:
b4:93:8e:7e:f1:4c:96:18:d5:db:81:ba:95:7b:1b:
39:e2:60:f0:9d:08:1c:3e:f3:b6:2e:2a:18:35:ee:
86:6d:28:93:5a:5d:e4:2f:de:01:fa:b0:c9:44:d9:
23:fd:2b:28:68:ac:74:7c:92:ce:1a:13:99:11:7e:
27:38:2a:c5:e4:8b:c7:00:db:5f:88:2b:02:d4:56:
08:6b:ff:70:10:fe:a7:ce:bb:6c:ae:5a:b2:ba:c8:
86:12:af:ef:30:c2:f5:55:90:e0:f5:bb:e8:2d:e9:
cf:d6:8b:b2:91:a1:0f:bc:e1:ba:11:24:f1:2a:a8:
7f:60:9e:86:bf:6d:f4:90:c7:5a:97:02:b6:d7:5f:
71:d8:7d:63:4a:e1:35:a2:e7:86:22:ec:5c:a3:bc:
e7:a0:ef:9e:43:f0:2e:3b:15:57:99:99:d3:4a:be:
cb:e1:d7:dc:a2:07:19:52:3e:e0:45:1f:b7:60:a6:
d1:ad:05:46:5d:d9:7c:be:86:1e:06:a4:af:9f:75:
ba:97:28:03:95:7c:f8:eb:0f:80:e4:8b:ca:33:24:
1a:b1:36:95:fc:e6:84:35:24:5d:8f:13:34:6d:78:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:49:34:81:B2:9B:4F:08:96:50:0E:46:6B:D7:55:B1:68:B0:83:00
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
40:89:d2:79:78:60:10:57:94:60:4c:a1:a3:a9:cc:c4:ed:cc:
6d:9f:8c:ca:47:2a:cc:44:db:12:66:3a:1b:31:ab:d7:95:78:
a5:c7:58:a9:37:0e:6b:17:04:a7:1a:96:5f:cb:6f:02:4d:9f:
16:23:5e:42:b8:8e:36:3a:54:6f:86:fb:d5:b8:ce:06:9b:0a:
36:9c:fe:57:16:ab:12:d4:35:09:1a:cb:15:d4:05:36:b8:fc:
6f:1a:64:12:15:1f:42:2e:e9:c8:57:1d:34:ee:fe:04:99:57:
84:26:f3:84:16:e8:b2:96:98:16:95:1a:19:74:0b:40:dd:a4:
68:85:e0:c8:de:09:19:d7:b3:6b:e6:93:5b:09:62:26:4b:bc:
61:0e:f5:2f:3b:81:1f:f4:f0:0c:ba:12:ef:e5:79:57:fd:12:
c0:9d:fe:fe:e9:78:94:de:23:de:38:02:34:ef:14:b3:9e:58:
a2:22:e7:64:21:56:6b:0e:f4:6f:ca:b5:8f:25:eb:58:fa:5c:
2d:a3:ac:d6:7d:6c:1d:3f:dc:72:8f:43:73:37:bd:be:59:9f:
e0:2c:fb:55:c6:f7:ae:69:90:e6:fc:df:29:d7:25:7b:31:19:
87:f0:8c:12:4f:f7:71:4d:1a:bd:3a:ca:09:23:ee:c4:a5:51:
b4:8b:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:05 2026 by rpki-client