Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20343031333632.roa
File: 38392e34322e3131302e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: oRSIVJbwJnhexnCnyb9LxEnD6ezATcWZP0wEMZEKJtE=
Subject key identifier: CC:0F:B4:61:39:F0:1B:35:E3:E5:F4:D4:7C:9E:43:C2:B1:87:4F:FB
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 4FDCE18C5ABADF62D8DC4996B987221962EF50DE
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 20 Aug 2026 06:22:12 +0000
ROA not before: Thu 20 Aug 2026 06:17:12 +0000
ROA not after: Thu 19 Aug 2027 06:22:12 +0000
asID: 401362
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:dc:e1:8c:5a:ba:df:62:d8:dc:49:96:b9:87:22:19:62:ef:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 20 06:17:12 2026 GMT
Not After : Aug 19 06:22:12 2027 GMT
Subject: CN=CC0FB46139F01B35E3E5F4D47C9E43C2B1874FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:d4:58:5d:f8:33:47:06:99:0a:76:60:e5:
63:78:d7:67:8f:ce:29:94:cf:71:cb:5a:a3:f9:82:
46:5c:74:68:3c:2b:a0:c4:06:fa:e6:24:db:f6:a3:
d2:48:90:c1:cf:98:9e:9d:f1:7c:16:34:e6:a1:a9:
e7:25:5c:4e:02:a1:4f:5b:1d:e3:f9:8e:8f:85:6f:
eb:a2:22:f7:8b:8d:bf:e2:3b:7c:cb:37:3c:cc:2e:
c5:45:a1:88:36:ba:81:7c:3b:33:66:be:39:aa:a1:
e9:cf:07:f1:66:dd:03:6e:3f:78:9d:d1:5b:00:ad:
07:b9:b3:c7:df:52:f8:86:d3:73:4d:bf:55:44:bb:
e1:94:e4:8e:aa:d6:62:a4:72:02:5e:53:31:49:bf:
11:82:ca:50:5b:43:7d:ff:63:93:93:22:e0:91:82:
cf:0c:43:be:dd:ce:99:f5:5a:37:2e:38:c1:39:2d:
0c:f3:ac:83:b0:1c:45:32:9b:16:ec:f6:b6:00:8a:
bc:e5:8a:2f:ca:42:e2:a0:4d:6d:3a:70:88:3b:98:
d9:dd:2d:98:60:56:a5:06:9b:e5:ae:83:aa:5d:f3:
b5:e6:03:79:2d:b9:e6:1b:3c:32:d0:0b:f0:95:78:
9d:f2:f9:f7:98:2d:97:66:73:39:51:c9:dd:d2:9c:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:B4:61:39:F0:1B:35:E3:E5:F4:D4:7C:9E:43:C2:B1:87:4F:FB
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c9:cd:30:1f:8f:e0:6b:2e:61:12:e0:37:de:f0:3d:97:08:
f5:b2:e0:a6:25:b2:f0:05:91:37:c1:6b:b4:a7:47:61:f3:c9:
c8:26:a2:8f:41:66:6e:34:1e:74:0f:07:04:be:6c:54:b1:cb:
ce:0e:ea:f3:99:de:2d:d7:be:77:f9:4f:02:a2:db:ca:08:ec:
c0:d3:1e:8d:05:8e:ab:f0:57:76:c4:53:88:98:3f:5b:ae:7f:
3f:40:83:f7:6a:16:26:89:96:ab:ae:9e:01:81:c6:08:be:1e:
f8:d9:25:1e:7b:52:77:b3:e0:fd:97:0d:0c:58:2e:38:27:72:
23:1b:a7:59:cc:96:e9:2f:e1:62:0d:62:17:c1:6d:cb:3c:27:
99:56:84:55:15:64:04:ce:e8:8d:dc:1a:71:22:a7:2b:75:d3:
e1:67:a7:38:20:48:a6:44:ba:a0:36:5a:fa:70:f3:bb:f7:2f:
19:ce:b5:45:c6:43:7d:3c:ce:5e:0e:25:fb:43:f3:87:e5:4e:
2e:96:09:06:c0:92:17:93:8b:91:51:6b:be:13:3b:4b:5f:1b:
55:c5:10:05:c3:af:fa:9e:26:1d:00:d3:c8:0a:01:9f:28:89:
22:a0:bc:72:07:5d:7d:66:93:7e:b6:f9:48:e0:f6:47:6d:b0:
82:85:9d:03
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUT9zhjFq632LY3EmWuYciGWLvUN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNjA4MjAwNjE3MTJaFw0yNzA4MTkwNjIyMTJaMDMxMTAvBgNV
BAMTKENDMEZCNDYxMzlGMDFCMzVFM0U1RjRENDdDOUU0M0MyQjE4NzRGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/edRYXfgzRwaZCnZg5WN412eP
zimUz3HLWqP5gkZcdGg8K6DEBvrmJNv2o9JIkMHPmJ6d8XwWNOahqeclXE4CoU9b
HeP5jo+Fb+uiIveLjb/iO3zLNzzMLsVFoYg2uoF8OzNmvjmqoenPB/Fm3QNuP3id
0VsArQe5s8ffUviG03NNv1VEu+GU5I6q1mKkcgJeUzFJvxGCylBbQ33/Y5OTIuCR
gs8MQ77dzpn1WjcuOME5LQzzrIOwHEUymxbs9rYAirzlii/KQuKgTW06cIg7mNnd
LZhgVqUGm+Wug6pd87XmA3ktueYbPDLQC/CVeJ3y+feYLZdmczlRyd3SnGtBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUzA+0YTnwGzXj5fTUfJ5DwrGHT/swHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzgzOTJlMzQzMjJlMzEzMTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMzNjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
WSpuMA0GCSqGSIb3DQEBCwUAA4IBAQCIyc0wH4/gay5hEuA33vA9lwj1suCmJbLw
BZE3wWu0p0dh88nIJqKPQWZuNB50DwcEvmxUscvODurzmd4t1753+U8CotvKCOzA
0x6NBY6r8Fd2xFOImD9brn8/QIP3ahYmiZarrp4BgcYIvh742SUee1J3s+D9lw0M
WC44J3IjG6dZzJbpL+FiDWIXwW3LPCeZVoRVFWQEzuiN3BpxIqcrddPhZ6c4IEim
RLqgNlr6cPO79y8ZzrVFxkN9PM5eDiX7Q/OH5U4ulgkGwJIXk4uRUWu+EztLXxtV
xRAFw6/6niYdANPICgGfKIkioLxyB119ZpN+tvlI4PZHbbCChZ0D
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:05:48 2026 by rpki-client