Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234372e302f32342d3234203d3e20313336373837.roa
File: 38352e3139302e3234372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jJmE1ejNkzlF645rvbbZciHhjlbhXiQlFlU7xrcFmq4=
Subject key identifier: FF:53:54:1C:20:B3:A5:E4:B7:8D:B7:65:0B:0E:E1:51:95:AB:D2:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73AACA74CCF41B42172FF993EAC0F0591CEC33EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 30 Aug 2026 21:28:17 +0000
ROA not before: Sun 30 Aug 2026 21:23:17 +0000
ROA not after: Sun 29 Aug 2027 21:28:17 +0000
asID: 136787
IP address blocks: 85.190.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:aa:ca:74:cc:f4:1b:42:17:2f:f9:93:ea:c0:f0:59:1c:ec:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 30 21:23:17 2026 GMT
Not After : Aug 29 21:28:17 2027 GMT
Subject: CN=FF53541C20B3A5E4B78DB7650B0EE15195ABD2BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:84:ef:51:5d:96:33:ed:32:81:9a:f7:0f:
e4:8b:7a:3a:e6:a8:a1:8a:2a:1f:c3:e9:69:f0:82:
18:31:b3:4f:11:64:3a:d2:47:84:4d:d4:b8:ed:a9:
c8:00:c3:15:d2:c8:47:23:11:b8:f7:ce:ce:6b:ca:
68:01:99:5d:8a:d8:2c:8d:a6:2f:d1:fc:e8:c0:67:
d1:a8:ab:0a:ed:53:b1:65:ce:86:9b:dd:62:55:02:
18:ad:eb:c7:dd:98:c6:ac:fc:e0:14:46:d0:4c:5b:
a1:31:fd:1c:d0:16:9a:79:67:a7:42:6b:d0:bf:46:
c9:3c:96:7e:86:75:f9:56:aa:dd:8b:17:95:89:49:
62:b3:6d:d8:c2:da:cf:93:f2:a7:18:42:4f:a5:32:
b6:0a:f1:6e:19:ed:da:64:e4:0b:97:e6:ac:aa:dd:
69:28:ce:7a:07:12:c0:46:9b:a8:4b:0c:4d:08:e5:
ac:37:62:f6:f2:f3:44:75:57:68:b4:29:26:cb:95:
20:84:80:81:68:b7:c0:3d:c2:c0:85:d9:be:4a:fc:
ad:68:4d:40:31:aa:da:a3:dc:cc:ba:93:35:8c:56:
31:17:0e:66:c8:32:03:e6:86:77:4e:6b:42:51:59:
f5:39:00:e2:7d:b2:b4:52:69:c0:9a:a9:fc:41:83:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:54:1C:20:B3:A5:E4:B7:8D:B7:65:0B:0E:E1:51:95:AB:D2:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.247.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ce:1e:8e:63:f1:ad:b2:87:ef:e9:3a:42:79:8b:1e:76:e9:
78:a5:8e:03:08:5f:f0:34:c0:99:bb:9f:11:e5:99:e0:2c:4b:
f7:c5:b0:d8:c8:8c:2a:bf:4d:11:de:5d:fb:c0:76:f4:b7:34:
81:49:3b:d9:8d:0c:f5:bb:ce:a9:88:fc:dc:ef:b0:a2:24:18:
61:39:7a:3e:9c:7a:08:08:e5:94:f8:03:af:f7:e9:7f:1e:b8:
38:de:2d:7b:db:f6:6b:50:64:72:f7:12:04:f0:cf:ae:19:48:
f7:79:c9:88:10:01:d6:b8:d7:09:c2:61:1a:4f:86:34:64:d8:
e4:68:d0:18:ae:40:bf:94:4d:c5:1a:15:c2:63:d2:32:84:02:
82:8f:e4:9d:78:b2:ce:8e:84:8e:99:38:b5:44:9d:d7:99:dc:
96:41:4a:c3:10:98:9d:39:1c:5b:02:7c:c3:aa:e0:84:db:45:
fe:c7:7f:1d:0d:74:87:34:2d:b7:d8:55:79:23:9c:a0:33:5c:
1f:32:63:2c:bf:8c:4c:71:84:09:12:19:54:d5:20:b2:bf:c3:
67:7b:0e:9d:b0:cd:71:44:ea:a9:d9:7f:7a:f7:df:e8:2d:6a:
40:4a:35:a1:90:3a:1c:a4:18:2b:d1:14:e4:53:ed:48:b5:63:
bb:84:d8:85
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUc6rKdMz0G0IXL/mT6sDwWRzsM+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MzAyMTIzMTdaFw0yNzA4MjkyMTI4MTdaMDMxMTAvBgNV
BAMTKEZGNTM1NDFDMjBCM0E1RTRCNzhEQjc2NTBCMEVFMTUxOTVBQkQyQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nYTvUV2WM+0ygZr3D+SLejrm
qKGKKh/D6Wnwghgxs08RZDrSR4RN1LjtqcgAwxXSyEcjEbj3zs5rymgBmV2K2CyN
pi/R/OjAZ9GoqwrtU7Flzoab3WJVAhit68fdmMas/OAURtBMW6Ex/RzQFpp5Z6dC
a9C/Rsk8ln6GdflWqt2LF5WJSWKzbdjC2s+T8qcYQk+lMrYK8W4Z7dpk5AuX5qyq
3WkoznoHEsBGm6hLDE0I5aw3Yvby80R1V2i0KSbLlSCEgIFot8A9wsCF2b5K/K1o
TUAxqtqj3My6kzWMVjEXDmbIMgPmhndOa0JRWfU5AOJ9srRSacCaqfxBg7q/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/1NUHCCzpeS3jbdlCw7hUZWr0rwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzEzOTMwMmUzMjM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABVvvcwDQYJKoZIhvcNAQELBQADggEBAFfOHo5j8a2yh+/pOkJ5ix526XiljgMI
X/A0wJm7nxHlmeAsS/fFsNjIjCq/TRHeXfvAdvS3NIFJO9mNDPW7zqmI/NzvsKIk
GGE5ej6ceggI5ZT4A6/36X8euDjeLXvb9mtQZHL3EgTwz64ZSPd5yYgQAda41wnC
YRpPhjRk2ORo0BiuQL+UTcUaFcJj0jKEAoKP5J14ss6OhI6ZOLVEndeZ3JZBSsMQ
mJ05HFsCfMOq4ITbRf7Hfx0NdIc0LbfYVXkjnKAzXB8yYyy/jExxhAkSGVTVILK/
w2d7Dp2wzXFE6qnZf3r33+gtakBKNaGQOhykGCvRFORT7Ui1Y7uE2IU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:49 2026 by rpki-client