Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e203135343430.roa
File: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (raw, json)
Hash identifier: 7ez4FNDsc2VXRnHlSjtzOmyRSh/gDET/tzdpB8U6faI=
Subject key identifier: 21:AE:62:66:E7:21:D8:F2:1B:5C:54:90:B6:54:08:7F:DC:BD:C8:2E
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 38FC91DDA4264E42C240FEFB1664D22255E3DCCC
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e203135343430.roa
Signing time: Sat 22 Aug 2026 14:49:30 +0000
ROA not before: Sat 22 Aug 2026 14:44:30 +0000
ROA not after: Sat 21 Aug 2027 14:49:30 +0000
asID: 15440
IP address blocks: 85.209.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fc:91:dd:a4:26:4e:42:c2:40:fe:fb:16:64:d2:22:55:e3:dc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 22 14:44:30 2026 GMT
Not After : Aug 21 14:49:30 2027 GMT
Subject: CN=21AE6266E721D8F21B5C5490B654087FDCBDC82E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:fd:57:c4:a7:1b:e8:13:f7:d0:ea:ba:16:
b7:7c:2c:0a:e7:67:cf:4e:54:d4:4a:b8:a6:b5:c6:
cd:36:ea:50:df:fb:85:59:7f:b6:ea:5a:d0:36:7c:
ae:66:e1:c5:23:32:78:07:7f:a0:91:be:d9:96:20:
c1:d2:7a:b2:49:a2:d2:38:12:24:c8:18:59:2c:76:
a6:dd:67:73:cb:91:65:28:d1:4a:f7:89:9b:76:68:
3f:b7:69:4d:cf:c6:d9:44:d1:c9:a9:0b:ff:e7:b9:
3b:9d:b8:97:52:8c:92:27:bf:28:cb:07:74:73:5a:
b8:95:32:e3:50:41:cf:4b:e9:d5:0a:59:67:89:39:
f0:39:76:4c:3c:f6:99:d1:27:07:be:20:16:65:c6:
ef:9e:ae:6d:99:17:22:54:28:24:df:78:23:30:d8:
87:3a:26:eb:c0:85:b4:12:c9:de:79:2c:e1:84:e2:
3a:a5:f2:12:1b:b7:9d:df:05:30:8c:58:2f:5b:b2:
93:a4:9e:7b:53:d8:84:89:17:69:4e:d9:48:77:7b:
8a:f5:cc:7d:bc:a9:83:48:b6:d1:4a:f4:6b:97:0f:
6e:29:10:17:3a:a2:68:06:ea:33:3d:8d:9e:7d:be:
97:a6:36:23:91:d0:69:e7:99:66:93:d3:97:45:aa:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:62:66:E7:21:D8:F2:1B:5C:54:90:B6:54:08:7F:DC:BD:C8:2E
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e203135343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:53:11:d9:21:f2:85:4f:8e:6e:f4:18:a0:a6:4b:b8:ad:8f:
50:7c:22:20:2a:76:16:81:5f:a5:36:54:ae:b9:75:0b:f0:60:
6e:89:18:6f:4a:8b:6f:79:2b:9a:f9:4d:75:0f:aa:8e:bc:2a:
35:65:23:2e:6c:d9:08:f8:64:20:67:10:27:91:f7:7e:75:a4:
67:2d:64:29:66:92:da:de:5e:1a:cf:50:69:a7:8e:e2:dc:80:
10:57:d1:d2:23:09:50:eb:eb:27:ff:10:0b:8d:f8:b5:8f:53:
8d:a2:fd:29:64:55:0e:ca:a8:dc:37:5d:c8:91:40:05:74:44:
aa:d1:6c:be:86:51:2c:36:7d:92:71:54:79:c3:42:4d:30:b9:
52:35:09:3c:fa:42:8f:1e:22:5d:a2:e3:5d:ff:fe:63:1a:f5:
cb:8a:f0:e4:04:52:e3:a5:20:0b:22:d7:9c:ba:6c:90:d7:17:
ef:a7:05:a6:15:18:7f:55:66:3f:d6:8a:07:af:c1:ee:be:dd:
83:e3:2b:53:ad:0a:f7:32:58:8f:75:0b:b0:7d:f8:3d:f0:3e:
45:7b:64:1e:89:64:4e:e0:27:f2:94:de:25:54:12:39:c4:dd:
7d:fc:b1:da:94:6f:c3:31:cd:4c:db:05:73:08:9b:48:58:d6:
31:90:14:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:27:57 2026 by rpki-client