Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234322e302f32342d3234203d3e203633303939.roa
File: 38322e3139382e3234322e302f32342d3234203d3e203633303939.roa (raw, json)
Hash identifier: SpLMkwwCmmE+JfoLVuY8y8+jLXG1CPpRsr5orDPZM5E=
Subject key identifier: F2:DF:4C:CF:A3:94:79:2E:47:16:E5:B8:5C:18:E8:F6:92:C6:70:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 573A2219616592269A3400E7C5B645917AD82389
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234322e302f32342d3234203d3e203633303939.roa
Signing time: Thu 25 Jun 2026 22:52:03 +0000
ROA not before: Thu 25 Jun 2026 22:47:03 +0000
ROA not after: Thu 24 Jun 2027 22:52:03 +0000
asID: 63099
IP address blocks: 82.198.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3a:22:19:61:65:92:26:9a:34:00:e7:c5:b6:45:91:7a:d8:23:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 25 22:47:03 2026 GMT
Not After : Jun 24 22:52:03 2027 GMT
Subject: CN=F2DF4CCFA394792E4716E5B85C18E8F692C67048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:4a:a2:cd:6f:63:74:c3:5b:9e:f3:54:d6:
21:cd:56:09:a4:f8:a6:49:30:54:88:79:e7:06:6d:
cf:f7:2b:6a:53:52:55:36:a3:4d:5a:bd:35:f5:7e:
78:16:ad:45:4c:43:3e:1b:ad:03:7d:87:80:35:13:
e1:ba:50:a7:e9:01:53:dc:d6:8f:24:92:eb:c5:0d:
47:1e:a6:fd:92:4c:de:e1:ac:1f:ac:58:4e:c0:30:
6e:05:c3:d4:c8:46:53:db:d2:c3:e8:7b:c3:71:be:
67:d6:f9:35:e9:d5:11:37:c9:f1:f3:d0:8b:01:b3:
ae:55:c0:49:b0:7d:38:35:02:35:55:92:3a:9a:c6:
84:bf:6a:44:53:cf:34:b6:8c:d7:f9:06:5c:10:67:
6f:90:5d:47:ea:83:9f:2c:55:ba:c7:c0:65:3b:c5:
09:4d:25:73:94:97:7b:2d:3d:dd:78:bb:37:18:08:
94:73:aa:f3:d9:93:dc:ac:c8:82:a3:e9:f2:9b:f0:
59:3f:2e:73:b3:ab:d7:3c:36:45:43:96:03:84:7c:
49:6c:4d:1c:5e:ef:83:22:4a:cf:eb:48:d0:26:03:
a5:4a:e3:d5:92:b6:c3:59:4f:c3:b0:cb:af:7b:3b:
c8:6f:6b:74:80:4a:0c:fa:9a:39:f9:ab:16:6b:c9:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DF:4C:CF:A3:94:79:2E:47:16:E5:B8:5C:18:E8:F6:92:C6:70:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234322e302f32342d3234203d3e203633303939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.242.0/24
Signature Algorithm: sha256WithRSAEncryption
18:98:ad:86:f3:7b:1b:f5:12:fd:1c:8d:d7:eb:cb:08:69:6b:
72:6f:ca:8e:b2:95:cb:e9:e6:62:8c:23:56:8c:de:49:c2:d6:
ac:f3:b7:97:71:ae:16:41:5b:e8:32:8a:d5:01:59:89:06:eb:
79:ca:71:28:92:93:86:39:1f:86:11:1d:65:60:b9:dc:b6:e6:
29:1e:db:6f:6f:77:9c:6d:6f:bf:e3:84:6a:8c:9c:dc:e5:db:
34:1a:0f:5e:3b:3a:fb:ea:61:4a:86:ea:30:3c:a9:92:f2:c6:
08:ce:4f:97:d2:bc:62:0c:48:31:5d:ef:cb:fc:46:b0:d3:4e:
77:70:bd:2b:2b:59:7a:e5:ea:09:9e:ab:15:ec:9c:d6:f5:ed:
d6:74:00:f8:36:16:39:a4:86:b3:3f:4f:b8:b7:01:14:7e:43:
79:ef:4c:42:2b:36:24:cd:14:29:b9:35:cb:4b:d1:d5:dc:2f:
4a:9b:37:9c:e6:11:52:56:0f:bf:ce:ba:50:c0:03:c4:cd:53:
fc:ec:93:65:d9:7f:4a:5d:dc:2b:d6:bb:3d:31:1f:ea:69:dd:
fb:8e:43:7c:7b:07:1b:ea:e9:7a:ec:e2:4d:16:10:dd:0d:2b:
79:8e:76:4b:7e:7a:e9:40:8e:f4:d0:db:47:15:6d:28:00:99:
4a:20:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:46 2026 by rpki-client