Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203633313939.roa
File: 38352e3230382e34392e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: 3GLLHpeQawYMZ68Satv07b20VwnRMrlZAm0Q2XjmrB4=
Subject key identifier: 95:D3:67:36:28:EA:FF:E5:39:6E:B7:40:1A:94:2A:69:23:5D:D5:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 59FD303AB13EDF4C59FA8F3D4DC7DECEEA7FA657
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203633313939.roa
Signing time: Mon 02 Mar 2026 11:41:42 +0000
ROA not before: Mon 02 Mar 2026 11:36:42 +0000
ROA not after: Mon 01 Mar 2027 11:41:42 +0000
asID: 63199
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fd:30:3a:b1:3e:df:4c:59:fa:8f:3d:4d:c7:de:ce:ea:7f:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 11:36:42 2026 GMT
Not After : Mar 1 11:41:42 2027 GMT
Subject: CN=95D3673628EAFFE5396EB7401A942A69235DD513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:79:28:0a:23:83:d4:bb:8d:41:00:40:6a:
22:88:05:1b:0e:85:35:34:ea:7f:cd:47:a6:e5:a1:
d8:e2:ff:e0:4c:41:56:7b:56:06:7c:67:48:91:b5:
dd:96:8e:b1:9f:c3:f0:03:69:51:a6:c2:b6:ff:97:
25:83:95:56:40:c9:bd:01:da:72:b5:bf:ce:9c:23:
f9:b4:16:9d:2b:64:d0:a2:20:af:b3:b3:62:c2:c4:
63:8a:27:b7:00:d9:3c:9a:54:88:8b:47:87:55:cb:
a7:7b:73:97:8f:88:3d:f6:b6:3b:1c:d9:5c:bd:e4:
f5:a9:cb:c1:c2:6a:e1:bd:d4:98:bb:5e:73:81:03:
b5:15:ab:b1:1c:da:b3:05:ff:04:05:f9:70:15:4a:
71:cf:d5:8a:90:19:e3:2f:5e:29:b5:e9:39:05:48:
f3:46:65:33:4f:5f:7e:ef:24:2d:23:1d:bb:0c:9e:
bf:97:8d:26:0a:d0:42:1f:72:03:fd:e3:48:35:5a:
bc:ff:1d:31:28:67:43:23:ac:0c:26:40:16:ba:45:
38:20:da:e3:ee:94:c1:97:92:a1:ad:39:1b:e6:e3:
c6:2f:1b:61:79:d3:54:db:69:8c:bc:ce:26:6c:7e:
7b:97:42:e7:14:ea:5d:8b:c8:27:02:ed:54:07:77:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:67:36:28:EA:FF:E5:39:6E:B7:40:1A:94:2A:69:23:5D:D5:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c6:f3:9e:15:e2:cb:50:a6:3e:9b:56:e8:8f:2e:c2:75:9d:
de:b9:33:1f:e2:fb:cf:30:4b:c9:32:5c:f7:ff:ef:34:c1:f1:
89:fa:28:c9:27:28:eb:05:76:89:15:d0:23:c7:c3:26:1e:ed:
46:7b:2e:6a:26:90:21:bc:65:96:02:94:c8:a1:8a:d3:b8:b8:
31:7a:02:52:0a:ac:6e:fa:6a:22:2a:6b:d8:66:a8:91:b6:5d:
67:68:97:0c:53:f1:cc:92:10:31:a3:1f:9e:a7:fc:d7:26:3c:
de:64:b3:23:98:86:2a:47:54:30:a4:b0:95:fc:ae:3e:b9:f2:
67:5a:6f:fb:18:f1:bc:1f:98:e6:17:cb:75:74:c9:55:3c:b0:
f2:23:21:e9:91:a0:c4:a6:a6:c8:12:61:b5:02:6b:6c:7a:9b:
4e:93:cb:a6:3a:0a:79:e0:4f:9d:a8:e2:18:f7:ae:da:37:3a:
47:e9:87:7e:78:a7:12:0f:44:3f:8b:47:a0:35:08:08:76:f9:
6a:2a:67:dd:c4:b7:91:56:8c:8c:68:7a:5f:76:35:8d:73:b2:
cd:f1:1a:d2:2f:cb:78:8f:1a:d9:cd:21:83:8c:5e:ae:fe:e5:
10:60:f2:be:96:5b:13:df:44:27:8c:20:b3:e9:af:be:76:26:
9d:02:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:15 2026 by rpki-client