Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233352e302f32342d3234203d3e20313336373837.roa
File: 38352e3139302e3233352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: J9qSTrVi5lq4l2ot5aPUieh4ZAJJRTJiAUPp+e36XNI=
Subject key identifier: A3:6A:01:5A:BA:85:5E:42:26:34:F1:19:85:DE:04:47:62:E0:88:75
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E4A9BD350D72D93075C5FBED06976714B7AB347
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233352e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:18 +0000
ROA not before: Sun 30 Aug 2026 21:23:18 +0000
ROA not after: Sun 29 Aug 2027 21:28:18 +0000
asID: 136787
IP address blocks: 85.190.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4a:9b:d3:50:d7:2d:93:07:5c:5f:be:d0:69:76:71:4b:7a:b3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:18 2026 GMT
Not After : Aug 29 21:28:18 2027 GMT
Subject: CN=A36A015ABA855E422634F11985DE044762E08875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:51:4e:7e:70:48:b8:2c:9c:80:61:b3:cf:
c8:0d:fe:92:83:b4:3e:c9:ad:47:65:84:1b:4d:fd:
04:9d:c3:10:d5:bf:01:43:3b:a5:08:22:4a:df:17:
0e:9b:72:05:a8:bb:5b:bd:f3:89:11:86:bc:b6:45:
2d:62:f2:0b:63:63:a7:7b:5b:95:a8:7e:f0:e9:e9:
1b:03:f4:aa:75:bc:d0:7b:6a:4a:7c:62:3f:5a:71:
99:69:b4:bd:de:70:7f:50:b8:15:35:d7:9c:5d:e5:
ad:f9:13:06:e7:ba:bf:16:e3:3b:42:65:28:a5:73:
0c:5d:31:14:c6:fa:f7:e9:22:e7:f6:ad:64:7a:16:
73:a5:72:57:e8:da:ba:7a:d8:29:e7:44:d4:0f:96:
71:2f:83:8e:f1:30:18:52:2d:42:61:7f:67:6d:8c:
88:46:27:02:7d:92:1c:a5:c3:ee:b3:ff:2d:0c:cc:
a5:8d:69:f7:76:e5:ca:d5:50:97:f4:47:d6:ab:3e:
99:0c:4f:1e:9c:3e:d3:3b:6a:72:69:d1:3e:36:bc:
f9:7d:a3:24:da:0b:56:a7:04:fc:db:d8:0d:20:17:
a7:05:8c:69:21:0c:14:28:6f:19:d1:e7:35:4f:fb:
36:3f:43:42:8b:ba:6a:c8:21:78:0c:da:4a:d0:75:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:01:5A:BA:85:5E:42:26:34:F1:19:85:DE:04:47:62:E0:88:75
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:71:27:24:03:fa:cd:d1:56:07:ca:bc:4d:3d:25:5b:b5:ee:
e0:4e:7b:3e:29:72:e7:06:56:ed:c9:75:d8:53:5c:ea:cc:5f:
e7:c7:87:3c:7b:6c:4d:7b:d1:bf:23:47:b3:c2:5a:6d:42:4e:
f0:03:a0:76:b0:cc:8f:2e:a0:a4:37:2e:b7:2d:6e:0d:a3:6f:
d0:9d:12:27:f6:f8:f3:a4:88:d4:bd:da:62:c2:36:fc:c4:5b:
d4:86:76:be:5f:52:c8:58:a1:74:8f:f0:1c:60:bc:6c:fe:c0:
bc:56:85:cc:84:6f:e7:64:24:45:66:b5:77:b0:6a:6d:2f:42:
33:27:ae:31:59:6f:4f:3f:99:91:86:e5:49:01:9d:29:af:17:
e2:5d:a3:7a:ab:b6:cc:8c:d5:c8:27:ed:bb:a1:6a:cf:66:f3:
d5:03:c7:9c:9e:3e:37:fb:59:b4:57:b9:e6:31:0b:3f:aa:7b:
d2:09:5c:a6:fa:90:8a:07:67:10:6a:85:44:21:ba:f8:5b:f1:
8b:84:45:66:32:c0:bf:b1:72:30:30:7c:99:fb:29:97:bd:94:
78:a5:13:12:1a:73:dd:0d:82:70:e2:d9:52:2f:db:50:0e:fe:
fe:df:9d:f8:b6:e9:cc:dc:83:b2:16:9b:58:30:3b:15:5a:5a:
13:3f:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:37 2026 by rpki-client