Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203430363736.roa
File: 38392e34322e3131302e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: Zg2PZ6Yq/39MmczP1UsIKru9yNOBAAic0pHNwnEwagI=
Subject key identifier: 06:C7:B2:85:9C:09:DC:E3:EA:2D:69:C5:F3:0F:9A:65:D6:5F:E6:68
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 04DA38F7283A54DDC4676773E983FC52341AE6CB
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203430363736.roa
Signing time: Fri 10 Jul 2026 03:57:48 +0000
ROA not before: Fri 10 Jul 2026 03:52:48 +0000
ROA not after: Fri 09 Jul 2027 03:57:48 +0000
asID: 40676
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:da:38:f7:28:3a:54:dd:c4:67:67:73:e9:83:fc:52:34:1a:e6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Jul 10 03:52:48 2026 GMT
Not After : Jul 9 03:57:48 2027 GMT
Subject: CN=06C7B2859C09DCE3EA2D69C5F30F9A65D65FE668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:22:98:fc:35:07:8e:d0:ee:95:0b:bb:db:
cb:ff:02:34:cc:ac:2a:e0:6d:4d:55:f2:4c:bc:0a:
26:db:46:ed:b8:0e:04:f2:c8:a6:e3:f5:78:3c:a0:
e5:8a:90:86:e0:26:7d:e8:f2:cb:3c:ef:15:69:d4:
18:53:12:77:0a:a8:2d:14:30:a4:58:4e:e4:3e:e6:
0d:72:db:30:1a:cf:9c:57:1a:68:90:f9:58:ca:e7:
63:41:ca:41:11:ee:c8:0d:d3:79:f7:9e:b3:54:63:
ee:a7:44:24:40:6c:4f:b7:e1:fc:95:49:0c:82:ee:
61:fc:1c:c2:30:ae:6a:1d:01:d3:bc:38:6f:4a:b1:
a5:31:ff:d7:47:60:92:59:4e:be:18:d0:ac:f4:ad:
60:7d:c7:86:c0:be:e3:f6:a3:cc:d6:bc:22:28:03:
e0:44:82:79:af:5c:68:80:b4:94:67:84:69:ee:94:
1d:38:cc:e9:bc:f1:31:27:fe:9a:28:7a:a2:3c:9c:
d4:1c:3e:d9:cf:5a:71:63:8e:43:f9:15:2c:e9:61:
db:a1:7c:e8:8f:61:2c:8c:56:bf:dc:3d:0c:b0:94:
04:7e:f7:05:0d:3d:c0:d0:b2:6f:44:40:f7:e9:52:
12:83:7f:c5:bd:4a:8c:17:4d:03:9b:ef:8b:71:75:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:B2:85:9C:09:DC:E3:EA:2D:69:C5:F3:0F:9A:65:D6:5F:E6:68
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
22:64:45:64:1a:4b:95:b9:67:8a:d0:b3:f8:d8:c7:6a:c7:60:
20:da:00:7c:6c:14:d9:93:a6:40:fd:ff:29:90:7a:65:82:73:
45:dd:9b:3e:69:5b:09:9d:2b:94:44:dc:50:16:12:b9:98:4d:
b6:90:e1:a9:ef:6e:ca:f3:fa:96:be:51:76:af:56:0c:2d:ad:
e6:c4:cc:38:f7:23:51:17:36:05:62:bc:cf:10:b5:a7:c7:fc:
62:3e:de:b5:46:fd:e0:42:cd:35:6a:cd:bd:43:16:2d:25:ba:
47:c1:37:6f:7c:cb:4a:84:09:f9:87:4f:d8:3a:4e:41:2b:15:
a2:0a:ed:86:88:66:5f:b4:fa:42:a1:b5:83:ce:74:75:30:b4:
5a:35:89:b1:d4:53:62:97:7d:6d:21:f7:b9:78:de:f3:b2:eb:
80:7b:05:6c:dc:43:dd:74:26:37:ed:de:82:12:49:e9:6c:23:
f1:32:c2:fe:10:0b:cc:74:78:89:f1:d8:07:a5:3a:09:c8:e9:
8a:79:8c:90:33:b1:83:02:cb:23:bf:96:08:e1:f1:c8:8f:d2:
ba:10:f7:c2:78:4b:94:5b:a2:ac:df:10:25:0d:65:f5:7b:8e:
77:5a:44:ba:be:d2:cb:a7:8b:36:c6:23:b8:99:53:96:2e:db:
99:53:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:32:59 2026 by rpki-client