Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20323132323338.roa
File: 38322e3139372e37372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: yAgmlOcnH9EDpCTKdx8emCbFY+V7XGjiiD0eTpwwMQU=
Subject key identifier: 81:70:BC:A0:12:F0:05:D3:D3:41:E3:CA:B0:61:B2:68:B1:38:94:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F9DCF175132C3BA086E9C01C6B31DC584A800FD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 20:49:52 +0000
ROA not before: Thu 28 Aug 2025 20:44:52 +0000
ROA not after: Thu 27 Aug 2026 20:49:52 +0000
asID: 212238
IP address blocks: 82.197.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:9d:cf:17:51:32:c3:ba:08:6e:9c:01:c6:b3:1d:c5:84:a8:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 20:44:52 2025 GMT
Not After : Aug 27 20:49:52 2026 GMT
Subject: CN=8170BCA012F005D3D341E3CAB061B268B1389440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:e3:49:0f:ba:d2:78:06:0b:05:7d:66:50:
db:cc:8a:5b:1c:23:26:8f:f7:6e:54:78:bf:55:d1:
9e:ac:c9:c9:ee:97:b6:ce:71:42:74:0d:d1:18:8b:
98:ff:39:e3:a2:9c:f0:66:02:92:b5:03:6b:cd:27:
cb:c0:07:a5:11:98:8a:55:0e:f6:49:6a:7f:5d:81:
25:ad:cf:83:e7:9d:eb:aa:34:2e:86:7d:f8:2a:6c:
94:ef:be:04:cf:28:4d:12:b9:93:c4:f3:06:1c:5c:
85:55:4b:6e:dd:97:b3:7f:71:7a:2a:e7:3e:bf:fb:
e8:fd:8e:fb:f0:03:8c:0f:e8:fc:8d:b4:06:20:b8:
5c:cc:c8:55:68:33:9d:20:a7:53:81:0c:e2:99:8a:
69:6b:87:99:0c:94:dd:be:7c:ce:a6:78:ca:f0:8e:
1c:d1:a2:67:e7:5e:09:d4:36:bc:cb:1d:a8:fd:37:
57:7b:9f:fb:9e:80:f5:a5:37:42:39:70:c5:1c:2b:
bf:0d:27:30:1e:68:1a:0c:88:5a:81:40:6b:7d:6a:
4b:cc:2c:d9:d3:4e:35:4f:62:d2:52:75:6d:70:cb:
7f:f8:89:25:fa:0a:e8:d0:21:65:4a:be:13:05:2a:
1e:ce:dd:5d:db:4f:6d:44:78:94:b7:8f:da:56:3c:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:70:BC:A0:12:F0:05:D3:D3:41:E3:CA:B0:61:B2:68:B1:38:94:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.77.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ac:64:8c:bc:fc:b9:2d:ce:d3:16:47:03:56:09:65:4b:a8:
71:fd:a0:7a:cf:1a:0a:df:35:1f:cb:1b:d1:77:24:e6:b8:d7:
f0:a6:48:6d:3e:99:7b:e8:a6:89:64:6b:81:90:74:4e:fd:63:
5e:26:83:3e:4b:48:40:55:6c:15:68:c3:af:d4:d0:0f:d1:4c:
d6:c9:61:cb:86:d3:23:fd:71:2f:42:48:f4:c5:39:ac:95:06:
4e:62:a0:cd:d4:9c:4e:8d:17:75:88:0f:90:61:ca:19:1b:34:
35:95:9d:f5:b9:dd:48:35:df:a9:34:3a:de:c2:42:c2:4b:aa:
42:97:c0:5f:dd:d8:4d:cd:31:09:44:25:7b:e3:32:e8:41:a0:
85:7b:18:6a:9b:54:6b:4c:e1:c5:c4:8e:fe:fb:5e:a9:37:1b:
c9:ef:94:e1:2f:e3:a5:04:67:a3:d9:2d:c8:0b:b1:fe:ff:38:
14:33:db:df:e5:eb:bf:55:2c:30:ae:a0:78:38:04:0a:f2:37:
6a:2b:de:bd:85:06:7a:a0:2c:e3:1b:63:77:3b:5e:00:fe:8b:
ae:68:5a:97:8b:21:bb:46:0e:f4:c6:1a:e3:27:db:ca:45:63:
90:49:5b:73:4d:a9:29:25:19:37:d3:e0:21:0d:c9:bf:4c:23:
84:d8:ea:bd
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUb53PF1Eyw7oIbpwBxrMdxYSoAP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjgyMDQ0NTJaFw0yNjA4MjcyMDQ5NTJaMDMxMTAvBgNV
BAMTKDgxNzBCQ0EwMTJGMDA1RDNEMzQxRTNDQUIwNjFCMjY4QjEzODk0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxf+NJD7rSeAYLBX1mUNvMilsc
IyaP925UeL9V0Z6sycnul7bOcUJ0DdEYi5j/OeOinPBmApK1A2vNJ8vAB6URmIpV
DvZJan9dgSWtz4PnneuqNC6GffgqbJTvvgTPKE0SuZPE8wYcXIVVS27dl7N/cXoq
5z6/++j9jvvwA4wP6PyNtAYguFzMyFVoM50gp1OBDOKZimlrh5kMlN2+fM6meMrw
jhzRomfnXgnUNrzLHaj9N1d7n/uegPWlN0I5cMUcK78NJzAeaBoMiFqBQGt9akvM
LNnTTjVPYtJSdW1wy3/4iSX6CujQIWVKvhMFKh7O3V3bT21EeJS3j9pWPKClAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUgXC8oBLwBdPTQePKsGGyaLE4lEAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM3MmUzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UsVNMA0GCSqGSIb3DQEBCwUAA4IBAQBkrGSMvPy5Lc7TFkcDVgllS6hx/aB6zxoK
3zUfyxvRdyTmuNfwpkhtPpl76KaJZGuBkHRO/WNeJoM+S0hAVWwVaMOv1NAP0UzW
yWHLhtMj/XEvQkj0xTmslQZOYqDN1JxOjRd1iA+QYcoZGzQ1lZ31ud1INd+pNDre
wkLCS6pCl8Bf3dhNzTEJRCV74zLoQaCFexhqm1RrTOHFxI7++16pNxvJ75ThL+Ol
BGej2S3IC7H+/zgUM9vf5eu/VSwwrqB4OAQK8jdqK969hQZ6oCzjG2N3O14A/ouu
aFqXiyG7Rg70xhrjJ9vKRWOQSVtzTakpJRk30+AhDcm/TCOE2Oq9
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:52:57 2025 by rpki-client