Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131312e302f32342d3234203d3e203631333137.roa
File: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: zuBRLO+8gED/P8Eo04HfZLlz2ygMpUXoQgp4z4sshfo=
Subject key identifier: 23:66:49:9B:EB:71:DD:3E:5E:C2:1D:56:92:E4:25:CB:5E:33:FA:00
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 235D9F39A28661892267B941D1A2AD0CE5B9B859
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131312e302f32342d3234203d3e203631333137.roa
Signing time: Wed 27 May 2026 13:47:17 +0000
ROA not before: Wed 27 May 2026 13:42:17 +0000
ROA not after: Wed 26 May 2027 13:47:17 +0000
asID: 61317
IP address blocks: 89.42.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5d:9f:39:a2:86:61:89:22:67:b9:41:d1:a2:ad:0c:e5:b9:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: May 27 13:42:17 2026 GMT
Not After : May 26 13:47:17 2027 GMT
Subject: CN=2366499BEB71DD3E5EC21D5692E425CB5E33FA00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:3c:3d:a1:fa:b8:3d:f5:00:9a:d5:2c:da:
aa:a3:95:c5:ca:fe:71:34:36:ce:68:0d:4e:3d:0f:
e9:6a:0e:21:6a:bd:b5:a4:a7:3f:21:1b:eb:75:25:
d8:ac:c5:7a:61:38:1f:2b:8e:8c:f0:3c:39:9e:f2:
25:b0:2f:ea:e4:b4:1e:ba:14:4a:9e:87:61:d3:7d:
1f:aa:5c:cf:77:4e:c5:b9:1c:f0:6a:fa:20:2e:69:
8f:61:ce:df:97:25:77:a3:fb:46:da:3d:88:0b:43:
01:68:27:8f:7a:a3:01:cc:63:90:00:7a:d8:2d:8f:
a9:ad:22:39:82:2d:7e:c4:1a:a6:05:a3:dc:d5:25:
3d:50:79:e3:74:79:98:8a:da:76:ba:c2:f5:89:20:
07:78:be:21:3e:8e:e3:6f:10:4c:e9:8b:68:8b:ce:
0b:09:af:f7:4e:d3:d3:21:81:a6:87:e1:ca:16:c7:
2e:07:33:ab:6c:68:74:37:b7:d7:89:1a:33:0d:b2:
29:3e:50:75:34:a8:64:ce:ca:40:dd:df:af:91:10:
6b:aa:96:fc:aa:22:5b:f8:84:9d:72:46:9f:1f:72:
50:e9:8c:8c:5e:c3:2b:43:8d:14:62:b7:56:de:59:
f7:a9:be:c8:aa:47:cc:dd:de:90:c6:07:66:3a:3c:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:49:9B:EB:71:DD:3E:5E:C2:1D:56:92:E4:25:CB:5E:33:FA:00
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.111.0/24
Signature Algorithm: sha256WithRSAEncryption
40:02:4d:67:8b:0e:ef:cf:49:87:0b:70:be:99:ec:3d:bf:6b:
47:57:61:32:83:a8:ff:f6:13:64:13:89:95:c4:83:6d:49:cf:
77:f2:5b:b6:71:ee:85:75:ee:78:46:78:53:99:d0:b2:2c:b2:
5d:87:e2:dd:a2:6a:c4:80:23:95:d1:4d:80:8e:03:46:31:35:
8c:af:97:74:7c:dc:dc:1e:c9:f1:98:12:fb:51:de:b5:62:21:
ee:e9:c7:ca:d5:f9:ab:c9:a4:46:f4:97:58:9b:b8:55:7e:78:
ef:76:99:b8:0a:87:a2:13:8e:f4:52:80:70:1f:e9:9f:b9:23:
a5:f4:f0:1f:e8:d9:a7:88:ea:93:ee:9a:55:bd:2c:6c:7a:4d:
85:25:0b:4a:5b:34:2c:35:2e:fb:74:3e:f7:64:d0:05:7f:95:
7e:b4:d9:c0:81:51:fb:3b:88:4c:33:9b:e0:0d:01:a0:12:fc:
c7:a4:88:e0:be:5e:6a:ef:84:21:f9:d2:25:f4:97:2d:b3:61:
79:75:8f:aa:80:2f:30:4f:cc:96:5b:8c:6f:9b:8a:32:84:d7:
71:9c:52:4b:0d:86:12:1d:52:9a:c4:62:2e:a7:90:be:eb:1d:
d8:90:30:9a:54:82:26:7d:d6:54:3e:cd:67:c7:a1:59:75:e6:
96:9b:39:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:56:20 2026 by rpki-client