Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38332e302f32342d3234203d3e20323132323338.roa
File: 38322e3134392e38332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: pIHCmNxdDj0AWTt8yjuY40MwCN5KPtAZ+Fr8D4MCBwk=
Subject key identifier: 30:38:C6:DA:08:05:65:A2:CA:BD:16:EF:64:C5:3B:F9:95:B0:63:58
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 219822EDAA0C94A640C556F2AE39D3B91CA13579
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38332e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:41 +0000
ROA not before: Thu 10 Sep 2026 09:23:41 +0000
ROA not after: Thu 09 Sep 2027 09:28:41 +0000
asID: 212238
IP address blocks: 82.149.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:98:22:ed:aa:0c:94:a6:40:c5:56:f2:ae:39:d3:b9:1c:a1:35:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:41 2026 GMT
Not After : Sep 9 09:28:41 2027 GMT
Subject: CN=3038C6DA080565A2CABD16EF64C53BF995B06358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:72:90:ca:84:e3:e5:e6:50:2e:e4:6f:81:
68:b8:1d:f3:9b:98:57:ad:52:04:48:5f:68:56:be:
3d:18:bb:e7:d9:22:9f:c9:0d:8a:7d:4d:ab:1f:b2:
a5:4c:74:f4:fb:96:53:71:fd:67:09:f4:b8:95:76:
a6:9a:47:d9:2e:81:ff:a7:86:f9:cf:10:ce:72:fe:
f9:10:19:1e:78:66:4d:79:6d:a0:06:f9:c3:56:97:
1f:c9:cb:d1:66:9f:c0:78:2f:6b:78:43:2f:77:8e:
6e:97:c2:a0:ad:ee:7c:0b:0f:5a:91:e2:4b:2c:39:
ca:73:d1:02:4f:55:01:f7:33:52:be:d1:a2:cd:26:
c2:5e:15:0f:1d:34:82:0c:f7:4a:e0:d7:45:1f:06:
2e:44:bb:35:09:81:c0:39:39:d0:99:4b:34:4a:7c:
33:b7:ef:37:29:1e:ce:b5:48:4d:47:55:05:31:ec:
19:c2:6f:52:03:e4:f1:f1:3b:e6:50:f6:a5:af:04:
5f:fd:a4:c4:d4:51:40:4d:ab:f1:de:a6:7c:a1:5c:
f0:2d:3f:02:b0:cd:84:f9:2c:c1:ae:a0:df:b5:33:
bd:2e:26:cb:87:c2:50:b5:a9:c2:f7:29:fa:28:c0:
85:80:9c:e4:41:1c:93:e1:af:22:a3:05:d9:e5:56:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:C6:DA:08:05:65:A2:CA:BD:16:EF:64:C5:3B:F9:95:B0:63:58
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.83.0/24
Signature Algorithm: sha256WithRSAEncryption
23:23:5f:04:5c:5a:0d:37:84:9f:d0:38:0b:a9:a0:a8:18:c5:
3a:2d:18:f4:2a:e9:84:f7:39:a6:71:44:66:50:90:8a:56:c3:
7a:29:e8:fb:98:93:15:1f:03:07:6a:73:78:33:b5:0e:8b:00:
e0:e1:93:66:b7:d8:93:25:24:2f:89:18:17:74:e7:a3:be:59:
b4:0b:69:2b:fc:8d:5b:e7:38:9d:f3:d0:f1:ab:1a:de:bc:69:
17:35:61:f3:d5:fe:82:84:c1:0e:1c:5a:f0:09:f3:4b:c5:8c:
2d:4d:9a:e0:81:35:f3:4b:ad:b7:6e:9c:04:f1:4c:2f:b8:e5:
5d:9b:51:e3:79:fa:83:b7:58:7e:89:07:2e:06:63:58:87:fd:
70:c4:04:5a:7a:36:d6:8d:34:73:c2:a7:2f:3a:0e:e8:95:c5:
8c:d1:89:96:64:14:a8:4f:2a:9c:d3:fb:c1:60:f7:48:d8:7f:
68:c7:df:c0:f0:28:eb:78:3a:a0:fd:12:90:78:c5:50:e2:78:
f5:47:0a:8c:f5:f4:87:6a:9a:48:3e:47:c8:50:ac:98:ed:26:
ce:63:e0:90:1d:f5:44:30:a6:03:d2:d9:ed:3d:49:0e:85:ba:
f3:cd:96:1e:9c:ee:e0:fc:1a:a7:f7:65:ed:f4:7a:9e:47:e1:
53:3c:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:06:45 2026 by rpki-client