Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3232362e302f32342d3234203d3e20313937353337.roa
File: 38322e3133392e3232362e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: mp/gkL6VYE30AfQhWASabXkkrmiiZai9g1IzqRIxxgM=
Subject key identifier: 17:F6:1B:3F:D3:19:AC:45:25:A6:57:02:81:0B:AC:FD:A2:53:79:88
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 23F40319E938670C7C43F196EBCBE3046F0DE1CC
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3232362e302f32342d3234203d3e20313937353337.roa
Signing time: Thu 04 Sep 2025 10:40:06 +0000
ROA not before: Thu 04 Sep 2025 10:35:06 +0000
ROA not after: Thu 03 Sep 2026 10:40:06 +0000
asID: 197537
IP address blocks: 82.139.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f4:03:19:e9:38:67:0c:7c:43:f1:96:eb:cb:e3:04:6f:0d:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:06 2025 GMT
Not After : Sep 3 10:40:06 2026 GMT
Subject: CN=17F61B3FD319AC4525A65702810BACFDA2537988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:d4:b0:07:2e:33:56:56:82:77:e2:a5:72:
a2:8a:8f:45:f3:8e:23:47:28:bf:f3:d6:72:65:df:
70:36:8f:6e:d8:99:96:2c:2b:ce:49:d8:fa:d2:10:
97:00:84:30:f0:34:32:17:a9:ac:84:3f:37:64:ca:
bb:47:01:03:51:82:1e:a2:83:e5:e9:22:b4:3b:47:
66:c7:fb:be:f9:8f:8b:f3:ff:97:c9:a2:c8:c5:4f:
5c:08:9c:86:a0:02:67:26:8a:30:ab:b4:5b:7a:42:
4b:93:72:68:ae:f6:3c:fe:49:63:95:0e:1f:e4:92:
ca:58:f8:c8:98:0b:e7:2c:c4:16:9a:95:19:26:39:
ba:ec:9e:60:71:13:82:de:45:1d:41:be:f1:88:24:
58:57:25:19:be:79:e2:3c:ec:93:16:60:e7:2b:ca:
bd:59:57:1d:d0:0e:51:a6:b3:f0:3a:60:ed:70:f2:
7b:21:f2:29:8a:e1:db:a5:4c:33:d9:0a:1c:17:f0:
4c:b4:e2:77:2e:f4:d1:a3:48:93:f5:27:bc:cb:f9:
e1:40:15:e4:05:28:f6:04:b1:0b:43:a7:ad:35:40:
61:0d:c2:5f:a4:0a:5b:5b:41:c7:b2:6c:65:cf:ba:
07:b3:47:06:ad:9d:86:4e:94:16:46:ff:84:de:b9:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:1B:3F:D3:19:AC:45:25:A6:57:02:81:0B:AC:FD:A2:53:79:88
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3232362e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
32:01:ec:95:f7:fd:ba:fb:15:9c:f6:4c:75:54:ef:54:07:1d:
31:e2:10:7b:a1:84:eb:95:04:a9:e8:1e:82:60:05:d8:d0:1b:
19:7a:81:bf:07:93:7f:11:00:e6:0b:80:19:58:de:66:a3:29:
87:bb:51:a7:40:e2:da:69:b9:a2:44:a3:81:18:26:83:b0:b1:
53:15:9d:d4:58:10:bb:ef:5d:93:77:b7:a2:79:12:3a:c3:37:
d0:36:ac:de:c6:76:2b:65:62:f9:70:51:1b:c1:e3:ed:1d:5d:
e2:63:24:4d:43:47:37:0f:d3:d6:7a:b4:70:73:9d:78:6b:ab:
b3:f6:16:d4:d3:34:8e:21:43:68:ed:62:ae:63:73:0a:a1:5d:
0d:50:42:06:d3:a4:eb:89:04:1f:21:5a:d0:ba:85:94:93:dc:
8e:d7:cb:80:75:3f:5d:26:ff:d2:8c:53:53:49:e9:e9:bc:cd:
35:d7:a9:8c:da:75:78:46:6c:ed:ee:5c:63:f5:76:78:e0:e4:
cc:df:59:62:05:3c:8e:54:a8:76:9f:e3:0e:50:ae:e3:b4:de:
bf:f7:79:19:c8:fd:50:70:bb:41:28:dd:14:8d:94:4d:41:b4:
88:a6:37:66:2a:49:f1:f7:1a:42:65:ed:8d:11:75:34:b1:ea:
cf:f9:f1:30
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUI/QDGek4Zwx8Q/GW68vjBG8N4cwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDZaFw0yNjA5MDMxMDQwMDZaMDMxMTAvBgNV
BAMTKDE3RjYxQjNGRDMxOUFDNDUyNUE2NTcwMjgxMEJBQ0ZEQTI1Mzc5ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmtSwBy4zVlaCd+KlcqKKj0Xz
jiNHKL/z1nJl33A2j27YmZYsK85J2PrSEJcAhDDwNDIXqayEPzdkyrtHAQNRgh6i
g+XpIrQ7R2bH+775j4vz/5fJosjFT1wInIagAmcmijCrtFt6QkuTcmiu9jz+SWOV
Dh/kkspY+MiYC+csxBaalRkmObrsnmBxE4LeRR1BvvGIJFhXJRm+eeI87JMWYOcr
yr1ZVx3QDlGms/A6YO1w8nsh8imK4dulTDPZChwX8Ey04ncu9NGjSJP1J7zL+eFA
FeQFKPYEsQtDp601QGENwl+kCltbQceybGXPugezRwatnYZOlBZG/4TeuTn1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUF/YbP9MZrEUlplcCgQus/aJTeYgwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzgzMjJlMzEzMzM5MmUzMjMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczNTMzMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABSi+IwDQYJKoZIhvcNAQELBQADggEBADIB7JX3/br7FZz2THVU71QHHTHiEHuh
hOuVBKnoHoJgBdjQGxl6gb8Hk38RAOYLgBlY3majKYe7UadA4tppuaJEo4EYJoOw
sVMVndRYELvvXZN3t6J5EjrDN9A2rN7GditlYvlwURvB4+0dXeJjJE1DRzcP09Z6
tHBznXhrq7P2FtTTNI4hQ2jtYq5jcwqhXQ1QQgbTpOuJBB8hWtC6hZST3I7Xy4B1
P10m/9KMU1NJ6em8zTXXqYzadXhGbO3uXGP1dnjg5MzfWWIFPI5UqHaf4w5QruO0
3r/3eRnI/VBwu0Eo3RSNlE1BtIimN2YqSfH3GkJl7Y0RdTSx6s/58TA=
-----END CERTIFICATE-----
Generated at Sun Sep 7 04:02:26 2025 by rpki-client