Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3232322e302f32332d3234203d3e2038383230.roa
File: 38322e3133392e3232322e302f32332d3234203d3e2038383230.roa (raw, json)
Hash identifier: HwHRmQcaTKt6dzpHYWIeKG4au2n2bCKR18EWu9pmQZk=
Subject key identifier: FC:FD:57:39:EF:D1:DA:56:01:B1:7B:BA:25:26:F0:EA:76:F7:B8:56
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 0FE58209EE4CAB709D47D58793FC9F6E1F4770E8
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3232322e302f32332d3234203d3e2038383230.roa
Signing time: Thu 04 Sep 2025 10:40:05 +0000
ROA not before: Thu 04 Sep 2025 10:35:05 +0000
ROA not after: Thu 03 Sep 2026 10:40:05 +0000
asID: 8820
IP address blocks: 82.139.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e5:82:09:ee:4c:ab:70:9d:47:d5:87:93:fc:9f:6e:1f:47:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:05 2025 GMT
Not After : Sep 3 10:40:05 2026 GMT
Subject: CN=FCFD5739EFD1DA5601B17BBA2526F0EA76F7B856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:a7:ff:c2:46:b5:2e:85:29:61:5d:78:ac:
c5:9b:bd:96:ac:94:7e:14:9f:01:94:1e:2c:4e:6d:
fb:a3:eb:0d:2b:4c:ef:da:6a:ce:5a:cb:5d:25:90:
d9:cb:a1:85:6c:8b:a6:30:83:e0:48:81:44:21:c6:
50:0e:63:14:05:c9:db:8a:1a:8c:c9:44:41:30:22:
d2:e6:5c:3c:33:9c:f4:c6:5c:26:64:b0:24:54:72:
df:c5:c0:cd:e0:8f:96:1b:a1:ae:c0:b4:aa:4f:0c:
32:c4:3b:0e:8a:07:ee:13:a8:46:c2:79:8d:76:a5:
11:76:67:29:cc:29:3b:59:01:1d:ba:b6:cc:85:82:
3c:d1:c7:a6:24:ac:b8:d1:45:7f:0e:52:d3:3f:91:
33:71:bf:11:61:1c:dc:d7:19:b2:d7:2e:a0:19:4d:
03:37:91:b3:bc:34:71:4e:b7:71:cd:54:d4:fb:77:
50:4f:bf:25:55:f2:4d:62:48:f2:70:6f:a1:1a:48:
7b:8f:c5:ad:1a:ff:9e:e2:93:17:d0:9e:a2:47:55:
06:e6:12:51:02:f3:fe:91:53:6b:7e:87:e6:44:33:
d2:da:d3:cc:ec:1f:c4:5f:e1:e5:e4:83:69:d0:b8:
59:91:d5:93:64:73:0b:1a:8d:52:f9:eb:37:14:90:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:57:39:EF:D1:DA:56:01:B1:7B:BA:25:26:F0:EA:76:F7:B8:56
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3232322e302f32332d3234203d3e2038383230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:06:bb:65:95:24:ba:c1:a1:ee:0c:8a:ab:3b:01:0c:34:ed:
68:27:7b:a7:2c:93:47:0f:b8:48:03:fb:fb:8e:65:8f:e6:18:
76:c5:a1:10:ba:66:bd:74:ca:fe:15:27:06:fa:d8:62:d1:5a:
48:7e:58:4a:3c:cb:89:29:3b:ce:15:d3:58:2b:22:c3:71:db:
fe:6f:d7:ab:ff:2e:20:5b:88:ee:e1:3f:d5:a8:37:a7:b6:14:
e1:b9:ad:fa:83:12:cd:ee:64:c9:19:e7:07:09:d6:6a:13:ff:
23:fe:52:1c:2f:c7:cb:d4:20:db:7b:d0:a1:01:59:b8:a4:9d:
b1:0d:be:bd:11:85:15:fc:d7:31:56:2a:b9:97:35:11:97:96:
aa:b1:52:3f:da:bf:8b:59:9d:75:dc:d2:6d:fa:db:9e:47:f9:
d1:d1:15:83:b3:20:22:cb:82:f2:10:1e:6d:f7:7b:9f:2b:7b:
67:5c:4a:9c:75:be:c0:2a:6b:5f:08:7b:6c:69:f5:f9:82:30:
7a:3e:ea:20:e0:13:e8:06:34:22:7d:7e:7c:30:28:65:2b:7c:
81:28:db:65:9e:36:c7:f4:2d:46:f8:ad:49:dc:63:0b:30:54:
fb:95:5f:32:5b:1e:38:34:c2:15:b3:67:05:8e:2c:a7:77:e1:
fd:46:9e:c8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUD+WCCe5Mq3CdR9WHk/yfbh9HcOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDVaFw0yNjA5MDMxMDQwMDVaMDMxMTAvBgNV
BAMTKEZDRkQ1NzM5RUZEMURBNTYwMUIxN0JCQTI1MjZGMEVBNzZGN0I4NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRcqf/wka1LoUpYV14rMWbvZas
lH4UnwGUHixObfuj6w0rTO/aas5ay10lkNnLoYVsi6Ywg+BIgUQhxlAOYxQFyduK
GozJREEwItLmXDwznPTGXCZksCRUct/FwM3gj5Yboa7AtKpPDDLEOw6KB+4TqEbC
eY12pRF2ZynMKTtZAR26tsyFgjzRx6YkrLjRRX8OUtM/kTNxvxFhHNzXGbLXLqAZ
TQM3kbO8NHFOt3HNVNT7d1BPvyVV8k1iSPJwb6EaSHuPxa0a/57ikxfQnqJHVQbm
ElEC8/6RU2t+h+ZEM9La08zsH8Rf4eXkg2nQuFmR1ZNkcwsajVL56zcUkBLBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/P1XOe/R2lYBsXu6JSbw6nb3uFYwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzgzMjJlMzEzMzM5MmUzMjMy
MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODM4MzIzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVKL
3jANBgkqhkiG9w0BAQsFAAOCAQEAKwa7ZZUkusGh7gyKqzsBDDTtaCd7pyyTRw+4
SAP7+45lj+YYdsWhELpmvXTK/hUnBvrYYtFaSH5YSjzLiSk7zhXTWCsiw3Hb/m/X
q/8uIFuI7uE/1ag3p7YU4bmt+oMSze5kyRnnBwnWahP/I/5SHC/Hy9Qg23vQoQFZ
uKSdsQ2+vRGFFfzXMVYquZc1EZeWqrFSP9q/i1mdddzSbfrbnkf50dEVg7MgIsuC
8hAebfd7nyt7Z1xKnHW+wCprXwh7bGn1+YIwej7qIOAT6AY0In1+fDAoZSt8gSjb
ZZ42x/QtRvitSdxjCzBU+5VfMlseODTCFbNnBY4sp3fh/UaeyA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:25 2025 by rpki-client