Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234302e302f32342d3234203d3e20313734.roa
File: 38322e3139382e3234302e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: vHuocpaV5Sa49/78Llsut5eiBhWCf3Ehe7AIIkxE65Y=
Subject key identifier: 17:15:1D:B1:BB:01:78:82:80:D2:80:E9:7C:02:F7:D7:87:0A:95:EC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41775D57137CCD9946D0A81F9C5E23B58232FF4D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234302e302f32342d3234203d3e20313734.roa
Signing time: Mon 05 Oct 2026 09:25:23 +0000
ROA not before: Mon 05 Oct 2026 09:20:23 +0000
ROA not after: Mon 04 Oct 2027 09:25:23 +0000
asID: 174
IP address blocks: 82.198.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:77:5d:57:13:7c:cd:99:46:d0:a8:1f:9c:5e:23:b5:82:32:ff:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:23 2026 GMT
Not After : Oct 4 09:25:23 2027 GMT
Subject: CN=17151DB1BB01788280D280E97C02F7D7870A95EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:65:2b:e9:bd:97:53:7a:be:b5:68:6a:17:
22:fc:95:ef:38:f2:bb:77:6f:1d:e6:f0:69:eb:35:
18:41:0e:1c:06:f7:da:f6:84:a8:27:bc:6c:85:7f:
05:3e:f5:71:41:15:62:a8:70:3d:dd:f6:79:89:c3:
99:a9:69:ce:2c:03:1e:8e:5c:f8:d6:3b:2f:05:d3:
74:e1:50:36:82:dd:9f:45:a7:f0:d6:89:2f:a7:d4:
2d:0a:e0:b0:2e:d2:59:fd:77:b0:d4:95:79:27:a0:
fd:87:6c:88:fa:2a:d8:ee:cb:b9:04:52:43:d5:0d:
0e:2f:ea:2d:d5:79:69:1f:a3:76:f5:00:d7:b5:b9:
94:4f:59:49:d2:af:73:ff:0e:f2:44:e4:75:03:33:
68:e9:0f:0b:0d:5b:c9:15:32:8f:40:8c:f1:45:5a:
5a:c6:9c:60:c0:af:4b:bf:81:96:03:25:dc:4c:dc:
cf:7f:14:e8:bc:58:20:27:a2:41:98:3a:8d:c0:33:
fc:91:63:73:64:27:4f:2b:ca:81:f1:03:04:de:69:
2d:12:0a:17:c9:b0:58:0e:41:05:04:be:5f:21:b4:
48:56:27:24:25:c2:75:de:25:e8:6a:0d:aa:62:e7:
be:39:a3:c7:5a:58:c8:15:53:4e:46:84:3a:1a:b5:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:1D:B1:BB:01:78:82:80:D2:80:E9:7C:02:F7:D7:87:0A:95:EC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234302e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.240.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2d:d5:9b:55:d1:9a:2b:c7:7d:43:34:0f:72:f7:a8:54:d2:
98:09:9f:f9:fc:fb:82:b4:9b:9f:da:8a:71:02:7d:13:b0:e9:
0e:c9:57:59:c5:ae:7c:e3:94:be:5f:c8:bf:29:e9:76:52:d6:
ce:1d:af:4c:84:a1:04:98:cd:a7:32:c5:e9:df:5c:a1:f9:a4:
31:24:cb:ef:98:cd:40:04:75:68:ab:88:69:18:79:20:9c:2c:
3c:c8:4d:8f:cf:50:ba:ad:a9:33:0b:d4:98:30:be:52:5e:18:
07:eb:3d:c9:a8:38:b8:f7:b7:00:44:4d:83:99:42:77:e9:48:
a6:ce:92:45:ec:0a:2a:c2:7b:38:55:61:3d:d5:ff:52:1d:32:
e6:a2:4c:d3:1d:34:8c:b1:3e:f4:b6:91:cb:78:00:80:37:2d:
3d:4c:9a:70:20:5d:4d:e3:73:91:65:55:33:9d:8d:f9:f7:d4:
2f:8a:ce:18:fe:4d:0e:d6:24:c2:28:2c:d8:90:80:f5:94:41:
03:33:33:45:5f:ec:5d:6f:40:0a:aa:39:60:df:1c:3c:d5:50:
b8:53:14:0b:d4:b3:12:7f:f1:70:17:b4:3e:47:59:3d:b1:bc:
5c:ee:0d:cd:13:16:53:31:92:b3:f1:b1:b4:db:c5:73:a7:ba:
da:81:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:23:40 2026 by rpki-client