Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38392e3130372e392e302f32342d3234203d3e20313534303439.roa
File: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (raw, json)
Hash identifier: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=
Subject key identifier: D8:B3:B1:91:A6:4C:AE:0F:CD:7E:13:36:F1:56:9A:FB:DD:BD:68:63
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2951858419F18AA26DF1C02659D9A1BB5EABC560
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38392e3130372e392e302f32342d3234203d3e20313534303439.roa
Signing time: Mon 29 Sep 2025 09:15:52 +0000
ROA not before: Mon 29 Sep 2025 09:10:52 +0000
ROA not after: Mon 28 Sep 2026 09:15:52 +0000
asID: 154049
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:51:85:84:19:f1:8a:a2:6d:f1:c0:26:59:d9:a1:bb:5e:ab:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 29 09:10:52 2025 GMT
Not After : Sep 28 09:15:52 2026 GMT
Subject: CN=D8B3B191A64CAE0FCD7E1336F1569AFBDDBD6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:3c:82:f1:ce:1d:a0:5a:36:67:93:4d:f3:
1d:5a:43:d2:ba:54:c4:18:c2:13:4e:db:2d:8f:4a:
0b:3d:d6:92:0b:34:b1:37:68:80:e4:3c:7d:f5:f7:
93:41:c6:49:4d:99:fb:1e:b3:94:b8:ab:94:e3:fd:
24:b3:49:70:85:7e:c7:0b:e3:76:82:7b:2f:82:77:
55:9a:8d:13:22:a6:c7:bf:50:cf:e1:04:0b:c7:19:
17:18:45:15:f3:ff:85:d5:fe:75:e6:c9:27:f8:94:
68:78:f3:ea:3b:58:74:cf:96:c7:2e:10:6a:80:4e:
57:4d:4d:59:f4:d4:02:a9:df:90:a4:bb:ec:a4:4b:
23:e1:df:97:3e:13:4e:f9:7e:f5:2d:33:b1:85:4b:
1f:70:af:f8:be:17:8c:41:d1:0e:6e:38:1d:49:48:
c4:a7:cd:ee:bb:11:19:b8:20:5b:06:ea:23:fb:32:
04:17:cf:df:94:08:8f:78:6b:19:0e:27:40:eb:44:
ee:3e:5a:d3:5f:e5:bb:2b:38:08:81:f3:ff:06:3d:
84:d5:0d:63:36:e6:fa:10:c6:44:00:87:61:05:03:
97:35:f8:5f:06:2b:c4:51:70:27:d7:46:80:aa:0d:
d0:31:14:ea:e2:92:95:8f:6d:e8:f7:c6:e8:d2:53:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:B1:91:A6:4C:AE:0F:CD:7E:13:36:F1:56:9A:FB:DD:BD:68:63
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38392e3130372e392e302f32342d3234203d3e20313534303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8a:06:1f:c6:1b:61:3e:2e:8f:ad:e2:b7:fa:e6:28:fc:7d:
60:e5:25:d7:b1:85:f3:7d:31:3f:34:bd:b8:06:cd:78:96:26:
53:ae:9d:75:a4:f6:7e:bf:a4:c3:03:8d:00:9d:22:41:43:65:
00:9e:43:9e:b9:ed:d4:1f:97:19:07:2b:12:54:18:1f:0f:23:
4d:f4:1c:73:7d:85:83:bb:90:b3:40:48:9c:62:ea:87:61:ce:
69:ad:f1:5d:e4:1b:c0:e7:1d:c8:3c:de:81:b8:26:0b:3c:4a:
a5:cb:a5:f1:9a:88:32:c1:bd:3d:ed:80:23:b5:0a:2e:14:9a:
1b:c0:51:3c:09:9f:ad:a9:28:78:0a:76:77:25:46:a7:07:68:
48:d9:6d:05:39:96:57:c5:93:21:9f:56:76:7a:7f:29:f8:a2:
de:e1:6e:2d:05:c6:02:50:34:57:5f:0c:22:f9:ee:8e:06:b2:
96:5a:ad:10:cd:39:29:15:fd:c3:a4:6d:eb:5a:cb:12:fe:c9:
5e:b4:04:82:83:22:11:6e:c2:d6:07:e6:1a:62:33:7a:10:30:
60:18:89:d2:4d:9f:3f:ea:b2:97:a8:62:2c:1c:d9:59:91:96:
26:1c:b9:fc:f1:fd:d5:c2:a8:58:46:94:70:d3:07:49:cd:47:
dd:e2:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:37 2025 by rpki-client