Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232322e302f32342d3234203d3e203433363431.roa
File: 38352e3230392e3232322e302f32342d3234203d3e203433363431.roa (raw, json)
Hash identifier: dm9wgAkXCzccg+bci6JwicY1UjEHDj37jOGwCfUiNag=
Subject key identifier: 88:26:82:56:82:E8:A9:54:96:A8:9C:07:31:94:4F:6D:83:03:FC:F7
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2E22CCB9600296D0211B11AA20AAD8D3173BE877
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232322e302f32342d3234203d3e203433363431.roa
Signing time: Tue 06 Oct 2026 04:49:35 +0000
ROA not before: Tue 06 Oct 2026 04:44:35 +0000
ROA not after: Tue 05 Oct 2027 04:49:35 +0000
asID: 43641
IP address blocks: 85.209.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:22:cc:b9:60:02:96:d0:21:1b:11:aa:20:aa:d8:d3:17:3b:e8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 6 04:44:35 2026 GMT
Not After : Oct 5 04:49:35 2027 GMT
Subject: CN=8826825682E8A95496A89C0731944F6D8303FCF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:f8:e3:93:fb:5c:8b:b1:c1:05:53:d1:b0:
70:01:a6:67:91:d4:60:fc:05:b6:02:49:ae:ee:7d:
4a:a0:a4:cc:ad:d0:50:ac:7c:fc:61:14:9f:d3:c4:
bb:6c:5a:77:66:0d:41:a4:01:90:1f:aa:ae:73:86:
c3:b8:80:b7:d7:d4:68:cc:5d:65:ba:6f:be:ab:a4:
d6:d5:c8:24:9a:8a:6b:97:6c:a4:54:69:2e:fb:35:
6c:99:18:e3:51:01:25:6e:40:63:25:39:38:50:56:
46:68:da:b1:b7:51:f4:ea:87:7c:3e:7d:63:29:d2:
89:7d:5f:62:14:7c:af:af:65:1f:79:2c:15:56:d0:
bf:4f:77:f7:c3:d1:4d:99:30:66:2b:a2:8a:8f:4a:
92:94:41:e0:7f:99:f2:01:e2:7b:c2:c3:7a:a1:03:
d2:3f:6a:b1:1c:76:3d:9c:c4:0e:af:d8:3f:c1:2f:
f7:01:26:42:e8:55:7f:67:0a:fc:2b:81:9b:ee:56:
1b:12:81:21:c1:0d:4d:2c:08:ad:bf:e2:de:86:13:
cc:79:56:50:b7:05:0f:2c:02:6d:dd:b1:cd:0e:4e:
33:c5:76:74:a8:13:bd:11:cc:21:4c:da:19:b4:bc:
32:a0:92:58:00:39:ab:df:bc:bc:68:63:16:9c:e1:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:26:82:56:82:E8:A9:54:96:A8:9C:07:31:94:4F:6D:83:03:FC:F7
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232322e302f32342d3234203d3e203433363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:be:b6:96:50:94:fa:e3:4f:57:c9:35:cd:9a:01:12:49:f8:
43:b8:b1:05:dc:02:28:d7:1d:e1:39:b5:90:ea:c3:04:a2:e6:
c5:58:8c:7c:63:4a:ad:01:44:93:25:5a:cd:5d:5e:e3:a4:63:
b4:03:f6:f4:3b:04:e8:28:e4:01:3e:21:00:63:88:e9:0b:ca:
ca:0e:59:0f:c6:2a:fc:84:8b:71:18:65:5a:c0:6f:ad:d3:28:
1f:48:9c:20:be:d8:33:19:bc:3b:98:5c:84:86:21:0b:c6:b5:
c1:28:f0:06:85:e6:24:53:92:3c:4b:57:91:dc:31:df:57:ca:
bd:89:22:e8:f9:f3:fc:02:03:9f:9d:28:ac:cb:71:48:5b:9f:
1b:1b:3d:da:09:c6:16:b0:b4:96:ec:2a:ef:9b:9b:ee:fd:7d:
ac:e0:ec:fb:40:7c:68:fc:f6:cb:cc:b5:e2:cf:aa:c4:58:dd:
2f:62:7c:30:4e:6c:c0:6c:55:8c:e4:2a:1d:29:80:11:3b:7c:
02:e3:b8:af:17:1b:8c:f9:11:cf:bb:92:b1:df:e0:02:32:b6:
4c:46:8d:33:2d:05:cf:ff:d8:da:46:a7:0b:ff:cf:80:28:e8:
0c:e1:24:a3:f7:5d:28:7e:c0:5f:3a:fc:d1:62:a5:cf:b6:3f:
49:16:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:59:37 2026 by rpki-client