Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233392e302f32342d3234203d3e20323037313337.roa
File: 38352e3139302e3233392e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: zxAdpdqynIG1yktdQDzZCypTdYQrpDEFulH5xGmnMAY=
Subject key identifier: 0C:9C:3B:4F:F2:97:F8:93:C9:80:E8:DE:9B:35:EE:31:4B:D2:C9:F1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D54534BDA657646523E506245DD682DFE6BADE8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233392e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 09 Sep 2026 14:28:39 +0000
ROA not before: Wed 09 Sep 2026 14:23:39 +0000
ROA not after: Wed 08 Sep 2027 14:28:39 +0000
asID: 207137
IP address blocks: 85.190.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:54:53:4b:da:65:76:46:52:3e:50:62:45:dd:68:2d:fe:6b:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 9 14:23:39 2026 GMT
Not After : Sep 8 14:28:39 2027 GMT
Subject: CN=0C9C3B4FF297F893C980E8DE9B35EE314BD2C9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:0c:99:8c:d9:f7:71:9b:e1:29:86:fc:55:
c6:b0:69:77:a4:f2:5e:b0:9e:37:9d:72:1f:73:1e:
62:9a:33:2e:a3:eb:53:bb:e5:9c:21:cb:b1:7e:04:
bd:0d:0a:97:ba:fe:b6:8f:5e:3a:7f:df:7a:f3:af:
9b:26:1a:4f:30:54:95:2c:c0:27:bf:78:db:8d:e5:
82:7e:66:2e:eb:44:d5:2b:bb:5c:48:90:64:e2:19:
6a:2c:f9:ba:5e:9f:dd:08:81:84:79:a4:20:9d:fc:
f2:7d:dc:d1:00:a9:66:0c:ce:70:ac:15:2e:9c:05:
2d:49:87:42:45:4b:8e:78:54:23:ef:a5:1c:bb:53:
cc:c2:72:0c:3c:92:bf:90:31:f0:7a:d5:a7:d1:2d:
7e:c7:82:af:ec:b8:55:c9:06:49:05:7a:d2:c0:61:
d1:7c:85:0b:fc:e1:cd:0a:da:7b:f1:cc:77:ca:4b:
96:be:e2:c2:fd:54:76:97:19:62:10:38:3e:d7:59:
c7:b0:5d:64:6c:b7:d4:ae:08:c5:6d:a2:ac:a5:67:
ee:b9:0a:0a:a4:30:86:a1:44:f0:61:9f:b7:03:3d:
a9:9e:31:ed:00:3e:27:7a:59:c3:43:b1:22:c2:06:
b2:73:6d:54:84:8a:22:2c:2b:75:47:3b:5e:47:39:
fe:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:3B:4F:F2:97:F8:93:C9:80:E8:DE:9B:35:EE:31:4B:D2:C9:F1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233392e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7f:08:5d:d4:8c:6a:9e:03:8d:7f:aa:14:f1:1d:39:54:43:
eb:e5:23:85:3d:ec:a8:f0:45:d6:bd:b0:03:49:d2:0a:b7:c3:
38:c2:a9:7c:63:34:0c:af:31:5e:ef:f0:06:98:6d:d4:2d:e3:
68:6b:71:d8:06:58:65:10:f7:bb:7d:25:74:0e:cd:a6:57:ad:
58:af:6b:85:f0:7b:8e:3d:c4:bd:0b:a5:bc:d8:c1:23:a6:04:
5d:9e:7b:75:51:9b:4e:81:f0:7d:a0:1e:ff:b5:a5:7b:7d:f7:
35:40:46:da:8a:ae:88:ea:a1:c7:5b:d6:5e:e7:8c:40:30:e7:
c9:0c:76:9f:d5:a9:72:29:c0:34:80:88:88:8c:b5:42:2e:95:
26:bb:a5:b4:7b:d8:6e:3f:10:6d:5c:c0:de:0e:29:75:f0:85:
f5:33:6b:f2:cf:87:51:6c:13:9d:d4:7d:64:3e:c3:4e:26:e5:
b3:3d:48:eb:c4:84:03:0a:51:b4:66:7e:7a:21:5d:04:b9:ba:
26:53:26:a1:b8:e2:3a:fa:fe:9e:4a:f3:69:39:82:f4:18:82:
9e:39:58:e7:b6:72:48:ac:d2:31:ad:00:bb:8c:31:de:b2:66:
99:f4:24:19:a9:4e:45:5d:8e:5c:0d:2c:b9:ad:fd:dc:b7:96:
93:37:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:03:07 2026 by rpki-client