Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20343032323135.roa
File: 38392e34322e3131302e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: 4q0YcsiWd4B6iGzuYZR4w0idR1J4f8XIP91ctcVbe5s=
Subject key identifier: 16:D1:0F:BC:DA:67:64:F2:2D:8A:5C:30:E8:F9:EE:AE:EE:3F:68:07
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 30BDBC5676D225F6FB3B22DD5CCC227B3880A2B6
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20343032323135.roa
Signing time: Mon 24 Aug 2026 03:05:40 +0000
ROA not before: Mon 24 Aug 2026 03:00:40 +0000
ROA not after: Mon 23 Aug 2027 03:05:40 +0000
asID: 402215
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bd:bc:56:76:d2:25:f6:fb:3b:22:dd:5c:cc:22:7b:38:80:a2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 24 03:00:40 2026 GMT
Not After : Aug 23 03:05:40 2027 GMT
Subject: CN=16D10FBCDA6764F22D8A5C30E8F9EEAEEE3F6807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:27:77:92:6d:dc:40:58:d8:08:f2:2b:69:52:
87:ab:83:80:d3:ca:df:a7:ee:c4:e7:eb:6e:b5:1d:
78:fa:89:81:e4:47:7d:42:e6:6c:9f:b3:a5:7e:af:
6a:2b:85:8c:a3:e9:31:53:b4:ab:21:77:3b:e9:94:
19:b2:19:27:e3:9b:5f:b0:60:8d:c1:3b:93:00:86:
0d:55:9f:dc:b3:3e:16:01:74:bc:a6:3d:12:68:19:
06:d0:e7:bb:9f:b1:fe:8a:19:8f:4d:0c:44:0c:b9:
7b:22:e9:4e:12:57:08:bd:aa:f3:9f:f3:c3:d4:83:
e3:8d:dc:8b:a2:ad:8e:db:65:82:58:f3:e3:3e:63:
52:b8:93:5d:5c:dd:34:e4:1d:03:56:45:04:65:e6:
73:95:d8:b1:5e:db:cf:82:52:4e:b2:bc:d0:8d:91:
26:db:29:e5:11:0c:31:63:aa:2e:53:f5:7a:3f:bf:
9d:2b:c5:01:ec:95:3a:da:a3:34:58:95:d7:c0:9f:
6c:c3:65:fb:1f:6a:77:f8:44:10:e8:f9:f1:be:32:
d6:a9:63:be:6c:7b:7a:3e:f0:d2:4b:da:65:b3:24:
70:d2:68:08:60:36:4a:73:60:95:42:5e:dc:51:34:
12:6b:cd:60:be:b6:c0:42:1f:4f:d3:f6:ac:76:99:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:0F:BC:DA:67:64:F2:2D:8A:5C:30:E8:F9:EE:AE:EE:3F:68:07
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3d:31:c0:1b:eb:8d:37:84:92:c4:37:d8:e8:08:60:44:10:
33:96:3c:e2:ff:3d:d3:cd:ec:19:e4:48:65:e0:ca:3b:1f:0c:
21:e0:4e:24:81:9f:dd:84:3d:4b:db:3d:62:8f:4f:08:26:ed:
6b:72:12:a5:aa:10:86:d7:09:bd:67:ed:79:a1:cf:b4:d6:32:
4d:58:46:e5:47:d2:b6:ab:49:c9:d2:3a:28:85:c8:39:b0:df:
9f:36:d3:d0:49:f7:cc:ce:4c:73:4f:b2:5b:5b:91:18:eb:ad:
dd:1d:d4:3b:f4:cd:52:f7:b2:cc:5e:77:23:bc:85:12:17:b6:
f6:07:f0:5c:e6:17:b7:d9:6f:16:78:34:bb:e0:55:a2:b4:17:
0c:4d:14:dc:6e:4b:37:20:b7:95:6a:f8:57:29:84:17:5d:3e:
c1:fd:7c:06:97:7f:f1:11:44:e3:fb:4a:af:8e:9e:99:d5:c1:
67:04:ba:07:ef:bf:59:b8:7a:77:45:7d:ef:c9:40:44:e5:55:
4d:f1:7a:86:11:e6:4a:2b:1f:a8:0b:e0:89:f3:77:76:41:d9:
e0:b1:e9:a7:ad:58:2f:6b:14:58:9f:d6:d3:40:7d:77:fa:6c:
f4:fd:58:19:13:6f:f6:c4:15:cb:90:fc:ff:7d:a8:83:f6:46:
31:80:ae:cc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUML28VnbSJfb7OyLdXMwieziAorYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi
ZmEyY2NhNDAeFw0yNjA4MjQwMzAwNDBaFw0yNzA4MjMwMzA1NDBaMDMxMTAvBgNV
BAMTKDE2RDEwRkJDREE2NzY0RjIyRDhBNUMzMEU4RjlFRUFFRUUzRjY4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPJ3eSbdxAWNgI8itpUoerg4DT
yt+n7sTn6261HXj6iYHkR31C5myfs6V+r2orhYyj6TFTtKshdzvplBmyGSfjm1+w
YI3BO5MAhg1Vn9yzPhYBdLymPRJoGQbQ57ufsf6KGY9NDEQMuXsi6U4SVwi9qvOf
88PUg+ON3IuirY7bZYJY8+M+Y1K4k11c3TTkHQNWRQRl5nOV2LFe28+CUk6yvNCN
kSbbKeURDDFjqi5T9Xo/v50rxQHslTraozRYldfAn2zDZfsfanf4RBDo+fG+Mtap
Y75se3o+8NJL2mWzJHDSaAhgNkpzYJVCXtxRNBJrzWC+tsBCH0/T9qx2mVHBAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUFtEPvNpnZPItilww6Pnuru4/aAcwHwYDVR0j
BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz
Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt
aXpLUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWEwZGU5N2Yt
N2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQzYzc5LzAvMzgzOTJlMzQzMjJlMzEzMTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIzMTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
WSpuMA0GCSqGSIb3DQEBCwUAA4IBAQAUPTHAG+uNN4SSxDfY6AhgRBAzljzi/z3T
zewZ5Ehl4Mo7Hwwh4E4kgZ/dhD1L2z1ij08IJu1rchKlqhCG1wm9Z+15oc+01jJN
WEblR9K2q0nJ0joohcg5sN+fNtPQSffMzkxzT7JbW5EY663dHdQ79M1S97LMXncj
vIUSF7b2B/Bc5he32W8WeDS74FWitBcMTRTcbks3ILeVavhXKYQXXT7B/XwGl3/x
EUTj+0qvjp6Z1cFnBLoH779ZuHp3RX3vyUBE5VVN8XqGEeZKKx+oC+CJ83d2Qdng
semnrVgvaxRYn9bTQH13+mz0/VgZE2/2xBXLkPz/faiD9kYxgK7M
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:44 2026 by rpki-client