Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203234363736.roa
File: 38342e31392e3136372e302f32342d3234203d3e203234363736.roa (raw, json)
Hash identifier: yrY4Sa/S7/FHE3tlVaPLtbqWO/msdFPgKmo+qChSrxE=
Subject key identifier: EA:83:B8:79:8A:05:FA:64:19:B7:1E:E0:14:9E:C3:82:04:BF:FB:19
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 0F22D5F247E7D6A71A63B543575A5404D0D27C22
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203234363736.roa
Signing time: Tue 08 Sep 2026 06:59:22 +0000
ROA not before: Tue 08 Sep 2026 06:54:22 +0000
ROA not after: Tue 07 Sep 2027 06:59:22 +0000
asID: 24676
IP address blocks: 84.19.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:22:d5:f2:47:e7:d6:a7:1a:63:b5:43:57:5a:54:04:d0:d2:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Sep 8 06:54:22 2026 GMT
Not After : Sep 7 06:59:22 2027 GMT
Subject: CN=EA83B8798A05FA6419B71EE0149EC38204BFFB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:56:ab:73:3c:af:47:90:29:4c:50:1d:b0:
f1:57:92:8b:8c:9a:27:46:15:2e:07:75:7b:0b:31:
f1:be:27:9a:be:fa:41:77:9d:d6:f5:2c:c9:05:d3:
02:14:72:9d:ae:34:cf:ac:c2:a7:9f:27:1a:5e:bb:
0c:8a:f7:1f:ca:c0:c3:92:72:45:7b:79:e3:5e:ad:
0b:77:65:4a:91:fe:ae:fe:5d:70:55:fe:d0:44:ee:
a0:62:de:ab:3d:50:c6:f4:68:ab:ff:7b:a9:b9:cd:
a0:59:3c:10:69:6a:46:24:1c:28:7f:e3:51:46:02:
70:1d:7c:b2:03:49:64:41:9b:86:11:4f:ef:41:c1:
2c:89:00:2c:74:2e:e4:80:7f:27:1a:77:97:a9:e1:
70:40:45:b2:34:33:61:06:76:d5:79:f0:49:d6:2f:
83:a4:e3:3f:58:14:9c:8b:58:89:b7:cc:9f:5c:55:
29:dc:ad:4a:99:24:be:10:d8:0e:83:0b:01:54:5c:
c8:d4:65:51:6d:f0:51:b0:ae:67:c9:a9:6b:71:bd:
81:f1:3b:a0:1b:c9:6a:50:63:35:4c:da:4b:49:d4:
0e:3e:32:35:f2:00:80:0d:b8:44:8f:5c:9d:a5:a1:
0b:55:2c:59:83:e5:af:a3:38:3c:87:66:ba:6c:09:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:B8:79:8A:05:FA:64:19:B7:1E:E0:14:9E:C3:82:04:BF:FB:19
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/38342e31392e3136372e302f32342d3234203d3e203234363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
56:08:d3:16:3d:e5:03:04:35:70:d2:2b:3b:c5:5b:dd:f4:b5:
ae:28:9c:f9:4d:a1:ae:42:63:72:e1:77:ed:3c:2b:52:65:38:
88:58:29:3c:b6:15:0d:41:3b:08:b2:f7:64:d3:67:bc:4d:44:
4f:7e:92:64:54:22:8f:d7:ea:6c:fc:58:1b:1f:ef:05:84:0e:
45:d7:1c:61:b9:07:ff:ec:72:3c:cb:b6:14:8c:b3:b7:19:f4:
a9:d0:91:f2:3d:89:77:b8:dc:23:90:05:b5:a8:3e:8c:76:41:
50:ca:1d:aa:cd:93:68:42:0d:74:f0:be:56:a7:4b:da:33:da:
3c:91:87:aa:4a:92:b0:1d:5a:ac:d7:6c:51:ae:95:8e:0e:3f:
de:e4:bd:25:65:77:b2:42:5d:cc:cb:9c:23:c0:f5:89:a8:78:
b0:22:99:f3:da:c6:95:69:0a:7f:a3:6d:f9:14:2c:3b:9e:45:
5d:d7:08:d8:4c:e0:5c:62:63:50:94:bb:d9:f1:fb:ef:9b:d6:
c5:e9:73:30:dd:ac:5f:24:21:9e:2c:37:82:2d:5e:df:8e:2f:
db:66:8f:8a:eb:8d:d8:fc:a4:51:4a:d5:b0:95:9d:b9:7f:8a:
82:6c:79:e2:fe:aa:7d:75:fb:5f:8c:79:02:61:8f:9e:0b:2e:
1e:94:00:45
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDyLV8kfn1qcaY7VDV1pUBNDSfCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWU1NzY5OTYzODhlOTRiOGM3YWIyMGVmZmIyM2JkMTFi
ZWNiNDEwODAeFw0yNjA5MDgwNjU0MjJaFw0yNzA5MDcwNjU5MjJaMDMxMTAvBgNV
BAMTKEVBODNCODc5OEEwNUZBNjQxOUI3MUVFMDE0OUVDMzgyMDRCRkZCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqVarczyvR5ApTFAdsPFXkouM
midGFS4HdXsLMfG+J5q++kF3ndb1LMkF0wIUcp2uNM+swqefJxpeuwyK9x/KwMOS
ckV7eeNerQt3ZUqR/q7+XXBV/tBE7qBi3qs9UMb0aKv/e6m5zaBZPBBpakYkHCh/
41FGAnAdfLIDSWRBm4YRT+9BwSyJACx0LuSAfycad5ep4XBARbI0M2EGdtV58EnW
L4Ok4z9YFJyLWIm3zJ9cVSncrUqZJL4Q2A6DCwFUXMjUZVFt8FGwrmfJqWtxvYHx
O6AbyWpQYzVM2ktJ1A4+MjXyAIANuESPXJ2loQtVLFmD5a+jODyHZrpsCZfRAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6oO4eYoF+mQZtx7gFJ7DggS/+xkwHwYDVR0j
BBgwFoAUnldpljiOlLjHqyDv+yO9Eb7LQQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAtMmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2
MTIzLzAvOUU1NzY5OTYzODhFOTRCOEM3QUIyMEVGRkIyM0JEMTFCRUNCNDEwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25sZHBsamlPbExqSHF5RHYteU85RWI3
TFFRZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjVlNjQwMzAt
MmYyOC00MmM5LWIwMDQtMzU0YmIyOGY2MTIzLzAvMzgzNDJlMzEzOTJlMzEzNjM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM2MzczNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQT
pzANBgkqhkiG9w0BAQsFAAOCAQEAVgjTFj3lAwQ1cNIrO8Vb3fS1riic+U2hrkJj
cuF37TwrUmU4iFgpPLYVDUE7CLL3ZNNnvE1ET36SZFQij9fqbPxYGx/vBYQORdcc
YbkH/+xyPMu2FIyztxn0qdCR8j2Jd7jcI5AFtag+jHZBUModqs2TaEINdPC+VqdL
2jPaPJGHqkqSsB1arNdsUa6Vjg4/3uS9JWV3skJdzMucI8D1iah4sCKZ89rGlWkK
f6Nt+RQsO55FXdcI2EzgXGJjUJS72fH775vWxelzMN2sXyQhniw3gi1e344v22aP
iuuN2PykUUrVsJWduX+Kgmx54v6qfXX7X4x5AmGPngsuHpQARQ==
-----END CERTIFICATE-----
Generated at Mon Sep 14 00:01:09 2026 by rpki-client