Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20313938303837.roa
File: 38352e3230382e34392e302f32342d3234203d3e20313938303837.roa (raw, json)
Hash identifier: D19ewBAfsweU1uoHsIqBuMIZmG2fyGkaTt9gy8PpVUs=
Subject key identifier: 52:C3:03:9B:56:6A:EF:00:76:2F:27:14:62:CE:8D:DB:A2:A1:2F:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2BFA4D55281596F24620FA232E2EC1F21111BD87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20313938303837.roa
Signing time: Mon 16 Mar 2026 14:44:31 +0000
ROA not before: Mon 16 Mar 2026 14:39:31 +0000
ROA not after: Mon 15 Mar 2027 14:44:31 +0000
asID: 198087
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fa:4d:55:28:15:96:f2:46:20:fa:23:2e:2e:c1:f2:11:11:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 16 14:39:31 2026 GMT
Not After : Mar 15 14:44:31 2027 GMT
Subject: CN=52C3039B566AEF00762F271462CE8DDBA2A12FC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:e4:8e:7c:c1:e9:c5:81:62:5f:3b:73:2b:
91:51:cd:30:ea:24:f3:79:d7:8d:10:b8:23:59:10:
67:e1:2c:5f:86:2d:3f:03:10:6f:c6:ca:21:63:4e:
3c:8a:36:04:b3:e5:bc:f7:2b:34:54:40:93:f2:99:
12:17:91:bc:6c:58:0b:0a:14:bc:7c:67:86:0e:84:
51:29:bc:90:4d:4a:5f:db:bd:36:2f:34:f3:d8:2d:
b4:71:bc:48:14:bc:76:99:48:c7:9b:77:42:c4:87:
e6:fb:72:15:ac:d6:8d:88:3f:ba:44:7e:eb:f3:40:
da:bb:0c:a6:7c:26:e4:8c:23:19:69:be:a5:cc:48:
37:91:f0:85:94:97:02:cc:dc:1f:9f:00:34:c9:b6:
e9:6c:7b:8b:af:8d:93:3e:c8:da:be:7e:e8:37:09:
40:70:fa:b5:94:fc:80:97:4b:7e:2e:40:0b:9c:8a:
22:a6:d8:5d:d7:ab:5b:4b:8b:48:22:83:cd:33:54:
56:f6:4c:11:ce:35:e9:c9:ec:0a:75:59:64:ce:1c:
4b:bb:5a:c0:73:30:b3:b7:cf:33:4a:a5:c2:e6:04:
2b:91:78:1d:34:28:ec:19:65:f2:63:8e:9a:f8:6a:
56:c0:85:f3:d7:a7:ec:4a:e3:30:e8:cc:a8:73:84:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:03:9B:56:6A:EF:00:76:2F:27:14:62:CE:8D:DB:A2:A1:2F:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20313938303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5f:12:cd:47:c3:4a:37:12:5e:46:25:b6:a3:b0:69:d7:05:
94:ce:9b:0a:83:72:e6:6a:0f:bf:25:d6:b4:2b:ee:df:c6:03:
17:7e:ce:9d:ee:fd:8e:d3:09:c6:c4:ca:69:d8:76:a7:95:41:
90:a4:0e:8b:2b:10:fd:9b:46:6d:eb:23:3b:94:87:f6:42:f0:
6d:86:8a:4d:bd:4f:8d:76:24:d4:e4:5b:d2:42:4b:03:5c:9f:
de:3b:0c:da:d9:6a:26:4d:3f:e7:ea:2d:32:95:53:53:80:e7:
b5:38:45:ff:8c:06:9c:9c:78:4d:48:8f:7a:35:d0:ff:ab:1f:
5d:7e:7d:a3:74:8f:45:fe:95:d9:1f:a5:94:b3:86:b7:c2:8f:
19:64:9f:b2:03:4e:4c:52:c4:42:f1:4b:bc:ae:aa:1d:8e:80:
37:39:20:1e:e7:c2:81:08:92:40:1c:bf:6d:27:4a:8a:dc:3d:
da:30:da:ed:2d:12:13:6b:6f:8c:3e:84:a2:f9:3f:f6:87:ad:
75:cd:72:05:e8:e4:9a:8b:12:9f:10:fb:4b:c1:10:2a:e4:87:
52:4c:d9:57:aa:36:0a:ee:76:90:4f:d2:8d:b2:68:03:69:4b:
7f:22:22:db:43:23:0c:2b:1c:46:0b:02:32:a6:c7:b3:77:73:
d5:bc:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 23:02:39 2026 by rpki-client