Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38302e302f32342d3234203d3e20323132323338.roa
File: 38322e3134392e38302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: R0bScQ3IeGKEbZcmBfkOMUZek8re6cmxwQTDq7qODrk=
Subject key identifier: 27:7A:EB:CF:9A:AB:CC:6F:D0:A6:B8:B8:75:98:24:EC:F4:1E:7B:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27AE00BFDAF5EB3A713ACFDAAEB92EFFE03D103D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38302e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:29 +0000
ROA not before: Thu 30 Jul 2026 21:22:29 +0000
ROA not after: Thu 29 Jul 2027 21:27:29 +0000
asID: 212238
IP address blocks: 82.149.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ae:00:bf:da:f5:eb:3a:71:3a:cf:da:ae:b9:2e:ff:e0:3d:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:29 2026 GMT
Not After : Jul 29 21:27:29 2027 GMT
Subject: CN=277AEBCF9AABCC6FD0A6B8B8759824ECF41E7B01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:bb:45:34:6d:9e:03:e8:ce:4a:12:c3:3c:
2d:ce:03:8d:4c:19:b7:f1:38:f4:df:fe:96:29:05:
c7:2d:cc:44:48:95:09:af:04:8a:8a:39:03:2b:c5:
91:99:d7:1f:f3:d0:e7:cb:ed:bc:8a:0e:7e:cf:82:
c7:69:28:d3:45:25:05:47:cf:79:1f:fa:24:60:51:
5c:e4:eb:08:7a:25:08:61:fa:0f:fb:35:bb:59:cd:
40:b3:a0:07:2d:80:a2:e8:0f:76:b7:84:00:f4:97:
22:bf:a7:1e:9a:88:18:67:c5:12:51:d1:ef:f7:ad:
87:44:1a:70:07:63:e8:a0:06:31:66:76:d4:ad:31:
45:68:94:04:38:af:bc:03:2a:e5:0a:37:eb:9c:c3:
33:0b:cd:15:67:1b:8b:c0:34:30:b6:37:68:49:30:
bc:d3:8e:94:c7:70:2a:99:a0:10:e9:07:46:44:18:
f8:b3:5c:93:9b:d6:b1:e3:8b:e8:53:e3:46:40:36:
47:3a:53:ac:2b:63:48:53:6a:c8:bc:0e:4f:6c:53:
68:d0:61:91:f1:8f:c7:16:0b:04:cd:35:a7:0a:76:
32:d7:9c:a2:ab:a1:24:10:f4:03:43:8d:74:38:81:
4f:86:e3:a3:37:97:c2:0c:8b:f9:98:14:c2:f6:27:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:EB:CF:9A:AB:CC:6F:D0:A6:B8:B8:75:98:24:EC:F4:1E:7B:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:56:12:72:7f:87:cb:97:ff:f7:99:01:ca:73:57:39:11:eb:
c8:f5:66:b8:a6:d5:b6:61:97:41:a5:66:16:a7:3f:78:e1:8a:
1a:bb:7d:19:10:c0:38:0f:dd:3f:ec:3d:e9:9a:c5:33:67:89:
ec:8e:b4:3b:7f:bb:4a:c1:56:83:51:38:46:5f:2f:e1:c2:dd:
37:cd:15:78:03:9a:bc:7a:d9:9f:d5:62:de:d9:ac:5b:37:40:
bb:a7:5b:26:39:b0:c4:da:db:bc:33:5b:51:04:9f:6d:c9:9c:
2f:d3:8a:2f:be:60:8a:5f:99:1a:dc:9b:a7:c5:95:5a:51:a6:
ea:1e:69:a0:44:06:89:d9:c5:4d:70:2d:84:82:4a:69:88:51:
73:4a:65:a8:f2:8f:c2:f5:5e:a3:2d:93:64:d3:06:cf:4a:6a:
f0:2e:1f:cc:ae:49:80:3c:82:8a:eb:b1:08:c0:7d:12:82:42:
c0:8f:6c:be:9a:67:0b:7d:34:83:e7:eb:f2:f1:f1:37:af:b7:
49:13:64:d7:22:f8:6a:0d:31:cd:06:e8:22:f2:35:7d:fd:33:
89:a6:ad:b5:cb:fa:77:c6:2d:e9:69:2e:bc:94:a4:ce:25:31:
4d:73:9b:70:1c:9a:46:dd:ac:ae:a3:7f:f2:67:36:81:99:b4:
8c:ab:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:41:36 2026 by rpki-client