Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232332e302f32342d3234203d3e20323036323236.roa
File: 38352e3230392e3232332e302f32342d3234203d3e20323036323236.roa (raw, json)
Hash identifier: 1EtuniIRMSV6LVjy2Kpp0PA/+2OKdX1z4eZ6Ar7Uw7w=
Subject key identifier: 16:A7:F1:0E:07:32:8B:49:E6:B5:17:B0:23:BF:41:B4:4A:5F:EE:14
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4F992ADAE022050AD74F3C896228BEF66C8F4F2A
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232332e302f32342d3234203d3e20323036323236.roa
Signing time: Wed 07 Oct 2026 16:49:36 +0000
ROA not before: Wed 07 Oct 2026 16:44:36 +0000
ROA not after: Wed 06 Oct 2027 16:49:36 +0000
asID: 206226
IP address blocks: 85.209.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 14:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:99:2a:da:e0:22:05:0a:d7:4f:3c:89:62:28:be:f6:6c:8f:4f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 7 16:44:36 2026 GMT
Not After : Oct 6 16:49:36 2027 GMT
Subject: CN=16A7F10E07328B49E6B517B023BF41B44A5FEE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:5e:a9:61:71:a9:08:96:f6:8d:4d:a4:48:
d2:0e:90:cc:a7:6b:8b:fd:01:02:fe:6d:97:81:c2:
14:2f:71:99:50:a8:95:ba:e8:b8:2b:b9:8f:7f:ff:
48:7a:3d:b5:63:08:c8:0a:9a:f1:4a:3c:b5:f4:1b:
46:f6:04:da:29:70:08:b3:9c:9c:2f:d2:28:bd:67:
1f:3e:52:ff:8b:f4:17:33:a0:8c:0e:12:c4:d7:0d:
b4:1d:1f:61:fe:4b:6c:77:8f:52:19:13:db:2a:98:
6a:71:fd:14:8d:71:79:11:10:16:68:56:84:3e:a3:
d3:4a:f0:e0:0e:ff:e8:16:4f:15:ce:31:cf:29:c3:
ff:69:7d:8b:f8:bb:12:0b:d7:43:09:a0:27:99:62:
76:e2:0c:fa:f5:a4:2f:08:90:e0:ad:ee:3b:47:97:
43:28:f6:55:f4:97:2d:bc:42:a1:50:0f:8a:32:ff:
a5:57:0c:04:78:46:c9:42:1c:da:a3:a1:9c:48:5e:
9a:22:40:71:e7:1a:c8:3a:70:0e:a8:e5:2f:52:65:
ac:cd:09:6a:96:d9:d1:94:89:04:de:42:80:5d:b9:
8c:b7:13:08:f8:da:34:b5:24:6e:e8:e7:b0:d4:0d:
c3:ad:6a:91:7f:c8:e4:e1:f3:1e:31:f5:20:4a:cd:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:F1:0E:07:32:8B:49:E6:B5:17:B0:23:BF:41:B4:4A:5F:EE:14
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/38352e3230392e3232332e302f32342d3234203d3e20323036323236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:0a:12:2c:54:f0:15:ff:d4:30:3f:dd:16:8d:e8:de:a0:48:
a1:f0:35:87:21:e3:6f:62:d0:78:9a:36:3c:65:4b:e0:b8:81:
1d:b9:7f:bc:09:15:5b:35:b0:c0:e2:a1:79:d9:45:cf:7a:5c:
23:9b:e7:9f:7c:d1:e6:ba:40:fa:37:54:7c:ae:19:63:0a:09:
92:0b:57:cd:54:65:a5:bd:93:97:6c:7d:87:87:ff:bc:6e:bc:
2c:64:72:3b:fc:78:2e:ba:15:57:08:d3:49:80:54:12:a0:5e:
20:9d:3a:8a:79:f2:6d:64:b7:ce:51:0c:a1:e6:3d:e6:3d:80:
6c:b2:aa:f0:74:9e:c9:5f:6d:b1:b0:21:05:d5:83:f2:4f:c5:
dd:02:70:0c:2e:53:83:94:38:c8:39:41:4e:b3:9b:dd:86:ba:
6b:fa:1e:6f:34:11:82:9e:c3:a6:ac:84:1a:23:40:ce:1c:7f:
fb:4d:8b:69:4c:2c:0c:cb:1d:26:bb:96:35:5f:14:f5:d0:f0:
93:a8:da:da:72:3f:86:9d:e6:5c:80:22:55:f5:6d:e2:95:86:
ee:61:ec:4c:4c:9c:26:84:a3:4d:93:2b:07:f9:a7:0a:fa:bf:
12:ca:1e:fc:93:3a:b0:e4:35:ed:d2:ae:47:79:b7:93:6a:d0:
e9:50:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:25:46 2026 by rpki-client