Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e203430363736.roa
File: 38332e3133382e35302e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: B6BHFxvWQexDAQBZparBsp7sw0VwchC5aybEjRF6QLM=
Subject key identifier: 84:EE:6B:C3:39:7F:70:9C:3B:36:4E:9F:B4:4E:10:55:07:72:24:71
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 49F7F2B28516765CA61613DFE94ABD131CF3389B
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e203430363736.roa
Signing time: Sat 13 Jun 2026 17:33:11 +0000
ROA not before: Sat 13 Jun 2026 17:28:11 +0000
ROA not after: Sat 12 Jun 2027 17:33:11 +0000
asID: 40676
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 09:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f7:f2:b2:85:16:76:5c:a6:16:13:df:e9:4a:bd:13:1c:f3:38:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jun 13 17:28:11 2026 GMT
Not After : Jun 12 17:33:11 2027 GMT
Subject: CN=84EE6BC3397F709C3B364E9FB44E105507722471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:2a:5b:bd:7e:7d:78:cc:5c:ed:8f:fe:e4:
dd:e6:ba:5a:e8:2c:a9:93:52:30:2a:62:7c:5f:35:
c5:72:e1:8a:37:c6:cf:a4:79:aa:dc:50:48:11:74:
18:77:a0:f5:f3:12:05:27:da:59:82:be:87:6b:24:
07:f0:0e:d5:6c:77:b7:ab:ac:ca:5f:f9:a1:33:6f:
0e:ae:b8:50:31:89:09:5b:23:df:86:88:00:9a:d3:
01:fa:ca:5f:90:01:42:ae:63:2f:a7:7c:ea:fc:47:
a5:32:26:fa:80:c2:80:ae:cc:89:68:8c:07:3b:40:
81:af:f9:80:5f:30:c8:d5:ad:d1:71:3a:f2:7f:02:
f2:f6:7f:ec:7b:0a:df:e6:0d:39:6b:fe:3a:22:05:
5c:ed:02:31:1c:57:c3:e5:ae:90:3d:3d:3e:8c:f8:
e3:24:0c:2b:95:00:fa:d9:48:65:e6:b0:0d:df:c0:
7a:d0:f0:2c:64:f0:b6:7d:8b:0d:1c:c8:99:f2:79:
f9:56:a9:c0:33:1d:9e:5b:2b:f5:cb:a9:5a:0e:5f:
7a:4e:0b:03:8d:7e:e2:93:44:7f:c0:fb:30:e1:a7:
1e:f9:cc:cd:6e:a7:09:9c:ce:3e:82:38:85:64:7d:
b6:39:6e:75:89:7b:04:7b:39:43:f9:00:c2:d9:be:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:6B:C3:39:7F:70:9C:3B:36:4E:9F:B4:4E:10:55:07:72:24:71
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ba:31:16:2c:58:be:8b:84:da:30:94:6c:21:e3:50:15:26:
69:10:62:0e:ad:3e:39:a4:6b:f3:c4:92:86:8c:39:ff:33:6a:
a9:37:4f:2f:d7:1e:c5:ca:d9:c7:12:f3:ac:bf:6d:16:09:f9:
d2:1d:79:5d:ae:07:60:ae:c4:52:aa:ad:04:d6:23:2c:ca:43:
f8:4f:6c:94:fc:27:4f:48:93:a4:20:18:78:76:34:18:54:0d:
bb:88:50:18:12:d9:21:27:1a:c5:82:e3:63:7f:04:82:2f:c8:
5a:bc:1d:80:f9:12:89:77:1e:b7:1a:b2:11:63:d4:62:81:68:
d9:36:ca:94:87:24:a4:eb:29:8f:b6:66:8e:5c:0d:9c:c7:63:
7f:a8:7b:d6:aa:76:52:11:ef:1c:5d:ca:c2:48:e4:ce:06:49:
00:ec:32:f0:45:3b:9b:dd:13:40:87:36:4b:83:23:d9:6d:30:
14:de:98:19:4e:c7:80:d0:bd:cb:fc:c2:31:d6:7f:06:56:95:
6a:eb:73:ac:d2:7d:00:49:ae:c8:c8:36:46:a0:b8:43:98:1a:
f7:4a:48:a5:34:eb:34:a6:ac:13:59:c7:6a:6e:de:5d:05:fc:
39:48:89:98:53:cd:45:3a:70:50:d1:e3:89:2f:52:ec:c9:41:
a0:87:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 18:51:16 2026 by rpki-client