Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203538323931.roa
File: 38352e3230382e34392e302f32342d3234203d3e203538323931.roa (raw, json)
Hash identifier: pSPaUrOCRidIUJerVvZrltPRp3XSn00pGalTwJ93vNc=
Subject key identifier: 61:08:C1:64:B2:1D:6F:F6:38:10:0E:6E:7A:8F:1A:35:72:34:E6:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E14A93C49804A8677322AE787026FE727F25176
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203538323931.roa
Signing time: Wed 12 Aug 2026 10:06:27 +0000
ROA not before: Wed 12 Aug 2026 10:01:27 +0000
ROA not after: Wed 11 Aug 2027 10:06:27 +0000
asID: 58291
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:14:a9:3c:49:80:4a:86:77:32:2a:e7:87:02:6f:e7:27:f2:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 10:01:27 2026 GMT
Not After : Aug 11 10:06:27 2027 GMT
Subject: CN=6108C164B21D6FF638100E6E7A8F1A357234E61C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:c6:64:f5:d2:8f:84:b4:76:80:26:25:7c:
4d:78:c8:24:24:6c:87:20:80:0e:ec:9a:ac:65:e2:
b1:bf:b0:2f:c2:7d:74:a8:52:b6:36:9f:0e:72:3b:
dd:d9:43:78:ec:94:b1:30:8b:33:84:e1:f6:b2:63:
09:0f:2a:75:8f:2e:81:ad:89:8a:a8:f0:c6:ba:c5:
eb:80:62:81:b1:dc:0c:d1:ab:ef:b3:77:b5:8f:79:
e7:b8:16:dc:c9:a3:3b:33:49:b3:bc:5d:bd:94:09:
8b:8c:9f:58:9d:ec:ef:0c:df:72:e2:86:6c:bd:43:
69:7e:41:a9:bf:47:5d:b0:62:88:c1:cf:a4:63:f7:
50:5e:8c:3b:d6:9f:7d:5d:18:bd:9d:d5:66:7a:ed:
4a:2e:4a:c4:78:b9:05:63:63:12:c8:43:7e:1e:a9:
d6:0d:fa:09:ee:fd:c3:b7:dd:af:c3:8f:f1:65:54:
56:67:14:66:10:24:1b:64:da:8d:84:b1:3f:af:ed:
0d:85:42:55:1b:4c:e9:f0:fd:b9:de:39:03:20:61:
a7:0e:0a:bf:0c:aa:ef:11:05:3d:02:70:95:23:42:
55:dd:d6:06:ef:33:50:e1:56:7f:af:79:8c:1a:34:
1f:41:20:f0:60:75:f5:46:45:07:80:21:52:00:2c:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:C1:64:B2:1D:6F:F6:38:10:0E:6E:7A:8F:1A:35:72:34:E6:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203538323931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:99:5f:56:a9:eb:36:ad:e1:20:7b:fa:a0:81:b0:52:d4:7b:
ad:57:9f:f8:e7:52:7a:1c:1f:5f:d1:92:ee:0e:6f:1a:72:31:
1f:ed:68:10:55:9d:4c:b3:3c:8d:d8:75:22:8b:49:ea:69:a0:
55:8c:8f:13:9f:75:77:24:b5:22:4b:34:47:34:06:29:be:20:
8e:04:c4:91:13:dd:4d:8a:cf:3d:40:3f:dc:4f:a3:ba:0a:19:
a0:ab:a0:30:e7:33:11:73:38:3e:8c:71:99:fe:52:b8:6d:ed:
29:9f:45:09:06:7e:95:a0:ec:98:91:50:63:95:a9:89:4d:ed:
ca:75:bb:56:b8:2c:1a:4b:59:bc:d0:f1:e6:d6:52:e0:ea:a4:
29:ae:f9:17:b0:79:b2:76:36:9a:e2:da:1a:c3:e2:82:8e:b5:
b7:c1:89:a4:2d:6e:d1:24:a4:cf:ce:ed:cc:5e:2e:79:85:f2:
8a:9b:91:6b:97:4c:e9:bc:c7:8e:7b:dd:5e:70:1d:8f:98:fb:
7b:0c:f4:db:bd:cb:ae:96:de:b1:32:10:5f:c0:d6:83:be:79:
de:cd:6b:38:c3:ec:2b:45:c1:9c:81:9d:67:08:ff:65:1f:4c:
97:9f:dc:e9:5a:0e:8c:da:a9:3b:e4:45:19:49:43:f8:bb:1a:
73:49:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:26 2026 by rpki-client