Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20313436383133.roa
File: 38332e3133382e35302e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: j1y2TfleyZuxfj76wiDc/LnmU3f8J5P0KaZqs+mnqDY=
Subject key identifier: 1C:5B:CC:B7:4A:D9:FC:96:20:E4:E7:B1:BC:64:34:57:49:8E:C2:C7
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 066414EDFB3582DEC44647E80766AD1EB9F12810
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 03:28:56 +0000
ROA not before: Fri 25 Sep 2026 03:23:56 +0000
ROA not after: Fri 24 Sep 2027 03:28:56 +0000
asID: 146813
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:10:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:64:14:ed:fb:35:82:de:c4:46:47:e8:07:66:ad:1e:b9:f1:28:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Sep 25 03:23:56 2026 GMT
Not After : Sep 24 03:28:56 2027 GMT
Subject: CN=1C5BCCB74AD9FC9620E4E7B1BC643457498EC2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:1e:90:a9:59:08:30:a9:3d:2d:ce:1a:97:
2f:52:5b:32:f0:82:e6:da:d4:8b:25:2d:1b:01:3d:
87:fc:66:a7:7c:d7:1b:a0:86:4c:9f:7a:f8:fe:44:
78:03:ec:77:cd:c2:db:b9:79:96:e1:f9:f1:c5:4a:
7b:62:ff:5d:60:2b:cb:8f:a4:ce:cb:f8:d8:38:cd:
95:db:29:dc:81:90:d5:ff:ab:ef:42:fa:c7:80:b9:
4a:ab:8a:ed:d1:6a:6c:61:e8:49:77:6d:b1:29:3f:
5e:d9:2e:57:90:6e:2c:fa:5e:6d:01:dc:41:aa:71:
f0:93:26:67:d6:fe:6d:71:42:3a:77:d7:c9:98:cf:
89:c8:4e:53:94:e0:37:f2:07:5e:0f:0b:f6:55:18:
41:8c:c3:bd:78:1d:bb:81:cd:df:a4:33:d7:38:56:
cb:5a:8f:a2:ab:c5:95:06:00:da:84:43:63:05:de:
55:57:9f:7c:38:75:ac:1e:47:74:14:0b:a7:02:64:
f2:b8:54:a1:c7:37:2c:84:4e:01:1e:70:a8:4b:5b:
fc:9c:be:b8:64:65:9b:b3:9c:fd:34:0d:69:60:42:
82:c4:ab:32:26:39:c0:38:e5:9f:4c:27:b6:5d:12:
f2:93:3d:52:e4:c4:3d:e2:78:85:8e:e3:01:32:87:
e0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5B:CC:B7:4A:D9:FC:96:20:E4:E7:B1:BC:64:34:57:49:8E:C2:C7
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
40:85:d3:35:ba:ea:ec:69:0a:ea:77:4d:6c:5e:b3:f4:af:11:
57:4f:24:80:f2:77:e9:42:65:9c:2b:a5:e6:b7:53:aa:03:fc:
c9:6f:e6:5b:90:51:26:b7:8f:39:10:51:4b:8d:e6:e1:45:48:
b3:57:4d:74:b3:92:e8:4d:6f:1a:98:34:0f:69:c3:a7:30:85:
d4:f1:c9:6c:b1:06:a7:3c:08:fc:a9:c2:6a:f7:75:4c:73:be:
2c:53:82:c2:bd:71:fe:8c:28:10:90:02:b8:c0:1e:40:91:92:
2b:83:22:82:9a:92:58:9c:de:62:48:ca:0f:f8:bd:be:4a:13:
fe:2a:44:25:fd:52:6a:5c:d6:b7:6f:82:45:d0:f3:d6:60:78:
5b:d3:ea:d9:b2:24:f8:3d:ef:38:05:49:11:f4:bd:d8:93:92:
d4:92:da:f7:90:2c:6f:0a:07:f4:a5:f7:39:ef:d9:e9:ff:3c:
6d:84:81:05:df:01:13:2b:d5:00:ae:68:45:49:0f:8a:98:6d:
7d:4e:df:4b:6e:b5:c9:1a:b9:11:c5:af:7a:a1:1f:58:93:45:
e3:71:ae:ff:02:2b:3b:52:b4:72:e2:f6:3d:3d:6f:69:cf:d5:
e7:bb:42:14:25:59:cb:2f:e0:66:8f:75:21:36:ae:d6:f9:99:
03:61:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:44:57 2026 by rpki-client