Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e20323136323533.roa
File: 38352e3230382e35302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: bvZub6cRuNVl4Dt4t45CxXHX+O8Pi7vY2lKuyJU1Jns=
Subject key identifier: 8F:35:A6:F3:9C:E7:B6:39:90:DF:A9:90:2F:1B:12:06:25:00:E2:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5168D3C59464CC43A3D9DCBC9E1E6D7EA5054622
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e20323136323533.roa
Signing time: Thu 13 Aug 2026 20:17:25 +0000
ROA not before: Thu 13 Aug 2026 20:12:25 +0000
ROA not after: Thu 12 Aug 2027 20:17:25 +0000
asID: 216253
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:68:d3:c5:94:64:cc:43:a3:d9:dc:bc:9e:1e:6d:7e:a5:05:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 13 20:12:25 2026 GMT
Not After : Aug 12 20:17:25 2027 GMT
Subject: CN=8F35A6F39CE7B63990DFA9902F1B12062500E263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:7f:3a:5c:f6:ce:a2:5b:1c:cd:ed:16:d9:
25:1d:6d:4c:51:66:09:ae:fe:28:a3:e2:5e:8a:7a:
d8:0b:c7:83:ff:3a:80:65:6b:f4:04:33:2a:44:47:
14:3a:e6:33:24:45:6d:0a:c0:14:4b:ba:70:c0:5d:
06:72:bd:14:28:ef:1a:ee:bc:c4:b6:53:0f:7f:38:
5b:a9:01:43:af:bd:cf:86:62:42:d8:ff:ef:46:43:
fb:30:bb:e8:bd:7f:15:5d:e5:11:9b:88:27:38:14:
3e:f3:fe:40:74:19:d5:81:3e:5e:ec:ea:15:98:c0:
c9:94:cf:26:50:10:17:f6:46:30:00:7c:11:c4:51:
02:40:38:3c:f8:a7:21:3a:a3:5c:21:90:9e:04:99:
de:16:69:a3:6a:bc:09:f1:61:55:ec:19:65:71:bc:
13:30:a6:40:d7:c5:3f:9f:d1:61:a7:54:e3:da:13:
58:2b:34:28:04:a7:49:6b:58:f6:f4:f0:47:a5:bb:
08:d1:7e:5d:ca:e7:00:a8:c4:30:91:ef:0b:14:8f:
98:a4:65:01:1d:52:a6:cb:18:43:24:d3:4d:65:b7:
5e:9d:f7:ab:95:11:b7:99:fa:9e:a0:e7:35:15:4e:
d9:f2:99:dc:3c:e2:1e:8e:35:ed:5c:ce:04:6e:80:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:35:A6:F3:9C:E7:B6:39:90:DF:A9:90:2F:1B:12:06:25:00:E2:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e8:f1:5b:3b:f8:da:34:fe:10:c6:89:0d:8b:b3:44:3b:31:
0b:8e:01:59:03:ee:c3:bf:d7:43:ab:f1:66:e8:8b:75:d3:f4:
f6:96:6c:d8:50:3e:37:6a:1d:f2:02:bc:d5:67:0c:b3:43:3d:
01:20:a8:19:31:66:27:1e:63:63:bb:7a:a5:d4:c7:a7:01:26:
08:eb:ca:e8:5e:dd:44:4d:e8:08:73:83:d4:ce:6c:4c:9a:71:
3c:d7:a5:8c:ce:85:e7:1a:67:25:9e:c4:91:8b:fd:65:61:1f:
96:a4:bd:8e:b1:4e:91:0a:24:a4:7c:99:01:43:a3:5c:ce:4d:
a4:85:5f:d4:89:dd:ab:6c:67:6d:21:5b:1f:a8:a7:76:d6:30:
7d:28:1f:c4:b3:b5:93:21:4c:a3:fc:d8:e2:aa:60:24:88:4e:
79:ee:4d:22:71:11:86:11:ae:24:b0:48:56:86:f7:8a:b1:bd:
99:01:61:5d:e1:c5:cb:8c:c8:43:6f:83:44:d9:2d:27:0b:ba:
85:2a:00:ce:ba:65:05:cc:fc:d5:83:e2:d9:00:9a:70:7b:68:
8a:6e:ae:c8:d1:89:ec:87:b9:bf:90:dd:f4:11:b2:8c:d8:ee:
c1:38:68:38:27:cb:72:84:dd:a9:ed:31:69:33:92:8e:2a:eb:
82:7e:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:31 2026 by rpki-client