Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20323132323338.roa
File: 38322e3139372e37392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: mXyDT98siulkNM/5PDqixYibJMmsZlmZYipHhDfsalo=
Subject key identifier: EA:CD:3A:D4:55:31:16:D4:41:53:54:B6:18:FF:A3:4D:92:64:4B:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76AF423E940B549F5F2BBD3E6F2D2FFDA9A67438
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:28 +0000
ROA not before: Thu 30 Jul 2026 21:22:28 +0000
ROA not after: Thu 29 Jul 2027 21:27:28 +0000
asID: 212238
IP address blocks: 82.197.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:af:42:3e:94:0b:54:9f:5f:2b:bd:3e:6f:2d:2f:fd:a9:a6:74:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:28 2026 GMT
Not After : Jul 29 21:27:28 2027 GMT
Subject: CN=EACD3AD4553116D4415354B618FFA34D92644BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:62:74:2f:48:be:c2:18:e3:b9:5b:b1:20:
53:7b:46:7f:49:43:17:13:e2:b0:21:e6:3c:66:86:
d7:b1:c3:e3:0e:71:bb:88:99:d2:8c:92:11:16:ba:
80:58:38:48:4d:6c:1b:3b:e7:65:fc:4b:4a:13:7d:
fb:81:00:30:c2:82:48:95:ee:27:e7:90:8d:c9:5f:
04:93:d9:95:b0:ec:ec:9a:48:2c:3a:83:ac:13:2e:
54:65:36:1d:38:b8:fd:60:ad:81:d9:8c:e9:c3:78:
2a:18:f6:a8:f3:f0:c8:9c:e5:4d:07:c0:3c:91:61:
5c:39:1d:07:24:3f:59:84:89:b0:77:33:84:de:ed:
7b:49:ab:3d:32:ab:1e:df:7f:e8:4c:6d:63:23:60:
79:ce:54:6a:24:ec:34:c8:7d:bb:f3:e9:16:55:ce:
e9:78:3c:1d:4c:c5:e7:43:15:c3:ff:9d:40:42:b7:
66:82:e0:3b:29:97:09:03:28:a7:fa:06:fa:b8:7b:
06:5f:35:94:43:cd:b8:ec:70:9d:fe:61:07:3a:0a:
38:30:60:58:83:23:de:ea:e8:25:12:e6:40:58:b7:
91:8a:09:73:f7:8b:56:2d:09:19:53:01:18:f4:1d:
b8:df:f4:44:7e:16:98:d7:88:bd:a8:6d:a7:93:cb:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:3A:D4:55:31:16:D4:41:53:54:B6:18:FF:A3:4D:92:64:4B:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.79.0/24
Signature Algorithm: sha256WithRSAEncryption
66:95:91:b6:58:1d:4e:b9:48:7f:17:d6:a5:bd:9c:03:42:2f:
bf:3a:c2:dc:5f:19:6b:b4:02:82:7e:31:52:82:56:42:52:66:
9a:89:f2:fd:6f:5c:9e:5a:ca:af:86:ab:67:a7:2b:57:af:ba:
00:5e:42:98:53:44:cc:b8:7b:db:d1:ff:d6:47:fe:c7:ce:67:
eb:64:9a:ec:e1:14:a0:47:36:18:49:de:78:36:a3:e9:17:d5:
cc:82:bf:99:c5:b7:62:10:a0:e0:31:a0:ae:6d:91:3b:55:a0:
0b:9f:dd:95:ce:ea:25:53:f0:51:70:b0:3c:c1:df:ba:58:d6:
35:83:c1:67:c1:d2:b1:b8:ca:6e:dc:2f:8e:c6:f1:a2:b8:26:
c5:75:79:1a:e1:51:b1:50:9f:12:7b:84:80:ed:0b:63:f2:01:
0c:db:13:31:c0:b9:8e:ea:7c:b0:b6:a1:cd:8b:13:83:25:fa:
53:a3:77:13:4b:c2:1e:0b:ca:d9:09:37:d5:9a:71:ad:ea:85:
4c:91:d3:8d:97:09:05:14:d1:69:e4:e8:21:24:49:0d:f0:c2:
1e:ff:09:b6:b6:34:1c:d8:73:c8:a0:5f:b5:76:f7:39:ea:a6:
34:79:b5:5f:89:3d:59:b6:b8:26:54:d2:16:de:46:7d:54:f1:
01:3d:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:09:04 2026 by rpki-client