Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa
File: 38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: X+idujiQJhUiHhBT34LQc925SwR62nlBHMqz7a/ax0k=
Subject key identifier: 0A:7E:5F:B7:B2:65:85:06:D4:1A:23:88:26:3A:6C:07:5A:23:6B:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19A8E135F7C039FDE47E25283A65BEBC4F3ED6EC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:12 +0000
ROA not before: Sun 30 Aug 2026 21:23:12 +0000
ROA not after: Sun 29 Aug 2027 21:28:12 +0000
asID: 136787
IP address blocks: 85.190.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a8:e1:35:f7:c0:39:fd:e4:7e:25:28:3a:65:be:bc:4f:3e:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:12 2026 GMT
Not After : Aug 29 21:28:12 2027 GMT
Subject: CN=0A7E5FB7B2658506D41A2388263A6C075A236BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:3d:1c:33:f6:98:a8:22:13:0a:08:c9:f7:
fc:bd:de:94:1a:26:7f:4d:f2:d7:7e:a6:8e:ae:19:
6c:1c:78:e5:ff:0c:73:20:a5:8b:52:06:d9:c8:86:
83:c6:8e:d2:71:88:7b:48:12:a4:8e:0c:ad:45:9c:
b5:41:f9:8f:c4:99:0e:74:45:2e:da:60:fd:57:db:
c2:3b:09:9c:31:0f:59:20:f8:35:b4:3a:49:cf:34:
fe:41:88:c8:dc:aa:eb:57:7c:8e:a2:dc:ff:5b:b9:
68:de:ac:28:c7:57:4d:77:ed:aa:b2:92:a6:10:99:
a5:26:1b:c1:cf:51:01:aa:2b:21:22:c9:55:ef:a6:
ca:5c:83:6d:7f:a2:12:15:d2:86:55:68:94:61:2a:
89:dc:18:31:78:f1:04:0d:98:d2:d2:42:7f:5d:c1:
52:f8:98:ce:e4:29:88:fc:e2:91:56:f2:88:71:d3:
ae:a2:da:72:09:6c:24:83:f8:af:85:fd:a6:35:74:
04:9b:0f:3a:d8:71:ac:ab:57:74:27:13:9e:c6:2b:
33:6d:4c:89:cc:46:91:07:8f:bf:f5:ae:00:f0:14:
05:0b:19:fa:b2:37:e6:62:b1:13:43:cc:9d:dc:8e:
a5:7b:46:af:35:bb:fc:2e:29:f5:9f:91:fd:17:90:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:5F:B7:B2:65:85:06:D4:1A:23:88:26:3A:6C:07:5A:23:6B:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.236.0/24
Signature Algorithm: sha256WithRSAEncryption
74:eb:39:e0:fc:c0:1b:a6:ba:9e:6f:24:21:b9:b3:8c:1b:f0:
9a:4e:d1:e8:3d:34:11:5e:15:e8:8e:6b:46:64:d6:1d:d3:b1:
a3:31:3d:ea:8a:ac:9d:a1:a2:55:18:7d:fa:0d:f1:90:d1:c4:
0a:7b:14:e1:89:9b:f8:58:5e:0f:65:57:6c:5a:25:0c:5b:a3:
9d:ad:1a:82:05:0e:4f:6f:e9:fd:d4:02:cb:db:88:df:93:42:
22:6d:5a:e9:8b:ca:b8:60:13:1b:14:6a:5b:6d:fa:08:95:fb:
c3:c0:e2:5c:39:fe:9f:5e:9b:79:84:44:02:e7:a5:59:87:a0:
34:00:fc:28:25:0b:d9:20:d1:ec:b5:93:9b:2b:e8:e8:62:78:
11:d1:c5:d9:41:e5:bd:3a:48:37:60:d9:3f:2a:90:c1:42:5b:
fa:12:c1:23:10:76:2e:4e:60:40:0e:14:d6:b9:4f:21:ef:74:
90:00:99:46:52:33:b0:9e:28:72:22:28:d8:87:90:51:aa:92:
e1:4a:d0:8f:c0:79:c6:37:be:58:c5:6d:d8:13:52:ee:36:4a:
77:37:38:68:8f:2e:5f:d0:47:6e:ff:1f:5c:f5:42:51:1e:77:
b8:e5:b5:ef:75:ed:fa:64:1d:90:c5:59:b0:fa:b9:de:5e:80:
da:0c:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:42 2026 by rpki-client