Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20323132323338.roa
File: 38322e3139372e37372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: rG0gHUSBfVw9wkZEP+xvjl/1o5NmO5pJscf99RaQHMs=
Subject key identifier: DD:69:3D:57:82:05:E7:E9:9E:24:ED:17:C2:7E:DE:29:46:C0:C6:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E24E913265C08D946D131BEEC2CEB05EED833BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:27 +0000
ROA not before: Thu 30 Jul 2026 21:22:27 +0000
ROA not after: Thu 29 Jul 2027 21:27:27 +0000
asID: 212238
IP address blocks: 82.197.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:24:e9:13:26:5c:08:d9:46:d1:31:be:ec:2c:eb:05:ee:d8:33:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:27 2026 GMT
Not After : Jul 29 21:27:27 2027 GMT
Subject: CN=DD693D578205E7E99E24ED17C27EDE2946C0C662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:82:39:71:9c:ec:42:22:10:bd:9e:14:be:
eb:6a:e4:e4:23:7e:9b:b8:32:1f:86:54:24:f0:5e:
28:c6:90:16:a5:6b:01:d5:be:e0:cf:45:e6:5d:90:
5d:19:27:66:6e:ce:a3:b5:99:1a:0d:f1:6f:f5:6a:
73:4b:eb:62:7a:ea:80:c5:e0:a1:b6:16:cd:64:be:
74:25:fd:0d:03:f4:77:f2:15:d6:74:14:cf:f4:b0:
72:cc:ca:38:69:ea:8f:6a:17:51:49:5f:e8:8f:1f:
0d:ab:f6:10:18:69:c6:5d:aa:32:68:43:0e:f9:ee:
3b:97:e9:64:9c:e7:82:a7:0c:b0:e3:81:c5:66:44:
cf:b6:ab:97:70:4f:46:b0:88:1f:37:f1:be:7b:65:
33:62:bf:85:34:e1:0f:50:9b:4b:53:ef:bf:81:ec:
df:f9:aa:99:ca:05:b2:72:cd:dc:c7:f1:4d:e9:01:
60:4b:10:c9:a7:f0:92:fc:08:e1:8a:c2:50:dc:66:
6a:77:1e:4f:a6:6e:ec:82:2b:c7:28:99:a1:e6:01:
ff:5a:ec:0a:5b:f0:ce:d2:29:d2:5d:6f:4d:b7:77:
ce:5d:97:c8:a6:5a:f5:a2:d3:07:64:a7:56:01:39:
b5:21:24:c6:c2:f9:c6:2b:f6:9e:da:11:07:f5:67:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:3D:57:82:05:E7:E9:9E:24:ED:17:C2:7E:DE:29:46:C0:C6:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c9:11:9f:11:be:80:ef:a6:3b:38:2b:f0:82:f0:b0:95:42:
a2:b5:5b:4d:a2:cb:a1:41:28:0f:34:3f:bf:1a:ab:e8:8f:a7:
2b:c4:76:c0:3f:c6:db:75:67:65:c6:ef:75:40:77:36:8d:8d:
ef:17:85:d8:5b:84:fc:5c:a5:9f:58:c9:d0:39:71:81:1f:3c:
32:64:54:b4:41:ea:05:2e:a9:77:de:15:97:8c:57:3e:f8:4f:
2c:4a:dd:fd:86:2c:59:61:60:0a:c5:74:18:e7:26:d8:f2:bd:
d9:2c:45:7c:8c:3c:93:e6:df:b2:57:16:a0:da:48:35:27:14:
24:5d:d3:f6:04:44:25:a9:0a:9a:16:ef:90:65:49:8a:d7:9a:
a5:20:3d:e5:cb:df:ee:35:0f:b2:a2:eb:e8:df:2b:a5:2b:fa:
ba:79:89:7c:70:d1:72:c5:b6:54:60:0d:fc:bc:01:82:d8:9a:
ca:05:49:db:17:60:c6:59:30:56:a4:cd:77:4c:6e:63:88:a5:
f6:7b:02:ed:d9:42:1d:54:ca:20:eb:2f:a2:7d:4b:1b:60:8d:
06:f2:a9:19:a1:e1:93:df:b1:9c:22:11:c5:b4:91:ee:b1:7a:
77:5c:21:ab:79:8b:e6:cc:5e:08:d0:26:2d:a2:dd:9c:7b:82:
a4:a3:80:8d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXiTpEyZcCNlG0TG+7CzrBe7YM7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MzAyMTIyMjdaFw0yNzA3MjkyMTI3MjdaMDMxMTAvBgNV
BAMTKERENjkzRDU3ODIwNUU3RTk5RTI0RUQxN0MyN0VERTI5NDZDMEM2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM0II5cZzsQiIQvZ4Uvutq5OQj
fpu4Mh+GVCTwXijGkBalawHVvuDPReZdkF0ZJ2ZuzqO1mRoN8W/1anNL62J66oDF
4KG2Fs1kvnQl/Q0D9HfyFdZ0FM/0sHLMyjhp6o9qF1FJX+iPHw2r9hAYacZdqjJo
Qw757juX6WSc54KnDLDjgcVmRM+2q5dwT0awiB838b57ZTNiv4U04Q9Qm0tT77+B
7N/5qpnKBbJyzdzH8U3pAWBLEMmn8JL8COGKwlDcZmp3Hk+mbuyCK8comaHmAf9a
7Apb8M7SKdJdb023d85dl8imWvWi0wdkp1YBObUhJMbC+cYr9p7aEQf1Z1TpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU3Wk9V4IF5+meJO0Xwn7eKUbAxmIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM3MmUzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UsVNMA0GCSqGSIb3DQEBCwUAA4IBAQCeyRGfEb6A76Y7OCvwgvCwlUKitVtNosuh
QSgPND+/Gqvoj6crxHbAP8bbdWdlxu91QHc2jY3vF4XYW4T8XKWfWMnQOXGBHzwy
ZFS0QeoFLql33hWXjFc++E8sSt39hixZYWAKxXQY5ybY8r3ZLEV8jDyT5t+yVxag
2kg1JxQkXdP2BEQlqQqaFu+QZUmK15qlID3ly9/uNQ+youvo3yulK/q6eYl8cNFy
xbZUYA38vAGC2JrKBUnbF2DGWTBWpM13TG5jiKX2ewLt2UIdVMog6y+ifUsbYI0G
8qkZoeGT37GcIhHFtJHusXp3XCGreYvmzF4I0CYtot2ce4Kko4CN
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:10:14 2026 by rpki-client