Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38312e38392e34382e302f32302d3234203d3e203239343035.roa
File: 38312e38392e34382e302f32302d3234203d3e203239343035.roa (raw, json)
Hash identifier: oOFdsTbMdYmh54V2UagrZUE6rX1OAnUs3P4bv6a/jzs=
Subject key identifier: F2:72:70:D3:CD:79:4B:07:CD:08:0A:D7:5C:19:9B:92:85:30:B8:2A
Certificate issuer: /CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Certificate serial: 35EB4CA40ABAC9CA9760CE8989639E7DBA734482
Authority key identifier: AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38312e38392e34382e302f32302d3234203d3e203239343035.roa
Signing time: Tue 08 Sep 2026 07:20:29 +0000
ROA not before: Tue 08 Sep 2026 07:15:29 +0000
ROA not after: Tue 07 Sep 2027 07:20:29 +0000
asID: 29405
IP address blocks: 81.89.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:eb:4c:a4:0a:ba:c9:ca:97:60:ce:89:89:63:9e:7d:ba:73:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0ce3e6a9dbcfa251e56e5002ec4bbbcb05b866
Validity
Not Before: Sep 8 07:15:29 2026 GMT
Not After : Sep 7 07:20:29 2027 GMT
Subject: CN=F27270D3CD794B07CD080AD75C199B928530B82A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:aa:d1:b6:31:b5:ea:23:a9:4c:9a:b7:bf:
5d:b6:4f:91:84:a7:57:de:35:75:e4:1b:83:71:0e:
a7:ff:d5:4f:f5:f8:9e:b6:34:ad:90:52:24:b5:39:
61:7b:ca:c4:c8:ed:65:6d:f0:e9:cd:98:d3:26:2f:
3f:15:8d:a4:e2:19:2d:16:27:58:d1:20:df:98:d8:
24:b5:c0:ad:c6:63:9c:9a:d1:09:d0:71:19:41:23:
0f:c8:d9:e7:e1:a3:65:b3:6e:49:cf:6f:ef:f3:94:
cc:ba:70:bc:a5:da:8a:1d:78:32:7c:da:fb:53:e8:
d9:2f:56:bc:d4:85:cf:e7:72:db:41:29:de:c6:54:
4c:c2:f6:fe:6f:ac:0c:79:7c:9e:15:c9:41:68:a2:
ef:d2:8e:ab:3d:a5:2c:80:61:d9:25:23:4a:41:9e:
75:84:70:33:09:36:07:14:b8:e4:2f:43:ea:cb:d2:
e2:8e:c8:14:59:2d:4b:9d:94:3e:ed:da:16:e2:f7:
71:cb:2b:c9:0f:5d:57:ae:88:20:26:4c:b7:e9:5f:
8f:93:4e:c9:40:b4:22:be:11:a7:80:6b:72:f8:21:
89:f9:96:f0:67:4a:71:f5:76:6a:2c:28:64:1f:f5:
e3:e0:e6:2a:3a:ee:66:3e:95:ba:cc:5e:b1:6d:30:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:72:70:D3:CD:79:4B:07:CD:08:0A:D7:5C:19:9B:92:85:30:B8:2A
X509v3 Authority Key Identifier:
keyid:AC:0C:E3:E6:A9:DB:CF:A2:51:E5:6E:50:02:EC:4B:BB:CB:05:B8:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/AC0CE3E6A9DBCFA251E56E5002EC4BBBCB05B866.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzj5qnbz6JR5W5QAuxLu8sFuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35a0eff2-b45c-429f-9001-2341d46b63e0/0/38312e38392e34382e302f32302d3234203d3e203239343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.48.0/20
Signature Algorithm: sha256WithRSAEncryption
