Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e37322e302f32312d3231203d3e203531313637.roa
File: 38302e3139302e37322e302f32312d3231203d3e203531313637.roa (raw, json)
Hash identifier: 2w4ih4arlAQ7xkSuHc7CkM4MGFKaIJpS9Hgu5yPHcpM=
Subject key identifier: CC:37:AA:F3:86:9B:A4:F7:0B:8D:06:F1:13:71:E3:89:F8:74:88:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1EC1C53EE6FAA40EEF24B6F3B685417DC4545F11
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e37322e302f32312d3231203d3e203531313637.roa
Signing time: Wed 27 May 2026 11:49:49 +0000
ROA not before: Wed 27 May 2026 11:44:49 +0000
ROA not after: Wed 26 May 2027 11:49:49 +0000
asID: 51167
IP address blocks: 80.190.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c1:c5:3e:e6:fa:a4:0e:ef:24:b6:f3:b6:85:41:7d:c4:54:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 27 11:44:49 2026 GMT
Not After : May 26 11:49:49 2027 GMT
Subject: CN=CC37AAF3869BA4F70B8D06F11371E389F874881D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:5d:93:24:8d:c2:0b:7a:5b:40:f0:05:92:
b8:8d:51:32:85:ff:7c:9f:10:f6:71:35:f5:8e:05:
16:a5:0b:32:cf:f0:36:fa:dd:46:36:e8:2a:db:fe:
96:f7:65:c8:45:4b:d3:c0:16:b0:79:97:55:b6:5a:
ae:2d:d4:2a:49:e6:ed:78:be:11:96:1f:5e:06:36:
29:be:db:72:2b:54:65:31:d2:33:51:30:0b:7b:f1:
6b:0e:cb:be:3e:cb:04:ed:ad:12:4f:a9:be:d3:38:
dd:6d:04:26:c7:22:b8:af:a5:48:ed:78:39:c9:ec:
42:7e:96:a8:5e:97:4c:8c:aa:4d:3b:6c:2b:89:e3:
0d:1f:d0:d0:f4:7f:67:8b:44:3c:65:23:5f:af:5e:
3a:4f:a4:de:52:4f:3f:03:44:ea:54:cf:f3:cf:b5:
d4:e4:16:2f:03:e3:f8:fb:2a:d9:f5:36:60:9a:8c:
ab:8c:b8:b1:da:63:41:23:72:0d:98:37:b4:cc:00:
1a:10:ad:cc:64:2c:cf:5b:8b:79:41:e2:7f:aa:ac:
da:af:19:71:ea:33:8c:7e:33:77:88:5a:1f:7e:1e:
46:b7:1a:a2:b7:96:e9:5f:e0:9d:3a:0a:33:ac:eb:
f6:3c:26:cd:81:b2:19:6a:4f:ba:a4:6d:ed:3f:2a:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:AA:F3:86:9B:A4:F7:0B:8D:06:F1:13:71:E3:89:F8:74:88:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e37322e302f32312d3231203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.72.0/21
Signature Algorithm: sha256WithRSAEncryption
88:a7:95:94:a8:dc:81:4e:c9:49:4c:5c:9a:34:fa:33:2b:94:
98:f5:26:2c:c8:8e:c9:21:d8:7a:e8:91:b8:68:26:10:77:40:
a4:49:07:87:64:5a:26:06:2b:dc:21:11:3b:40:43:b0:d3:15:
fc:3b:cb:09:a5:58:22:b1:8a:72:27:14:82:c6:5a:69:35:80:
10:af:a4:4d:39:99:23:84:c1:8e:cb:6c:ff:03:59:a7:12:3f:
64:d5:e2:3e:b1:95:cb:e8:11:0c:dc:a8:16:5b:c7:04:a2:e7:
b2:78:67:a2:34:82:ce:89:d4:ab:47:8b:18:46:a1:a3:b2:09:
ee:a9:f9:e4:ad:e7:bd:f6:3e:07:09:8a:8f:95:a8:d5:58:81:
73:cf:c5:5c:12:06:c4:ba:3a:cb:8d:f3:78:6d:5a:da:75:a6:
f6:31:f6:46:7c:c6:6e:f2:49:21:eb:ce:37:18:bf:78:f6:dd:
65:80:5f:c1:c1:8f:67:d1:34:97:85:fc:71:75:69:16:46:d5:
a8:95:88:21:4e:d3:d2:5b:c7:f3:39:22:e3:c1:3a:ac:a6:d9:
20:32:f7:e2:a0:ec:56:31:70:d7:de:0f:a4:72:7c:f9:e3:e7:
89:c6:5c:9e:94:dd:83:a1:52:ea:6a:db:74:63:c1:cc:4f:00:
2b:3e:89:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:00 2026 by rpki-client