Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20313432323430.roa
File: 38332e3133382e35302e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: RE6cVKl/ZxTSjtbcxfPjhXfNFzHs3F4ofgqTZXW4nes=
Subject key identifier: 34:A9:AF:C9:03:9B:5C:11:39:82:70:48:DA:BC:8C:C5:09:D2:69:AC
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 4EB330E62324974743345E9CF6349CAAE36168CA
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20313432323430.roa
Signing time: Fri 14 Aug 2026 14:47:59 +0000
ROA not before: Fri 14 Aug 2026 14:42:59 +0000
ROA not after: Fri 13 Aug 2027 14:47:59 +0000
asID: 142240
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 03:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b3:30:e6:23:24:97:47:43:34:5e:9c:f6:34:9c:aa:e3:61:68:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 14 14:42:59 2026 GMT
Not After : Aug 13 14:47:59 2027 GMT
Subject: CN=34A9AFC9039B5C1139827048DABC8CC509D269AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:76:09:95:36:2c:5d:d9:dc:64:26:41:14:
0a:6e:c8:0d:c9:80:3b:2e:86:46:24:c2:29:36:f3:
f4:4d:cd:3a:a3:2b:12:fe:14:0d:68:79:5d:10:81:
ef:59:13:5d:49:dc:8c:df:71:47:ed:56:b1:b1:cd:
27:a8:60:08:77:9b:9f:64:26:17:c7:d1:51:af:a5:
30:58:fb:ba:16:83:53:bc:f0:a8:d4:b8:e8:94:d6:
62:ee:34:1b:7e:a2:c8:1a:bb:4d:f9:79:ed:af:19:
f7:55:19:e3:34:89:15:4a:f1:6d:d2:d1:e9:39:74:
96:76:0e:81:75:15:4d:59:c2:e2:29:3b:18:47:7f:
e6:d9:6f:49:b6:ac:af:7c:31:df:0d:06:15:ed:01:
10:af:20:27:f6:48:8b:13:e8:44:33:30:34:1f:d4:
7a:a5:b1:ff:9b:dd:d4:fa:36:38:f8:6c:d6:47:b4:
57:c7:58:eb:f3:19:60:9a:dd:f1:97:04:1a:07:71:
25:ed:f1:1a:64:fc:9e:70:0c:4d:94:36:d3:51:a5:
c6:dc:0e:bb:08:4c:c4:f2:f5:e4:51:35:46:69:8a:
ba:cb:5b:b1:a4:6d:ca:0d:48:18:fa:f2:06:1b:c7:
be:74:15:a8:e7:6c:fb:11:eb:f2:1c:84:c3:be:47:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A9:AF:C9:03:9B:5C:11:39:82:70:48:DA:BC:8C:C5:09:D2:69:AC
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
01:77:d9:b7:ff:50:17:1d:91:a1:e7:ac:06:ba:4d:30:c0:6f:
82:2c:d6:56:96:2e:82:1b:51:45:7f:47:be:f4:88:41:dc:d4:
33:74:eb:92:2a:79:c9:28:61:07:61:86:2e:6a:d1:42:f9:4d:
4c:eb:f8:ad:70:27:38:53:a3:8f:ab:84:52:2e:58:66:ff:61:
34:b4:53:25:cc:cb:b4:82:88:97:bf:e9:f6:62:53:c8:52:d3:
54:9b:d9:ed:d6:64:db:a8:76:17:63:fc:85:a9:59:bf:64:fe:
bf:f8:8b:fc:6e:2d:9d:ef:35:1f:5a:23:38:91:29:97:37:7d:
fa:42:57:82:09:b6:16:aa:f7:fd:3e:e2:72:be:0f:dd:54:f4:
38:50:60:f4:54:b4:63:bf:90:09:64:04:96:e9:2e:fa:2a:f2:
18:19:5b:ad:fb:88:57:12:27:79:06:35:f2:66:87:1a:fd:89:
fb:a7:34:98:23:33:be:ee:00:6b:d0:8e:a4:f8:22:6a:9e:d6:
3f:4b:07:dc:bf:d6:45:3c:a0:9b:94:0b:24:74:b4:02:21:22:
00:2c:43:6b:82:6e:a6:6b:f0:26:2c:23:71:ae:05:73:2a:04:
56:2e:65:a5:d1:fb:1d:e8:e8:2d:0c:5f:3e:a3:c3:1e:60:a4:
93:6b:12:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 11:05:15 2026 by rpki-client