Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20323132323338.roa
File: 38322e3134392e37362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: gm8SIP+L9NSWGG2X6flLb5ttzrvkdJpsMjGClIO7RyE=
Subject key identifier: C6:53:17:B1:7E:C1:0A:D6:8E:B1:37:9C:0B:BA:FE:83:66:0F:9F:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E03E08A2D3C6DA1A378B370CABD31D4665781BE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:22 +0000
ROA not before: Thu 30 Jul 2026 09:22:22 +0000
ROA not after: Thu 29 Jul 2027 09:27:22 +0000
asID: 212238
IP address blocks: 82.149.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:03:e0:8a:2d:3c:6d:a1:a3:78:b3:70:ca:bd:31:d4:66:57:81:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:22 2026 GMT
Not After : Jul 29 09:27:22 2027 GMT
Subject: CN=C65317B17EC10AD68EB1379C0BBAFE83660F9FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:f3:1d:77:67:26:9b:08:62:a4:a5:90:58:
4a:64:21:0f:a0:2e:dd:25:b9:f1:6a:14:c7:c6:84:
04:19:7c:b3:b2:ff:79:8f:6b:a2:87:2a:4f:0a:06:
8d:48:ce:07:76:62:51:62:bc:10:84:67:55:5b:ac:
26:a1:b1:f2:dd:a2:9a:12:28:b4:2b:5d:43:b6:17:
3f:d1:12:ab:ff:71:6a:2a:be:c5:aa:62:2e:ea:69:
24:8d:ab:77:d9:f7:1d:f2:6c:1b:e0:8a:5f:90:ec:
71:e7:39:d8:9b:6b:1b:f6:60:7b:16:ea:d5:b4:f4:
8b:6b:fb:72:d0:06:08:29:5a:34:d6:a9:35:9a:a2:
f4:ca:45:8f:11:fc:09:dd:01:8d:fe:d5:b2:7a:4e:
e4:a9:d5:8c:71:73:67:88:81:c8:32:44:b9:ca:5c:
43:8d:3d:02:ce:00:33:9d:f8:f6:56:76:78:87:5d:
53:79:26:12:4f:a4:6d:1f:5d:4a:44:87:70:18:3b:
e7:3e:a4:c0:0e:0e:db:41:40:a6:ac:7f:91:db:aa:
e0:3d:8c:16:39:5b:88:7a:27:34:45:bd:40:be:9b:
fc:17:b6:8f:72:a1:0d:5f:ce:54:09:df:01:db:4c:
2b:63:a5:ec:93:2b:e3:70:d8:b0:0d:82:20:da:f3:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:53:17:B1:7E:C1:0A:D6:8E:B1:37:9C:0B:BA:FE:83:66:0F:9F:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:16:84:37:b7:a6:e0:f0:e0:3e:ce:ce:72:bb:d2:8a:78:d6:
d5:84:2d:39:60:8a:99:69:f3:8b:de:51:9c:d1:1a:76:a5:b1:
1f:35:f9:b1:e6:ba:69:38:c5:64:5f:8b:79:75:33:d4:68:28:
57:eb:08:92:34:14:72:3d:b2:e5:6c:df:fb:13:b7:28:c0:6a:
05:b4:ae:68:9c:90:2f:58:6f:a1:75:53:e4:dc:c7:b2:00:f3:
a7:40:56:a4:fa:97:32:6e:70:4e:d6:7a:07:8d:45:eb:34:e6:
55:9f:f2:f0:ce:65:22:97:d7:a3:0a:52:0e:fa:e7:d4:ea:1d:
9f:bc:76:d7:aa:33:dc:41:45:d0:62:39:87:a6:63:bf:34:80:
7c:8c:14:18:7b:65:38:7c:c0:18:f7:68:55:b3:50:ef:9a:4c:
ba:45:ac:43:33:0b:79:2a:9c:db:b4:52:fb:dc:91:e8:d4:37:
b2:5f:53:58:05:cc:7c:7a:4c:01:59:98:02:1b:84:8d:0e:5d:
e2:22:54:70:21:3c:69:75:38:59:35:df:96:bf:ee:18:4a:2b:
93:ed:bc:3e:35:f8:4c:fe:4a:d5:92:b7:39:75:2a:39:db:6f:
1a:8a:41:48:92:10:7f:d5:bd:20:73:0d:35:a0:ce:8d:71:df:
43:b7:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:08:55 2026 by rpki-client