Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136302e302f31392d3234203d3e203331313033.roa
File: 38342e31392e3136302e302f31392d3234203d3e203331313033.roa (raw, json)
Hash identifier: +X1ouAarKQjwPMpyBACj9pvqNJte1aijswwlHZfjKyE=
Subject key identifier: 83:5C:B3:84:4E:54:FC:B1:D1:5F:55:8A:25:40:9D:AF:D5:89:75:6A
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 7D45F82F37C7B76439EA1AEBD4EEE33B4D799954
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136302e302f31392d3234203d3e203331313033.roa
Signing time: Fri 03 Apr 2026 14:46:59 +0000
ROA not before: Fri 03 Apr 2026 14:41:59 +0000
ROA not after: Fri 02 Apr 2027 14:46:59 +0000
asID: 31103
IP address blocks: 84.19.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:45:f8:2f:37:c7:b7:64:39:ea:1a:eb:d4:ee:e3:3b:4d:79:99:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Apr 3 14:41:59 2026 GMT
Not After : Apr 2 14:46:59 2027 GMT
Subject: CN=835CB3844E54FCB1D15F558A25409DAFD589756A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:bd:fa:12:c0:26:cd:88:ac:c9:c1:76:f4:
4c:d0:b1:89:39:e5:93:35:12:e5:6b:c2:47:fe:b0:
4c:35:51:f8:a6:61:f8:87:a1:da:d7:50:d0:78:b3:
06:2d:f9:31:3e:8b:e3:9c:70:2f:32:c1:8c:88:46:
5f:5d:0b:2b:94:c2:08:73:01:8b:6b:52:eb:1d:15:
46:54:b8:c3:f4:7b:ef:ea:3f:c7:05:10:3c:9a:f4:
a2:7f:91:23:91:75:8f:09:c3:12:38:15:8a:e4:f6:
32:2a:44:d1:01:c9:54:6b:c7:2d:9c:2c:b1:07:21:
a6:eb:8b:25:20:8f:37:c8:50:4d:30:be:18:c3:57:
9c:82:c3:25:05:bd:b6:2a:9c:80:50:87:6b:68:f1:
e0:49:89:e6:0e:be:aa:84:1c:e7:b0:78:70:1b:cc:
16:92:79:ac:1b:0c:ed:d6:28:37:fe:67:b2:60:e6:
71:dd:93:e9:73:d8:14:94:35:cb:31:53:a0:86:ad:
39:a7:97:27:b4:7f:f0:68:52:eb:0b:e6:6c:ef:04:
85:bb:f4:c8:7d:60:04:ad:f9:b5:8e:30:b5:15:3b:
f6:a7:a4:8d:44:bd:9f:3b:1d:97:a3:c5:a6:f0:b4:
60:d1:8f:98:dd:b3:4d:92:21:56:93:32:29:ae:76:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:B3:84:4E:54:FC:B1:D1:5F:55:8A:25:40:9D:AF:D5:89:75:6A
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136302e302f31392d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:f3:ef:6b:3f:c9:04:26:82:29:21:b9:56:47:a5:5c:35:25:
be:92:af:ec:c8:39:6d:5c:2f:b8:58:bc:ee:74:ec:c4:e2:49:
f6:92:97:a9:9a:28:c1:8d:f2:20:cb:06:b9:c1:5b:86:09:7e:
1c:45:8c:c3:5a:23:31:b6:1c:5f:f2:f6:26:86:52:44:54:c9:
5a:c0:e6:61:3b:a5:8c:d1:4c:6d:06:ab:8b:d2:ca:55:16:9f:
24:ba:41:5a:55:05:ca:7a:a4:bc:32:d7:97:6f:f4:ab:6f:0e:
4e:a7:d1:c5:eb:cc:a3:ca:8a:47:8c:5a:c0:1f:d8:8f:e1:70:
c8:95:61:2e:a3:63:31:bc:f2:48:20:09:0e:36:72:32:bd:fa:
db:b0:25:13:c8:6c:2e:a1:46:79:e5:83:9c:d3:c9:90:ab:ea:
00:23:d1:ca:d1:fe:90:be:0b:78:28:6f:d0:18:5d:b7:04:d5:
1a:55:d6:f7:ac:77:54:cf:8e:e7:97:d1:b0:ea:9b:38:e3:c6:
10:32:2b:c0:17:83:a0:e6:83:d5:89:07:83:bf:83:f2:f5:d5:
a4:51:92:1c:dc:80:0e:e9:e1:74:c6:67:12:35:42:1b:df:de:
e9:64:43:d8:6a:8d:46:28:69:26:83:f3:2f:c0:f0:3e:36:82:
d0:01:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:52 2026 by rpki-client