Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38312e302f32342d3234203d3e20323132323338.roa
File: 38322e3134392e38312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NajSgfeMFEqhj8MvrI/T5+9WIz5VbRoLvGpSSK52+70=
Subject key identifier: C5:AA:C7:D6:03:FD:89:C1:A7:E7:14:D1:E9:B5:29:90:2C:EA:E9:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B5F27B66C1429DDFE90898C828AB54AA55591B9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:22 +0000
ROA not before: Thu 30 Jul 2026 09:22:22 +0000
ROA not after: Thu 29 Jul 2027 09:27:22 +0000
asID: 212238
IP address blocks: 82.149.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5f:27:b6:6c:14:29:dd:fe:90:89:8c:82:8a:b5:4a:a5:55:91:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:22 2026 GMT
Not After : Jul 29 09:27:22 2027 GMT
Subject: CN=C5AAC7D603FD89C1A7E714D1E9B529902CEAE976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:24:64:a5:91:d3:ea:1d:d7:49:2d:cb:87:
a5:7b:f5:32:fd:d2:e5:fa:c1:18:e8:9b:71:15:49:
d2:a0:dd:f9:e9:a1:0e:36:2e:31:a3:00:b0:11:49:
c2:6f:86:36:52:c6:33:d1:0e:0e:77:5f:49:c8:cd:
62:76:14:e3:29:22:8a:90:a1:a8:da:dd:66:7d:a9:
a9:a7:24:7e:3a:35:55:c5:56:61:ec:71:7b:9d:ec:
5a:88:6e:e6:3c:3c:5a:ff:b3:3f:05:1b:87:c3:cf:
78:76:89:7d:04:20:ac:5f:af:5e:98:c4:f0:09:84:
53:7f:9c:15:68:6f:16:68:c4:3a:c8:a9:66:98:15:
19:4a:d4:06:93:d2:9c:1d:2d:25:57:d7:71:22:1a:
a9:ea:17:e9:91:fc:06:f6:e1:50:e9:92:4f:7a:af:
b2:f4:95:4e:59:d4:20:ca:e4:40:3c:ca:6e:69:17:
b1:68:6d:58:99:19:68:28:05:15:cb:ed:7e:76:cd:
a6:b0:81:4a:97:fc:fa:4d:7f:3b:70:ef:d0:c1:76:
1b:21:18:8e:bd:67:98:62:93:a7:89:de:77:c9:e9:
47:2a:15:06:37:58:a6:9f:d5:47:c7:18:29:4d:01:
b9:e4:44:e0:92:04:b4:26:3d:69:09:76:4b:19:78:
bd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:C7:D6:03:FD:89:C1:A7:E7:14:D1:E9:B5:29:90:2C:EA:E9:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.81.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e5:02:64:89:c8:43:fa:2b:99:7d:d5:00:57:44:74:49:39:
41:6e:47:5e:e9:c1:2d:74:36:aa:c4:18:23:ee:a3:0e:4d:ab:
7c:a7:b4:f4:80:71:86:d6:4e:60:b6:22:ff:e3:b3:2d:23:18:
f2:6b:c4:66:06:f7:75:98:b5:b0:4c:d3:76:ae:24:f7:a9:e7:
f3:c5:68:3b:fe:33:7b:8b:72:29:05:8e:94:96:ba:cf:24:48:
bb:2c:4c:98:1a:15:63:d7:f1:c5:23:0d:ca:48:8a:60:5d:7e:
18:a7:67:79:8b:95:62:36:43:85:e2:da:62:57:9a:7e:89:8b:
2b:05:fb:45:63:2b:6e:1b:cb:aa:93:ba:87:17:bc:b4:87:bf:
fd:37:29:dc:e7:d8:a1:aa:82:40:c6:04:05:78:80:f3:3a:2c:
35:c3:25:b3:2d:58:57:07:d4:ed:8c:80:87:22:a3:78:88:7f:
72:46:60:a6:e4:3a:a1:13:d3:67:29:7f:3f:68:34:3a:be:7d:
9b:37:c9:ad:89:57:59:e6:89:2e:76:7c:fe:17:95:f8:0e:4c:
12:bc:4c:27:cc:71:11:a8:c0:ed:99:e5:d1:af:89:32:59:19:
65:a3:05:83:11:8a:0a:b7:c8:2a:6c:f0:15:dd:1b:85:c8:5c:
0c:34:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:42:29 2026 by rpki-client