Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203633393032.roa
File: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (raw, json)
Hash identifier: VaOxQtitcotEwDKcqVbfty4V+UnBaFXCz621Z/5UMPE=
Subject key identifier: 3E:89:D7:F5:E3:0D:8D:07:8F:99:95:6A:6E:37:08:71:FF:36:7C:70
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4B2310E6B07BAE9EF57D4C73CEA539708E064F60
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203633393032.roa
Signing time: Tue 28 Apr 2026 12:47:07 +0000
ROA not before: Tue 28 Apr 2026 12:42:07 +0000
ROA not after: Tue 27 Apr 2027 12:47:07 +0000
asID: 63902
IP address blocks: 85.209.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:23:10:e6:b0:7b:ae:9e:f5:7d:4c:73:ce:a5:39:70:8e:06:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Apr 28 12:42:07 2026 GMT
Not After : Apr 27 12:47:07 2027 GMT
Subject: CN=3E89D7F5E30D8D078F99956A6E370871FF367C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:54:c4:4d:60:f6:76:6b:92:39:cb:d4:e0:
b8:b8:8f:98:b2:88:28:8f:4c:47:11:71:c5:b8:d6:
53:a4:c0:e8:7c:95:47:90:f3:2c:d9:fe:3e:ba:de:
fb:c2:26:96:a7:b4:41:a5:08:03:7b:e8:52:0d:ae:
bb:54:b9:0d:0e:5e:b2:25:49:54:29:3c:fe:ae:65:
83:64:d5:06:74:9b:a9:b1:10:00:28:0b:e1:c8:2f:
9b:48:31:12:d9:26:d6:e0:0b:c9:e8:e3:44:ef:22:
04:a9:ba:ae:ae:f7:04:81:f1:28:26:33:b6:dd:04:
d8:02:78:0d:26:6a:bc:83:9e:10:82:af:9c:6a:d6:
65:44:b0:d7:9b:98:75:71:3b:1c:ca:63:45:59:25:
c0:c2:4f:04:d6:27:94:c7:9e:1b:6a:71:63:d5:de:
36:2d:a6:1c:08:56:13:07:c8:0c:5f:fe:ea:63:d3:
f7:db:00:ae:dd:5d:04:3a:41:5e:03:82:66:aa:26:
9b:ea:fa:ef:a3:ff:f9:27:15:c9:59:ee:c4:e7:6a:
72:c6:9f:a8:29:24:d7:67:49:9b:0a:60:fa:05:17:
06:49:55:10:5b:b6:ef:42:e3:5e:ef:a6:4b:5e:ab:
17:27:04:a8:55:4e:e2:1e:66:63:54:e1:5a:0f:f2:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:89:D7:F5:E3:0D:8D:07:8F:99:95:6A:6E:37:08:71:FF:36:7C:70
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203633393032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c7:40:5d:70:5c:ed:54:02:26:65:1e:5a:3a:59:c0:00:f3:
cb:b1:26:13:52:31:db:93:03:09:35:8b:12:ef:98:a7:14:3e:
00:44:4e:55:d5:a4:ff:08:06:fc:46:a0:d4:05:ed:2b:4e:90:
7d:00:b0:71:c3:84:1b:73:68:f6:49:db:05:f3:7a:d5:da:eb:
c2:48:33:e6:78:91:da:6b:b9:f7:c4:00:b2:91:d3:f0:ea:4d:
68:27:e5:a0:fe:04:cb:67:53:1d:19:fb:85:87:5b:09:33:0e:
a7:59:11:da:5a:14:fd:bd:6d:81:34:59:2d:4e:22:b7:de:c4:
e4:88:f0:33:d0:11:41:87:4c:02:3f:a0:3a:c5:62:15:ed:1f:
d0:7a:b1:bf:13:eb:f2:85:90:1f:c8:f8:e1:2a:2a:64:bf:a4:
d1:6e:e0:dc:f6:e2:3d:6e:72:b9:00:ac:6c:78:65:4c:ff:22:
30:85:78:a9:1f:d9:a3:0f:ca:e7:9c:d5:58:61:bd:b1:96:bd:
3e:8a:e6:3c:be:c9:79:3e:69:14:d9:65:26:a2:69:54:57:8f:
e1:5c:9a:61:9c:c5:43:70:4c:09:a8:0b:25:b6:f2:31:0e:99:
59:45:35:00:c1:71:2c:0f:84:2a:b5:39:a2:12:6c:a9:99:10:
71:75:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:55 2026 by rpki-client