Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20323132323338.roa
File: 38322e3139372e37362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: zuHLnRA/3jwloRKKuMqs8cmmz6bVUuayTAK0qemZ0hU=
Subject key identifier: B7:AF:08:A0:0D:75:7C:3E:A3:19:38:CE:56:53:FD:1E:FD:E4:3D:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40C607D27757839463B8CD9C9DDCC57EE2CECE67
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:30 +0000
ROA not before: Thu 30 Jul 2026 21:22:30 +0000
ROA not after: Thu 29 Jul 2027 21:27:30 +0000
asID: 212238
IP address blocks: 82.197.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c6:07:d2:77:57:83:94:63:b8:cd:9c:9d:dc:c5:7e:e2:ce:ce:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:30 2026 GMT
Not After : Jul 29 21:27:30 2027 GMT
Subject: CN=B7AF08A00D757C3EA31938CE5653FD1EFDE43DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:0e:aa:1d:32:e1:2a:43:f3:47:74:27:4f:
a9:14:cb:41:6e:27:e1:39:2c:27:01:7f:10:7d:5a:
0a:42:81:40:e7:4d:f3:11:1f:52:ea:ad:de:93:5d:
76:ec:2b:dd:5f:f0:bb:15:a0:45:e0:fb:d5:72:47:
a7:b1:1b:ee:ef:6d:c3:33:be:cd:1c:1b:de:51:7d:
28:53:e8:fb:2c:02:d9:76:8e:89:50:9c:88:97:a4:
2e:dd:97:22:08:6e:3b:62:a5:8c:36:18:26:fc:e5:
25:4b:20:37:25:ba:b8:54:ec:43:a9:65:47:9d:b1:
41:e8:14:f2:08:76:ff:0b:6d:15:ca:8f:9b:d7:1a:
d7:60:4d:fb:90:e4:79:a4:8d:22:c7:89:5c:2e:3b:
16:56:5e:26:28:f4:02:55:36:04:1a:27:ed:a5:82:
8a:cd:b0:05:63:ad:f2:fc:88:f5:e0:80:50:dd:bb:
af:a9:47:30:ce:7e:54:93:03:50:c0:97:c0:0c:8c:
cc:a8:12:cb:2e:cd:0d:07:11:cf:10:89:73:c5:0b:
35:ce:ff:20:99:e0:ec:a5:a3:55:97:5e:de:e8:4c:
b7:97:ef:29:0f:6d:78:4c:bf:10:cc:58:04:18:db:
15:96:37:c4:86:53:38:a0:a5:b6:75:a1:4c:00:c7:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AF:08:A0:0D:75:7C:3E:A3:19:38:CE:56:53:FD:1E:FD:E4:3D:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.76.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1b:55:31:f3:0a:3c:e4:03:3e:4c:c0:5d:fb:9b:d6:4d:a3:
a6:75:22:01:e8:3d:49:3d:53:3d:b7:04:d2:ff:82:5c:9a:7b:
94:58:a9:b9:ec:60:ef:74:03:b9:fa:77:d7:9a:0b:2e:ad:bb:
8f:18:9d:d9:71:63:73:20:90:09:86:6c:5e:cd:07:a2:83:57:
f3:43:09:bd:f4:b5:d5:b6:93:11:63:25:13:91:e3:8a:f5:b2:
d6:d0:1a:ca:59:56:49:22:c1:4f:96:53:b6:d6:41:b9:2c:91:
70:e7:0c:a0:6c:df:ff:b9:d3:cd:d4:68:5d:e5:f8:50:8e:e1:
6f:95:d4:60:94:93:0e:2c:9e:5f:66:6d:71:ed:da:87:b6:94:
e6:83:3b:29:75:42:b6:cd:5f:9e:95:94:96:cc:6c:73:d1:7e:
35:5c:fa:6e:29:b2:ee:e8:40:0e:75:85:82:52:ae:d3:e3:44:
68:e8:1e:b7:7f:0b:4b:e8:e2:6f:ce:d2:60:59:28:0f:12:fc:
c3:7f:05:77:11:5b:5b:c7:b2:3a:72:18:f9:3d:af:f4:0b:c2:
72:f7:4b:f5:93:8f:d8:3f:ff:63:0d:cc:eb:7a:88:09:3d:c5:
7e:9f:4f:46:68:c8:f3:d1:27:f6:53:99:9f:72:31:a2:57:39:
bf:4c:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:16:01 2026 by rpki-client