Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20323132323338.roa
File: 38322e3139372e37392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: o6DhCLsgjxE03bg960Z5hP4WVstgNbB/8tpFIrPnc7U=
Subject key identifier: 38:6C:8E:5A:D7:D3:21:B5:2B:ED:66:9E:33:CC:02:EA:66:34:08:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16AA25EC8F76EBEE8F867CE6D8F4972150C50506
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 20:49:51 +0000
ROA not before: Thu 28 Aug 2025 20:44:51 +0000
ROA not after: Thu 27 Aug 2026 20:49:51 +0000
asID: 212238
IP address blocks: 82.197.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:aa:25:ec:8f:76:eb:ee:8f:86:7c:e6:d8:f4:97:21:50:c5:05:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 20:44:51 2025 GMT
Not After : Aug 27 20:49:51 2026 GMT
Subject: CN=386C8E5AD7D321B52BED669E33CC02EA66340821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:a3:a4:01:d4:bd:db:24:45:07:fc:ac:18:
b7:89:0c:56:1e:f9:3a:eb:11:49:43:99:96:70:be:
f0:b5:7b:bb:ce:1a:35:e5:01:91:65:68:70:b2:bc:
7d:4d:68:cc:69:6e:a1:94:47:bd:8f:b4:62:2c:d7:
b0:35:b0:47:e3:98:7e:02:b9:c3:bf:8d:ae:fa:ce:
27:08:8d:68:7d:be:23:63:fc:6e:e4:c6:94:39:e1:
4f:36:3c:15:14:3c:4a:91:62:ec:1d:7a:60:a9:27:
36:9d:b7:2c:a7:f8:24:ec:63:34:1d:c4:a6:f6:e0:
2d:74:17:c5:86:83:29:9e:85:6e:ea:bd:c9:33:ce:
82:c3:d0:8b:d2:18:93:d7:07:bc:60:f7:f7:67:18:
c4:37:a4:ab:a4:d9:3e:aa:47:08:15:1a:6e:7a:72:
ea:eb:3b:0b:2d:36:06:ad:f4:55:09:42:00:1e:2b:
26:e3:15:8e:eb:45:09:70:40:a3:05:32:58:be:18:
c1:46:c0:27:a3:f6:43:04:80:61:20:67:99:30:31:
24:a1:c3:2a:e7:f3:17:9b:bb:56:1b:0e:51:cd:3a:
bf:72:ae:b4:c3:68:b5:57:e9:98:81:b1:12:6f:9f:
f3:f2:48:a9:9c:f1:04:68:d9:da:1c:b6:c4:1f:c6:
a7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:8E:5A:D7:D3:21:B5:2B:ED:66:9E:33:CC:02:EA:66:34:08:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.79.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fe:ee:9a:b6:d1:e8:b2:91:2b:c1:a1:25:1e:29:9e:9e:91:
78:68:f4:68:83:c5:62:48:bf:0a:5b:15:78:aa:d3:01:cb:09:
e8:a3:10:3f:85:76:2b:ab:35:76:c0:2d:02:05:7b:1a:91:99:
91:18:77:60:95:20:71:44:33:29:dd:88:1e:81:18:ec:05:e1:
c1:1a:33:41:0d:96:43:ef:19:af:c0:24:4a:13:5a:da:74:91:
c1:f2:6f:50:da:c3:7e:2c:db:62:91:60:4a:67:d0:09:0a:e3:
46:66:62:d4:5d:ae:c9:1a:65:53:da:1f:4c:92:0f:93:3c:25:
0c:91:8d:75:43:c0:a1:1b:7b:61:73:61:e8:57:00:4c:06:b4:
95:5e:ea:61:dd:35:80:be:9d:7c:8a:99:c4:d1:d5:23:9b:8f:
df:66:09:d6:90:f5:37:82:43:08:33:ca:83:0a:f7:12:72:5b:
ab:8d:69:37:4a:0d:65:38:61:a1:3a:11:09:b3:43:21:41:d4:
32:62:15:97:f0:38:e1:da:fe:3e:9b:07:21:d0:e4:1d:10:f7:
17:09:cf:3c:da:fb:91:8a:01:bd:3d:64:04:33:c4:a0:e1:7f:
ca:80:f2:a3:da:48:57:3d:7a:46:db:21:af:38:c8:da:ab:ce:
52:f7:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:54:19 2025 by rpki-client