Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203131383738.roa
File: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (raw, json)
Hash identifier: SlO9GlcvT7Yo+eC6PysK9Rigqz2h2W2yGk/p5q0Rstw=
Subject key identifier: 25:81:22:9A:CB:E8:E7:31:B9:EE:09:2C:21:BF:8B:17:06:2E:FE:47
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 19C59D56559CBD1D784137119716D96A484D82AA
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203131383738.roa
Signing time: Tue 16 Jun 2026 15:47:37 +0000
ROA not before: Tue 16 Jun 2026 15:42:37 +0000
ROA not after: Tue 15 Jun 2027 15:47:37 +0000
asID: 11878
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c5:9d:56:55:9c:bd:1d:78:41:37:11:97:16:d9:6a:48:4d:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 16 15:42:37 2026 GMT
Not After : Jun 15 15:47:37 2027 GMT
Subject: CN=2581229ACBE8E731B9EE092C21BF8B17062EFE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:6c:0d:46:16:b2:ae:75:a0:ca:06:5d:e9:
26:ab:77:c5:a1:c9:0e:1f:f1:24:96:cd:e4:04:d3:
4a:ff:7c:8a:f7:eb:cd:9c:34:e3:03:54:3e:48:53:
3d:43:89:81:ae:99:c5:0e:34:9e:5d:91:11:2e:ac:
e3:6e:eb:6f:c3:2a:93:fe:4c:fe:69:82:bb:5b:b8:
a9:c0:0c:9e:bb:f3:e5:60:5f:9a:d3:2f:f1:4b:cc:
bc:bb:ee:bb:a7:2e:b6:3f:50:54:21:5b:33:47:16:
7d:39:5f:ea:ad:6d:1b:cd:4f:48:81:8c:8e:59:95:
22:d1:05:67:36:ed:4b:8f:f5:3f:ae:14:88:da:ac:
fb:e6:ed:02:c6:4e:4d:bd:df:4f:45:68:ff:81:64:
52:6b:7c:fa:10:2d:20:f5:f4:31:2a:07:56:0d:18:
35:6e:a6:47:38:c3:ad:ac:95:e7:6e:73:d3:fa:cd:
84:10:9b:4b:9d:00:b5:f0:99:ee:56:81:eb:34:4e:
50:20:b5:ee:be:05:6b:46:25:19:ee:0a:95:9f:0b:
48:5a:77:3b:ef:7e:7e:30:48:5f:6d:10:b7:fa:dd:
4e:d6:e7:68:26:b0:47:ce:19:f6:d7:b5:3c:28:53:
d2:c3:d6:22:f4:2f:f4:67:bc:eb:ae:1e:9c:4d:41:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:22:9A:CB:E8:E7:31:B9:EE:09:2C:21:BF:8B:17:06:2E:FE:47
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203131383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e9:9b:d1:a3:b1:58:7a:51:c9:b0:d4:b7:bd:c2:73:7b:49:
6d:b5:77:36:fb:e4:0e:93:92:d4:6e:f8:17:42:6b:43:59:bb:
05:f3:c7:4f:99:ac:bf:75:1e:c9:ae:25:77:0c:5d:9e:af:ba:
2d:cb:45:6b:25:8d:63:4f:e7:5b:a4:8a:6b:97:4c:e9:da:17:
e1:75:d1:20:b7:5e:61:80:d5:68:80:cb:3d:53:ad:84:ff:dc:
c9:17:d2:27:9a:3e:9d:57:c8:15:19:06:eb:2d:94:9e:69:ca:
99:0f:15:46:b7:c6:78:49:a9:f9:7b:68:28:9f:10:59:6a:81:
27:3c:98:e5:32:88:1a:28:81:55:8f:b2:9b:3c:fe:a1:5d:41:
50:47:1f:d4:0e:fa:17:bb:ae:df:ba:83:02:20:a8:c5:35:57:
1b:eb:64:7d:66:e2:4b:30:ae:17:21:06:1a:ae:ba:90:61:63:
6f:03:a6:f7:11:cc:de:c8:9c:62:7d:72:52:aa:c9:dc:20:d9:
d2:ac:06:78:d1:3c:85:fb:be:16:b4:7d:93:c1:1e:ca:fb:f5:
25:a6:14:44:55:51:fd:4e:68:53:73:98:55:fe:d5:cf:20:6d:
a5:87:75:09:7e:31:6b:24:c6:2d:5c:c0:d5:3a:fb:84:95:7e:
86:55:ca:ca
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGcWdVlWcvR14QTcRlxbZakhNgqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy
NjllYjNkNjAeFw0yNjA2MTYxNTQyMzdaFw0yNzA2MTUxNTQ3MzdaMDMxMTAvBgNV
BAMTKDI1ODEyMjlBQ0JFOEU3MzFCOUVFMDkyQzIxQkY4QjE3MDYyRUZFNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xGwNRhayrnWgygZd6Sard8Wh
yQ4f8SSWzeQE00r/fIr3682cNOMDVD5IUz1DiYGumcUONJ5dkREurONu62/DKpP+
TP5pgrtbuKnADJ678+VgX5rTL/FLzLy77runLrY/UFQhWzNHFn05X+qtbRvNT0iB
jI5ZlSLRBWc27UuP9T+uFIjarPvm7QLGTk29309FaP+BZFJrfPoQLSD19DEqB1YN
GDVupkc4w62sleduc9P6zYQQm0udALXwme5Wges0TlAgte6+BWtGJRnuCpWfC0ha
dzvvfn4wSF9tELf63U7W52gmsEfOGfbXtTwoU9LD1iL0L/RnvOuuHpxNQd/xAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJYEimsvo5zG57gksIb+LFwYu/kcwHwYDVR0j
BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0
MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh
ZXM5WS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt
NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzgzNTJlMzIzMDM5MmUzMTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTM4MzczOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXR
EzANBgkqhkiG9w0BAQsFAAOCAQEAfOmb0aOxWHpRybDUt73Cc3tJbbV3NvvkDpOS
1G74F0JrQ1m7BfPHT5msv3Ueya4ldwxdnq+6LctFayWNY0/nW6SKa5dM6doX4XXR
ILdeYYDVaIDLPVOthP/cyRfSJ5o+nVfIFRkG6y2UnmnKmQ8VRrfGeEmp+XtoKJ8Q
WWqBJzyY5TKIGiiBVY+ymzz+oV1BUEcf1A76F7uu37qDAiCoxTVXG+tkfWbiSzCu
FyEGGq66kGFjbwOm9xHM3sicYn1yUqrJ3CDZ0qwGeNE8hfu+FrR9k8Eeyvv1JaYU
RFVR/U5oU3OYVf7VzyBtpYd1CX4xayTGLVzA1Tr7hJV+hlXKyg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:57 2026 by rpki-client