Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa
File: 38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa (raw, json)
Hash identifier: ZhP+zpXWUfzVW2D3Gh421wDniumfO+kc6/F7MRB7boU=
Subject key identifier: 2E:1F:91:7C:AD:A7:DF:89:14:94:8D:66:0B:74:9E:56:11:7A:1D:E1
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 2D2A2A91FB93CF6CDB073350B25F8C879AC2A76C
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa
Signing time: Wed 07 Oct 2026 08:25:51 +0000
ROA not before: Wed 07 Oct 2026 08:20:51 +0000
ROA not after: Wed 06 Oct 2027 08:25:51 +0000
asID: 213772
IP address blocks: 85.209.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2a:2a:91:fb:93:cf:6c:db:07:33:50:b2:5f:8c:87:9a:c2:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Oct 7 08:20:51 2026 GMT
Not After : Oct 6 08:25:51 2027 GMT
Subject: CN=2E1F917CADA7DF8914948D660B749E56117A1DE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:56:69:9c:f9:1f:a2:81:ee:74:37:41:53:
6e:6d:39:f1:de:27:2e:23:95:41:76:94:a6:b0:3a:
d0:b4:2e:d3:14:23:31:a4:c4:6a:98:ec:8c:c5:f6:
61:d4:f0:f8:07:70:dc:2c:0c:5b:d1:ba:48:ce:27:
90:42:1d:79:d8:6e:b1:77:0a:57:eb:55:1f:2c:d4:
73:29:46:55:c1:e9:36:87:90:be:af:54:cf:a9:8b:
eb:bd:66:34:2a:3a:66:43:4a:33:95:e6:93:01:47:
e8:69:ff:2f:b7:dd:8b:a6:df:3f:0a:25:88:16:02:
24:54:57:8b:e4:b4:9f:b4:04:9a:31:14:45:0d:5f:
0a:3b:db:58:7f:b0:55:fe:c9:6b:db:51:27:b0:d8:
dc:2f:8c:78:17:07:0d:f7:df:a0:d2:a6:01:f6:48:
57:2a:8b:e9:32:72:29:1b:43:6c:2a:fd:0c:3f:e9:
f5:db:fa:29:e6:14:a7:20:86:56:8e:a0:c9:7f:6b:
1a:dd:49:b4:4a:b8:d6:1c:fa:bb:5f:5b:6b:51:8b:
e1:8a:0a:62:77:d6:84:9e:59:4d:20:e9:4e:64:ab:
7e:84:9c:84:75:c0:04:2b:4e:a7:03:b5:cb:d8:73:
2d:21:2f:8f:61:74:c1:1f:70:f7:3e:7a:9e:d6:e2:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1F:91:7C:AD:A7:DF:89:14:94:8D:66:0B:74:9E:56:11:7A:1D:E1
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233312e302f32342d3234203d3e20323133373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:77:44:cf:64:0f:cc:3c:77:7d:6f:e9:95:62:35:97:a1:0a:
16:ae:2e:9b:61:5c:d6:25:04:71:fe:b4:29:19:f8:f0:97:6b:
15:92:73:25:f8:ed:a0:63:a1:84:3a:8f:b2:19:cf:7d:2c:45:
63:d2:2b:b7:e8:15:ae:59:54:9c:4c:67:b0:8b:30:f9:80:92:
7c:6e:2e:e4:ae:88:b5:e4:bc:29:54:34:ae:5e:c2:ed:e6:b5:
50:db:84:f0:f3:60:9f:3f:e0:db:1f:5d:c1:e5:e4:70:3b:2e:
e3:38:cf:11:21:13:8d:9d:a5:81:2b:08:14:fa:64:9f:89:30:
8c:bd:a7:f7:11:9c:fb:41:7e:f3:c3:c3:73:16:bb:67:d2:33:
95:67:49:70:8b:9b:43:c1:5a:70:3e:19:16:ee:2e:98:9f:e7:
ac:ba:c0:1f:49:ad:b5:6f:b1:99:f2:e5:19:61:cd:3b:51:4d:
4c:fa:6c:aa:94:47:95:9e:95:ef:b7:f6:6f:14:c3:32:43:54:
ec:e3:dc:1e:52:1c:79:d9:cd:7a:1d:d9:cc:9d:e6:1c:91:98:
f8:60:71:85:65:6a:e3:90:36:41:fb:69:0a:1e:06:be:83:b5:
ed:16:f2:35:79:47:a7:4f:91:38:f9:c7:a7:7b:62:5e:5c:0e:
0b:9f:2d:55
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULSoqkfuTz2zbBzNQsl+Mh5rCp2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNjEwMDcwODIwNTFaFw0yNzEwMDYwODI1NTFaMDMxMTAvBgNV
BAMTKDJFMUY5MTdDQURBN0RGODkxNDk0OEQ2NjBCNzQ5RTU2MTE3QTFERTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBlZpnPkfooHudDdBU25tOfHe
Jy4jlUF2lKawOtC0LtMUIzGkxGqY7IzF9mHU8PgHcNwsDFvRukjOJ5BCHXnYbrF3
ClfrVR8s1HMpRlXB6TaHkL6vVM+pi+u9ZjQqOmZDSjOV5pMBR+hp/y+33Yum3z8K
JYgWAiRUV4vktJ+0BJoxFEUNXwo721h/sFX+yWvbUSew2NwvjHgXBw3336DSpgH2
SFcqi+kycikbQ2wq/Qw/6fXb+inmFKcghlaOoMl/axrdSbRKuNYc+rtfW2tRi+GK
CmJ31oSeWU0g6U5kq36EnIR1wAQrTqcDtcvYcy0hL49hdMEfcPc+ep7W4tOzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQULh+RfK2n34kUlI1mC3SeVhF6HeEwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt
MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzgzNTJlMzIzMDM5MmUzMjMz
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzNzM3MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABV0ecwDQYJKoZIhvcNAQELBQADggEBAKR3RM9kD8w8d31v6ZViNZehChauLpth
XNYlBHH+tCkZ+PCXaxWScyX47aBjoYQ6j7IZz30sRWPSK7foFa5ZVJxMZ7CLMPmA
knxuLuSuiLXkvClUNK5ewu3mtVDbhPDzYJ8/4NsfXcHl5HA7LuM4zxEhE42dpYEr
CBT6ZJ+JMIy9p/cRnPtBfvPDw3MWu2fSM5VnSXCLm0PBWnA+GRbuLpif56y6wB9J
rbVvsZny5RlhzTtRTUz6bKqUR5Wele+39m8UwzJDVOzj3B5SHHnZzXod2cyd5hyR
mPhgcYVlauOQNkH7aQoeBr6Dte0W8jV5R6dPkTj5x6d7Yl5cDgufLVU=
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:35 2026 by rpki-client