Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20323132323338.roa
File: 38322e3134392e38322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: MAT5xdpw8I35/MLMR1ac8p9P8mEX+0ow5RT23KRJxZI=
Subject key identifier: 27:E6:D5:84:7B:03:E7:8E:A8:3F:BC:6A:B8:00:C3:29:52:2B:17:F1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5314A0EAEED75724F5307A1F242FC60B1B0339A0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:30 +0000
ROA not before: Thu 30 Jul 2026 21:22:30 +0000
ROA not after: Thu 29 Jul 2027 21:27:30 +0000
asID: 212238
IP address blocks: 82.149.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:14:a0:ea:ee:d7:57:24:f5:30:7a:1f:24:2f:c6:0b:1b:03:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:30 2026 GMT
Not After : Jul 29 21:27:30 2027 GMT
Subject: CN=27E6D5847B03E78EA83FBC6AB800C329522B17F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:a4:a9:52:fa:13:53:1c:0b:b6:33:3d:be:
1c:02:28:ef:86:06:f6:6b:5c:36:53:96:0f:02:e3:
9c:cd:f6:64:03:ec:56:c2:e5:bf:4b:82:8d:0e:8a:
e5:36:c9:3b:a6:63:e5:e0:6d:88:56:d5:08:19:fa:
d3:6c:6c:ee:45:83:3d:6b:29:0e:85:5e:7c:1e:ea:
c0:03:6a:be:d2:1d:9d:4f:a6:02:55:39:5f:d8:41:
6e:42:66:8e:b4:0f:0e:cb:0b:e5:c6:cb:ec:6f:40:
96:3c:a2:93:b1:f5:e8:e8:08:ec:72:15:8f:65:df:
5e:b4:13:12:6d:c0:8c:a2:e3:cc:10:b1:89:fc:c7:
cb:89:55:c5:5b:6c:8b:79:87:73:ae:fc:22:e9:a1:
bf:65:f9:ab:9d:d2:0b:cb:dc:81:d8:1c:46:70:38:
74:07:8f:77:ce:b0:57:e1:ea:b6:09:e6:f6:24:79:
cf:70:95:68:b8:7d:bc:18:67:d9:4a:43:70:0f:81:
b5:e6:73:71:bc:bd:c1:e8:e9:9d:cf:ab:ce:be:bf:
d9:c9:50:2e:3c:fe:03:02:9b:a3:b7:61:dc:5f:6c:
9e:57:4d:cd:3e:64:a0:e0:42:f2:44:3e:f7:df:10:
98:81:92:2a:30:5d:0a:09:79:43:a2:62:5f:dc:b6:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:D5:84:7B:03:E7:8E:A8:3F:BC:6A:B8:00:C3:29:52:2B:17:F1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.82.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9c:cb:e8:cb:77:89:d1:d5:da:10:8a:a5:94:d5:d8:36:15:
49:42:b7:97:19:60:6c:58:b6:5b:3f:d0:84:7c:fc:97:93:3b:
09:e6:12:28:ee:ca:e0:11:8a:1d:1c:21:86:13:70:27:31:89:
e5:55:d6:af:7d:3d:57:9e:1f:a5:10:b7:52:16:25:26:f3:e1:
c1:b1:ce:a3:ef:eb:df:c3:f2:39:59:4d:83:c0:00:32:6b:3e:
73:2e:ba:e6:a5:6c:34:68:9e:86:c5:7d:7f:d2:db:d6:d0:02:
27:bd:83:ab:88:7e:e8:af:d9:77:5b:d7:5c:d4:35:76:d1:3a:
6f:1c:9f:ee:bc:e4:68:d3:ee:a5:82:d4:19:5f:71:9c:90:54:
e8:67:fd:3c:b7:58:39:ee:33:b4:ec:51:bd:71:86:67:90:ff:
48:f6:47:60:e6:b8:56:55:f1:47:df:04:a5:62:2c:c1:98:19:
c2:55:17:d2:59:78:57:d0:61:1a:6c:78:00:ff:44:03:a6:74:
5f:f2:48:01:e4:bf:34:36:df:c3:d6:18:a8:e7:ba:7a:fb:ae:
10:52:2b:75:2b:3f:57:78:f9:94:e2:d2:d2:83:0d:24:71:fd:
19:71:43:42:45:cb:0a:b6:fc:6e:ae:a0:04:63:c6:f0:db:67:
7c:48:9f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:42:27 2026 by rpki-client