Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38392e3130372e392e302f32342d3234203d3e20343031333632.roa
File: 38392e3130372e392e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: O4EuDna6+DZ5hJLSQTeSxQHYhzfCZpJHaL73TZQOSFA=
Subject key identifier: 57:51:B3:A9:45:4E:07:79:37:7E:8F:FF:90:7A:63:C9:36:BA:D2:DD
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 3695C4B779B16CC846A7D68E83CBA3E3B27B160C
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38392e3130372e392e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 20 Aug 2026 06:22:10 +0000
ROA not before: Thu 20 Aug 2026 06:17:10 +0000
ROA not after: Thu 19 Aug 2027 06:22:10 +0000
asID: 401362
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:95:c4:b7:79:b1:6c:c8:46:a7:d6:8e:83:cb:a3:e3:b2:7b:16:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 20 06:17:10 2026 GMT
Not After : Aug 19 06:22:10 2027 GMT
Subject: CN=5751B3A9454E0779377E8FFF907A63C936BAD2DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:56:ad:be:60:5e:15:9b:24:33:7e:bd:f9:
8f:da:5e:f4:ba:2e:85:d6:23:dd:a9:90:c1:4b:ed:
ce:67:e4:da:a9:4e:e1:46:23:e7:b8:0b:01:ad:ff:
c6:c7:86:34:ae:d3:40:39:a9:cf:73:7a:4f:0c:90:
92:f9:e5:3a:e9:78:2b:e8:5d:bd:a6:b6:e6:59:d4:
b7:6b:db:d8:d2:38:6b:40:4a:d6:a5:98:1c:82:c5:
8f:e2:f3:14:4a:e0:51:0c:39:f9:d2:ec:1a:36:56:
ad:20:36:d6:b7:56:c9:8b:17:ce:97:20:15:fc:50:
f5:4c:5f:94:b6:b4:14:4b:e9:3b:3c:7b:7c:a2:4b:
89:a8:9d:2c:0f:28:78:86:b3:2c:cd:7c:32:f6:20:
64:b8:26:46:37:28:7a:07:98:d6:21:2d:25:95:d6:
2c:52:30:41:06:9f:93:a1:18:3f:04:96:0c:88:8e:
c1:6f:6d:90:0b:20:d5:41:18:0d:52:00:70:41:67:
56:38:b5:c8:4e:13:e3:cd:f0:f5:cc:dd:99:ad:0a:
ad:65:c3:f7:7a:08:db:68:9b:50:a7:6f:75:88:06:
13:9b:33:2e:f2:67:ec:f4:11:47:94:2a:73:f9:17:
65:35:58:d2:52:c2:ad:f0:5a:a9:eb:f4:4c:14:8e:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:B3:A9:45:4E:07:79:37:7E:8F:FF:90:7A:63:C9:36:BA:D2:DD
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38392e3130372e392e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9d:bf:fd:bf:4a:45:d9:8a:28:77:8f:e0:6f:8d:87:fe:47:
db:0b:6e:af:79:fd:80:2e:e6:09:01:26:2e:52:25:c2:18:81:
19:86:4a:aa:b9:b1:6f:3f:23:26:0c:55:cc:e2:8c:c2:59:9c:
49:74:3e:3c:d6:5f:5d:83:5d:45:45:1e:e4:6c:33:16:91:ed:
96:1c:a9:45:ec:13:d4:1e:92:44:88:3d:c0:f2:bf:22:df:e0:
09:16:30:80:4c:5c:0b:19:2c:32:9b:75:9b:29:86:b1:e3:55:
dc:6e:fa:58:82:64:4d:aa:50:58:a8:a5:41:b0:d8:a6:3f:9b:
2b:71:e6:f1:8c:19:14:55:c6:c4:1b:67:a0:b9:a6:fe:37:d6:
34:99:cc:99:79:10:c5:19:7d:b4:9b:97:60:d4:b1:59:44:78:
82:dc:1b:2b:32:87:34:d7:f2:62:a9:41:1f:ad:ee:1f:ab:46:
7d:69:e3:3c:17:81:79:cd:fb:35:9f:12:a2:92:a1:73:75:a5:
5c:bd:10:6a:97:28:71:d1:91:e8:b6:16:89:73:a6:52:60:56:
b8:ca:c8:43:af:18:39:e3:f4:b0:70:fd:77:43:e5:6f:de:7b:
33:2a:6d:f1:7d:39:0a:e8:dc:1d:7a:a0:28:9e:a3:16:8c:ee:
16:c6:35:01
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNpXEt3mxbMhGp9aOg8uj47J7FgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNjA4MjAwNjE3MTBaFw0yNzA4MTkwNjIyMTBaMDMxMTAvBgNV
BAMTKDU3NTFCM0E5NDU0RTA3NzkzNzdFOEZGRjkwN0E2M0M5MzZCQUQyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o1atvmBeFZskM369+Y/aXvS6
LoXWI92pkMFL7c5n5NqpTuFGI+e4CwGt/8bHhjSu00A5qc9zek8MkJL55TrpeCvo
Xb2mtuZZ1Ldr29jSOGtAStalmByCxY/i8xRK4FEMOfnS7Bo2Vq0gNta3VsmLF86X
IBX8UPVMX5S2tBRL6Ts8e3yiS4monSwPKHiGsyzNfDL2IGS4JkY3KHoHmNYhLSWV
1ixSMEEGn5OhGD8ElgyIjsFvbZALINVBGA1SAHBBZ1Y4tchOE+PN8PXM3ZmtCq1l
w/d6CNtom1Cnb3WIBhObMy7yZ+z0EUeUKnP5F2U1WNJSwq3wWqnr9EwUjganAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUV1GzqUVOB3k3fo//kHpjyTa60t0wHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzgzOTJlMzEzMDM3MmUzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTMzMzYzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFlr
CTANBgkqhkiG9w0BAQsFAAOCAQEAH52//b9KRdmKKHeP4G+Nh/5H2wtur3n9gC7m
CQEmLlIlwhiBGYZKqrmxbz8jJgxVzOKMwlmcSXQ+PNZfXYNdRUUe5GwzFpHtlhyp
RewT1B6SRIg9wPK/It/gCRYwgExcCxksMpt1mymGseNV3G76WIJkTapQWKilQbDY
pj+bK3Hm8YwZFFXGxBtnoLmm/jfWNJnMmXkQxRl9tJuXYNSxWUR4gtwbKzKHNNfy
YqlBH63uH6tGfWnjPBeBec37NZ8SopKhc3WlXL0QapcocdGR6LYWiXOmUmBWuMrI
Q68YOeP0sHD9d0Plb957Mypt8X05CujcHXqgKJ6jFozuFsY1AQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 10:51:30 2026 by rpki-client