Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e20323037383834.roa
File: 38322e3139382e3235302e302f32342d3234203d3e20323037383834.roa (raw, json)
Hash identifier: X6bglWBORLCNZumW8BwTbWfwHoBCH9zN/TlDqNMJnHw=
Subject key identifier: 40:13:7C:DB:7F:34:F8:3B:53:57:B2:DC:58:46:D1:F1:32:D5:33:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C57BF110FDE0FF785CDBD95F54CFBB5FF29C525
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e20323037383834.roa
Signing time: Sun 16 Aug 2026 21:36:27 +0000
ROA not before: Sun 16 Aug 2026 21:31:27 +0000
ROA not after: Sun 15 Aug 2027 21:36:27 +0000
asID: 207884
IP address blocks: 82.198.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:57:bf:11:0f:de:0f:f7:85:cd:bd:95:f5:4c:fb:b5:ff:29:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 16 21:31:27 2026 GMT
Not After : Aug 15 21:36:27 2027 GMT
Subject: CN=40137CDB7F34F83B5357B2DC5846D1F132D533AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:a5:ec:b3:7a:db:d3:be:44:2a:45:51:39:
5a:ac:a1:a7:e1:2c:ec:32:fc:6f:d6:4a:13:a7:72:
85:85:96:40:9d:5a:3e:08:c3:1e:99:3f:76:33:b2:
b5:a7:95:58:50:7d:09:11:a7:e6:18:30:65:3e:1b:
f6:1b:fb:bd:a7:a1:a6:bf:40:7b:b1:d4:b8:0f:ad:
b9:d4:26:45:38:5b:0e:ad:5a:5c:93:fb:ac:8f:ef:
24:31:ee:dd:35:e7:dc:02:d7:c4:d1:43:02:ba:0f:
dc:34:8d:b7:ca:7f:40:00:bd:1f:66:60:61:ff:b2:
89:42:5a:48:77:8c:76:fd:1a:92:9a:04:b7:a9:c0:
25:62:08:d3:19:a4:11:bc:c1:21:20:4c:3f:f8:da:
2d:f2:89:63:0e:17:d0:08:b4:bd:70:f0:56:b2:78:
f3:70:20:a2:a4:f0:36:40:13:b0:63:46:cd:08:08:
f6:49:14:42:43:74:af:55:ce:6c:3c:94:8b:93:de:
22:41:fb:18:96:93:0b:75:d6:84:26:b1:e9:07:f5:
0a:22:96:5d:d4:18:8a:e8:cc:99:c1:80:1d:70:02:
e7:19:3e:05:91:a1:1a:aa:79:76:0f:e0:44:ad:34:
6d:f9:cb:17:52:ad:a0:3e:46:25:45:9f:12:03:8d:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:7C:DB:7F:34:F8:3B:53:57:B2:DC:58:46:D1:F1:32:D5:33:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e20323037383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.250.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7e:f9:f8:04:18:0b:f4:8a:f2:b3:74:b8:f2:c3:78:f8:1b:
19:54:6d:85:0b:a9:5d:25:2f:ef:fe:7f:f7:a9:bd:29:29:e9:
27:77:1d:87:c7:2b:eb:61:e0:25:20:46:8f:ab:3f:ce:6c:ae:
b5:dd:8b:c6:4f:75:7d:25:49:a2:e0:92:ed:69:25:a6:61:59:
6b:97:c2:0e:03:40:fb:65:2d:25:ad:6a:82:3a:5c:3c:94:53:
24:56:46:9a:7a:10:6b:0f:38:d4:a4:2c:ff:f5:10:b1:b5:39:
2e:98:10:26:6a:0a:1e:dd:89:f6:1d:15:b4:1d:54:e6:99:93:
bd:65:02:fc:bb:ef:e9:a7:84:6b:66:d5:e2:0e:9a:c9:4f:0c:
63:82:44:79:6f:84:93:ba:70:f2:92:5f:fe:d6:73:4d:8c:81:
36:da:4a:9b:3d:8c:91:27:a9:57:c1:6f:d2:0e:a8:b7:11:c1:
f6:d1:03:5e:48:c3:dd:3c:16:4f:ff:30:37:28:0f:30:93:6f:
e6:ae:bd:65:87:ba:98:5a:89:84:fc:00:6c:71:81:55:45:11:
ec:3c:0d:92:b3:3a:7e:cc:f2:bd:99:97:01:12:e5:b8:27:92:
c1:a4:d1:9e:d3:0a:44:01:fc:0c:1b:3b:23:8e:56:44:75:51:
80:34:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:04 2026 by rpki-client