Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235342e302f32342d3234203d3e203537303433.roa
File: 38322e3139382e3235342e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: lEFTOtQ7MwxPuX9wneM/XkswENx/t1JPYIOIH5bZU7c=
Subject key identifier: 79:00:A3:5A:B3:08:D1:16:73:1E:74:10:D5:45:63:56:86:3F:12:1E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A6C035B3822AB4180C2480D489F1E7D90E0D587
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235342e302f32342d3234203d3e203537303433.roa
Signing time: Tue 26 Aug 2025 09:48:49 +0000
ROA not before: Tue 26 Aug 2025 09:43:49 +0000
ROA not after: Tue 25 Aug 2026 09:48:49 +0000
asID: 57043
IP address blocks: 82.198.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:6c:03:5b:38:22:ab:41:80:c2:48:0d:48:9f:1e:7d:90:e0:d5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 26 09:43:49 2025 GMT
Not After : Aug 25 09:48:49 2026 GMT
Subject: CN=7900A35AB308D116731E7410D5456356863F121E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:e0:e2:5d:01:ba:0f:95:2d:43:86:9b:f5:
35:c8:67:d3:d1:7c:fc:54:3b:ab:f8:58:53:bd:52:
c0:44:af:34:38:62:38:8f:19:83:29:b6:c5:33:70:
64:84:34:19:26:e3:c6:90:e3:08:b9:f7:46:99:a3:
17:92:eb:8a:56:c2:76:82:33:eb:b8:11:17:ef:67:
ed:f0:33:f5:1f:55:31:38:33:51:74:c8:14:d9:3e:
63:f8:a2:e9:97:19:fe:e8:b0:85:9d:7f:78:66:1e:
c2:ec:28:65:9b:ba:26:22:6e:29:a9:25:7a:9e:a2:
ef:b8:89:77:0a:bd:4d:80:18:e1:43:4f:1b:08:17:
82:76:97:41:d8:7c:08:b7:3b:0a:53:50:a0:aa:9d:
0b:47:3e:9a:70:79:06:55:b1:b7:4c:c1:6b:88:46:
64:03:69:13:cc:fb:4b:7b:86:e0:56:6a:ed:43:e7:
f9:b3:12:43:e1:43:d9:32:bf:44:4d:11:1b:d0:fc:
ae:9c:cf:0b:49:74:68:a2:31:57:b9:d0:d5:ca:76:
6b:76:11:92:6a:40:64:2c:ac:94:aa:80:da:71:ae:
89:e2:58:46:c3:48:0a:4a:8d:84:f3:08:d4:18:e7:
ea:92:98:80:74:4e:c7:19:98:34:c3:e9:e8:c3:2f:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:A3:5A:B3:08:D1:16:73:1E:74:10:D5:45:63:56:86:3F:12:1E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235342e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8e:b2:e4:78:b7:26:00:c7:83:7e:a2:5f:ae:f0:3c:f9:46:
a3:21:5c:d5:4d:c6:23:29:e4:c4:83:be:e1:af:97:c2:90:fb:
cb:5f:18:24:05:ee:fc:77:db:a2:ca:c9:49:e1:35:25:f0:63:
59:a5:c8:24:52:be:70:b4:4c:7d:06:01:7d:03:75:11:eb:d6:
15:7b:ff:f3:cf:ac:be:e4:51:11:c2:5b:b3:fc:fa:de:1a:65:
1c:d0:53:6e:43:9f:73:f1:b1:4a:15:e7:35:d2:a4:ea:c9:22:
42:bc:5c:c4:ee:c2:d6:1d:d4:9d:7d:84:53:3a:bf:40:6f:8f:
b1:d4:32:94:e8:23:90:d9:6a:62:19:af:05:d4:99:68:1e:bf:
19:bf:73:ca:b4:74:d0:f4:2a:de:02:0f:1b:b2:0f:d9:2e:b2:
f5:14:dd:c2:2e:5c:b3:72:b8:66:c3:cc:2b:f9:d0:dc:9a:1d:
c3:bd:ff:8c:cc:7e:5a:bd:6a:98:8a:49:c6:ec:1b:e5:f8:6f:
5c:c9:51:be:7e:0f:7f:48:17:cd:86:e5:65:99:a5:ea:e1:1c:
29:5e:50:42:f4:18:03:b1:bb:30:0f:ad:7c:9f:8e:9e:b9:ea:
c2:35:d5:59:08:06:1f:8d:d8:b1:69:c1:94:b9:fa:b2:f9:68:
10:fb:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:44:32 2025 by rpki-client