Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20313337343130.roa
File: 38392e34322e3131302e302f32342d3234203d3e20313337343130.roa (raw, json)
Hash identifier: t7w2AjhEwLDRTkiiVetjh9gWTBqs8BnpR2as5Kppaoc=
Subject key identifier: 8C:FA:A6:73:00:8C:F3:94:6E:91:C8:1F:F2:55:50:58:A2:F0:D3:61
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 1DA035284A025E46DDF64575F9F63881BDDFDD65
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20313337343130.roa
Signing time: Tue 03 Nov 2026 07:01:10 +0000
ROA not before: Tue 03 Nov 2026 06:56:10 +0000
ROA not after: Tue 02 Nov 2027 07:01:10 +0000
asID: 137410
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a0:35:28:4a:02:5e:46:dd:f6:45:75:f9:f6:38:81:bd:df:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Nov 3 06:56:10 2026 GMT
Not After : Nov 2 07:01:10 2027 GMT
Subject: CN=8CFAA673008CF3946E91C81FF2555058A2F0D361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:f8:d4:81:1a:d0:42:7f:63:ad:f6:6e:66:
7b:6e:80:19:12:f3:5d:b5:e6:d3:f4:b0:0d:ba:f6:
6f:e8:99:ad:0f:42:6b:38:47:13:9d:f5:8d:fa:47:
fa:33:37:bf:85:f9:28:13:53:67:a2:c9:fe:cc:c2:
ed:b8:c9:06:97:43:4a:33:24:e5:ae:7f:6a:24:9d:
24:e3:24:2f:47:1f:2d:1c:0d:b2:4a:7a:b7:7a:74:
65:e1:b4:14:5a:98:da:aa:53:61:83:bf:17:08:08:
bb:60:ff:89:9e:29:88:cb:18:c4:ee:52:64:38:25:
53:e6:b4:64:18:c7:c9:0d:f7:25:36:5b:14:24:ce:
ca:18:c6:34:d5:bd:cf:e2:5e:d3:5f:eb:e2:01:2d:
44:e1:5c:04:15:9a:0f:3b:61:9a:73:81:31:ca:cf:
1a:72:23:17:2f:91:9a:79:b9:b0:53:f1:65:3b:c4:
49:47:c5:04:35:b0:92:b8:b0:eb:89:56:f6:55:ea:
0a:71:31:72:3f:9d:98:1d:77:cd:ca:3e:26:4f:a0:
55:21:8d:82:c7:cd:61:29:30:04:a6:ff:db:46:d6:
65:05:7a:bc:bf:7d:09:ef:d7:64:bf:bb:ae:79:af:
71:96:3b:80:8c:e8:a9:c9:4d:c3:86:61:81:d7:27:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:A6:73:00:8C:F3:94:6E:91:C8:1F:F2:55:50:58:A2:F0:D3:61
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e20313337343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:33:3b:66:ea:f8:ef:09:f5:54:cc:96:0a:18:8c:7c:cf:cd:
dd:22:79:c1:18:7a:77:6d:f2:cb:6e:56:b8:e0:d1:91:5f:fa:
48:cd:60:91:c8:6e:c9:6f:b4:74:df:bf:a2:c2:97:b8:ca:e6:
e4:fe:84:41:46:25:5d:41:69:3e:f9:ea:10:41:25:c5:b9:d0:
3c:63:8c:59:63:ec:04:67:c3:9d:f9:1e:a4:c5:10:a8:1c:5d:
b4:4e:13:37:39:e4:12:48:63:9d:37:55:bc:fd:18:be:6b:2c:
9f:71:41:39:9c:64:b5:ba:1a:ef:a5:fc:6d:63:13:42:40:ba:
82:01:37:1c:ff:99:c1:b7:8e:02:36:b3:d4:32:f6:44:cb:1f:
ea:4d:08:dc:0d:22:75:e6:a3:ef:c4:59:d8:7c:f9:c9:59:d4:
66:ed:f8:e9:af:e3:ab:fb:e1:fd:b1:f7:af:72:f7:d9:32:05:
2a:c3:38:e9:ff:d8:be:c4:a5:9d:fd:62:7d:83:8b:42:f1:cd:
46:0e:a0:b5:2f:1f:78:fd:17:79:1d:57:42:0e:64:e3:93:d5:
15:6e:0b:e3:1e:b9:f5:77:eb:6b:c9:76:7b:2c:15:15:6e:ab:
1a:de:0a:97:ac:09:41:8f:e4:95:0f:cb:13:69:6e:5b:98:24:
76:ce:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:34:58 2026 by rpki-client