47:3f:62:8c:c1:41:a5:d3:d8:0e:93:80:02:c2:44:df:c1:2b:
93:b8:84:de:c2:35:4e:ba:d6:da:08:a1:06:60:af:5b:31:5d:
a2:79:11:4c:d5:6a:7e:f7:27:d3:4f:3d:e9:2f:bb:66:7f:1c:
de:1e:27:5e:50:9e:01:65:54:77:81:6e:6f:f2:e6:05:c5:62:
0b:19:4f:8b:06:e7:ca:f5:6a:fb:46:0c:71:99:9e:91:3a:3b:
52:2f:bc:81:42:01:16:e8:e3:46:3b:74:c6:5e:d0:ea:ea:89:
1b:9a:0c:71:7d:a9:f8:08:30:1d:e7:f8:ec:9d:ce:f0:2d:c6:
d4:9f:a2:55:99:b0:13:ea:20:47:e1:f4:d1:96:d3:d5:36:0f:
dc:d5:7d:72:d5:a3:5b:74:9c:7d:09:e0:ca:6d:c3:2f:3e:92:
e6:96:7f:24:67:4a:b8:d2:11:d9:6e:d9:d1:d9:a4:3b:58:c1:
bd:66:c8:a9:37:8c:21:3c:eb:e5:ba:05:ff:7c:3b:a5:50:b9:
72:8e:17:0d:5e:f5:51:ed:0f:d5:2e:b4:fc:d8:f1:59:f8:bf:
98:28:bd:0b:b9:1e:49:32:f9:70:a9:84:24:cd:00:86:39:ea:
41:29:1b:5d:77:3d:a3:ca:e4:01:71:ee:c4:74:68:b3:0a:d9:
76:4c:a8:6e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUNetMpAq6ycqXYM6JiWOefbpzRIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWMwY2UzZTZhOWRiY2ZhMjUxZTU2ZTUwMDJlYzRiYmJj
YjA1Yjg2NjAeFw0yNjA5MDgwNzE1MjlaFw0yNzA5MDcwNzIwMjlaMDMxMTAvBgNV
BAMTKEYyNzI3MEQzQ0Q3OTRCMDdDRDA4MEFENzVDMTk5QjkyODUzMEI4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2KrRtjG16iOpTJq3v122T5GE
p1feNXXkG4NxDqf/1U/1+J62NK2QUiS1OWF7ysTI7WVt8OnNmNMmLz8VjaTiGS0W
J1jRIN+Y2CS1wK3GY5ya0QnQcRlBIw/I2efho2WzbknPb+/zlMy6cLyl2oodeDJ8
2vtT6NkvVrzUhc/ncttBKd7GVEzC9v5vrAx5fJ4VyUFoou/Sjqs9pSyAYdklI0pB
nnWEcDMJNgcUuOQvQ+rL0uKOyBRZLUudlD7t2hbi93HLK8kPXVeuiCAmTLfpX4+T
TslAtCK+EaeAa3L4IYn5lvBnSnH1dmosKGQf9ePg5io67mY+lbrMXrFtMGhjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU8nJw0815SwfNCArXXBmbkoUwuCowHwYDVR0j
BBgwFoAUrAzj5qnbz6JR5W5QAuxLu8sFuGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzVhMGVmZjItYjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2
M2UwLzAvQUMwQ0UzRTZBOURCQ0ZBMjUxRTU2RTUwMDJFQzRCQkJDQjA1Qjg2Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JBemo1cW5iejZKUjVXNVFBdXhMdThz
RnVHWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzVhMGVmZjIt
YjQ1Yy00MjlmLTkwMDEtMjM0MWQ0NmI2M2UwLzAvMzgzMTJlMzgzOTJlMzQzODJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzkzNDMwMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARRWTAw
DQYJKoZIhvcNAQELBQADggEBAEc/YozBQaXT2A6TgALCRN/BK5O4hN7CNU661toI
oQZgr1sxXaJ5EUzVan73J9NPPekvu2Z/HN4eJ15QngFlVHeBbm/y5gXFYgsZT4sG
58r1avtGDHGZnpE6O1IvvIFCARbo40Y7dMZe0OrqiRuaDHF9qfgIMB3n+OydzvAt
xtSfolWZsBPqIEfh9NGW09U2D9zVfXLVo1t0nH0J4Mptwy8+kuaWfyRnSrjSEdlu
2dHZpDtYwb1myKk3jCE86+W6Bf98O6VQuXKOFw1e9VHtD9UutPzY8Vn4v5govQu5
Hkky+XCphCTNAIY56kEpG113PaPK5AFx7sR0aLMK2XZMqG4=
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:58 2026 by rpki-client