Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e20323135333034.roa
File: 38322e3133392e3233382e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: speI8/px2VrNtHT3xM5FG441ejE8g+jgGxZ1KXoEaew=
Subject key identifier: 17:31:19:76:E0:9A:9E:D8:3A:8D:34:05:F1:97:91:DC:6E:2F:A5:35
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2337293DCBC51E7C828C379C1269F5269ACA4221
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e20323135333034.roa
Signing time: Thu 04 Sep 2025 10:40:06 +0000
ROA not before: Thu 04 Sep 2025 10:35:06 +0000
ROA not after: Thu 03 Sep 2026 10:40:06 +0000
asID: 215304
IP address blocks: 82.139.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:37:29:3d:cb:c5:1e:7c:82:8c:37:9c:12:69:f5:26:9a:ca:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Sep 4 10:35:06 2025 GMT
Not After : Sep 3 10:40:06 2026 GMT
Subject: CN=17311976E09A9ED83A8D3405F19791DC6E2FA535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:1d:29:c9:9c:bd:e4:39:0e:ba:4e:ec:d9:
06:24:e2:6b:b2:b9:86:a9:f9:d0:a7:38:c1:01:c1:
25:79:e4:78:e5:ac:ae:c1:69:86:49:81:91:78:d3:
4d:8a:61:1a:fd:3e:4c:45:f4:e0:fa:61:44:cc:6a:
1c:82:bb:78:e2:f9:94:73:cd:f8:a1:62:50:33:5b:
86:1e:4f:f6:f6:70:fe:2c:18:8c:1f:a4:8e:2b:f2:
81:6a:dd:e2:88:4a:05:d0:9a:dc:cb:d3:5a:e9:43:
55:58:c9:8c:86:60:c4:56:19:06:39:79:ec:63:6a:
09:e6:08:a8:17:5a:86:cb:f2:c4:19:f8:e6:c5:ec:
58:89:38:ca:e4:a3:e5:e0:96:43:3c:b5:db:1d:b1:
c6:56:57:90:ce:c0:a0:c0:da:c3:06:1b:4b:e6:a8:
63:4c:53:10:88:d8:f1:da:e1:55:7e:8e:f0:6d:b8:
cd:51:0c:b2:93:a1:bf:c1:dd:1b:fa:dd:72:76:26:
c7:18:af:89:ec:76:ec:6f:64:b9:02:a7:ef:3b:f0:
a1:f1:53:14:b9:87:f1:f6:81:1c:81:f4:fd:f3:d1:
5b:2a:dc:80:57:ac:09:da:e3:59:cc:a7:13:10:95:
ab:88:02:fc:ab:5b:b3:f6:6b:92:f5:24:8a:d5:89:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:19:76:E0:9A:9E:D8:3A:8D:34:05:F1:97:91:DC:6E:2F:A5:35
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/38322e3133392e3233382e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.238.0/24
Signature Algorithm: sha256WithRSAEncryption
79:63:27:fc:07:d4:90:46:be:f5:91:e2:66:bd:d7:f4:81:2a:
4a:ff:ae:47:80:75:2e:e9:35:38:69:0b:f7:d5:61:7f:e9:e5:
a3:aa:79:7e:63:82:16:5e:70:d7:5c:d2:0f:c0:f0:a2:06:6c:
8c:56:e4:c1:ce:a8:78:55:d5:cd:eb:17:e7:7a:08:ef:c3:6e:
0d:da:99:f5:e9:a3:cd:3e:6d:11:51:b3:6e:4d:7a:dd:38:e4:
9b:cc:af:d0:12:69:87:9a:0c:3a:b8:25:59:c4:6a:3e:32:c9:
8c:d1:b5:87:a0:c5:a0:8a:67:35:ea:6f:11:fe:f2:2f:ea:bd:
30:90:49:c6:df:bb:d9:7a:b8:e1:b7:5f:7a:d7:d5:4f:35:35:
57:94:08:d4:eb:89:e7:7a:c4:02:eb:85:9e:e3:6a:9c:a4:13:
0e:1d:78:d1:b9:b8:0c:90:03:99:0d:b4:e3:c6:a1:a3:bf:f3:
dc:d5:72:fb:1f:5d:c1:72:71:b5:3b:9e:09:30:3c:f0:13:12:
d0:6b:db:85:aa:14:62:82:cf:a1:6d:a4:31:9e:47:62:45:84:
33:69:b8:60:43:55:e5:b7:c1:7a:8d:9b:c1:28:aa:ab:35:71:
a9:1c:ae:e7:0c:0a:60:b0:8d:d6:cf:6e:de:1e:6e:5c:45:20:
a9:eb:0f:d2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUIzcpPcvFHnyCjDecEmn1JprKQiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNTA5MDQxMDM1MDZaFw0yNjA5MDMxMDQwMDZaMDMxMTAvBgNV
BAMTKDE3MzExOTc2RTA5QTlFRDgzQThEMzQwNUYxOTc5MURDNkUyRkE1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFh0pyZy95DkOuk7s2QYk4muy
uYap+dCnOMEBwSV55HjlrK7BaYZJgZF4002KYRr9PkxF9OD6YUTMahyCu3ji+ZRz
zfihYlAzW4YeT/b2cP4sGIwfpI4r8oFq3eKISgXQmtzL01rpQ1VYyYyGYMRWGQY5
eexjagnmCKgXWobL8sQZ+ObF7FiJOMrko+XglkM8tdsdscZWV5DOwKDA2sMGG0vm
qGNMUxCI2PHa4VV+jvBtuM1RDLKTob/B3Rv63XJ2JscYr4nsduxvZLkCp+878KHx
UxS5h/H2gRyB9P3z0Vsq3IBXrAna41nMpxMQlauIAvyrW7P2a5L1JIrViaZzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUFzEZduCantg6jTQF8ZeR3G4vpTUwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUt
OWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1NGJjLzAvMzgzMjJlMzEzMzM5MmUzMjMz
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMzMwMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABSi+4wDQYJKoZIhvcNAQELBQADggEBAHljJ/wH1JBGvvWR4ma91/SBKkr/rkeA
dS7pNThpC/fVYX/p5aOqeX5jghZecNdc0g/A8KIGbIxW5MHOqHhV1c3rF+d6CO/D
bg3amfXpo80+bRFRs25Net045JvMr9ASaYeaDDq4JVnEaj4yyYzRtYegxaCKZzXq
bxH+8i/qvTCQScbfu9l6uOG3X3rX1U81NVeUCNTried6xALrhZ7japykEw4deNG5
uAyQA5kNtOPGoaO/89zVcvsfXcFycbU7ngkwPPATEtBr24WqFGKCz6FtpDGeR2JF
hDNpuGBDVeW3wXqNm8Eoqqs1cakcrucMCmCwjdbPbt4eblxFIKnrD9I=
-----END CERTIFICATE-----
Generated at Sun Sep 7 03:55:32 2025 by rpki-client