Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3232342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: MpKhGqJArcy6yGcws5N1+sgNrAdS+WPbv7Do5Ka9598=
Subject key identifier: 9C:09:07:0A:3D:33:0A:8B:9C:E9:A1:AA:3E:36:A6:9D:56:29:79:B0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 498BBEA65BB6528E2C95722EA98C17B08A4EF600
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 25 May 2026 17:24:34 +0000
ROA not before: Mon 25 May 2026 17:19:34 +0000
ROA not after: Mon 24 May 2027 17:24:34 +0000
asID: 47583
IP address blocks: 85.31.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8b:be:a6:5b:b6:52:8e:2c:95:72:2e:a9:8c:17:b0:8a:4e:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 25 17:19:34 2026 GMT
Not After : May 24 17:24:34 2027 GMT
Subject: CN=9C09070A3D330A8B9CE9A1AA3E36A69D562979B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f7:c8:c8:8c:24:c3:6f:82:dc:cb:27:51:e1:
a5:db:88:2c:98:63:b3:f1:74:10:9f:69:da:22:1b:
98:e1:f2:e8:ed:d0:72:ea:88:53:1c:97:1e:a4:c7:
78:40:ee:2a:58:10:14:f8:7e:6e:ce:34:9c:b3:f4:
ef:b1:70:6b:7a:53:88:b2:14:df:c4:fc:d8:d1:f1:
1a:0e:32:37:8d:7f:aa:16:70:96:6f:42:b7:a1:d7:
e8:7e:fb:bd:ca:46:39:da:63:df:92:99:b3:53:3a:
8d:37:f0:08:26:86:4d:57:9b:24:06:29:4b:7a:a4:
75:5d:98:e9:37:91:28:ba:d3:c7:6c:27:68:cf:e3:
26:a6:2b:59:a7:59:51:9a:a4:df:c5:bd:9e:83:56:
1c:ad:fd:a5:70:80:a4:56:f8:73:8a:56:70:c0:eb:
4c:1a:32:12:b0:be:1b:fb:46:61:ae:09:ac:77:44:
31:71:35:ad:54:51:2d:21:78:75:be:b7:e9:c6:ca:
b4:af:8f:f6:d2:88:f6:6f:2e:5d:17:6d:79:85:c5:
d7:b1:82:f6:0f:fb:bf:0e:18:06:86:4f:22:51:59:
ea:d6:eb:73:4a:d1:d4:62:b2:72:c1:3b:61:19:9b:
58:5e:31:dd:b6:cb:27:c7:cc:5b:e5:7e:25:2a:32:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:07:0A:3D:33:0A:8B:9C:E9:A1:AA:3E:36:A6:9D:56:29:79:B0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.224.0/22
Signature Algorithm: sha256WithRSAEncryption
01:8b:20:46:f8:29:ef:87:f9:2b:4a:a5:8d:af:3f:d9:f2:64:
c7:fa:20:0d:a4:1a:23:8a:83:19:ad:d5:73:b9:d3:1c:df:9f:
f5:35:c3:e1:20:7e:07:ad:b6:86:0e:7b:1c:ce:46:16:9b:22:
a0:be:65:a8:cc:72:d6:04:be:7b:30:7f:e6:0f:a3:15:79:41:
68:a0:92:0f:fe:ae:40:41:4d:c2:78:c8:23:9e:70:f8:ad:ae:
26:57:da:3d:51:4f:f9:de:46:a5:5a:61:c9:ce:21:ad:49:19:
6f:09:88:25:c6:a4:66:83:71:41:37:5f:9e:9b:1f:4d:7f:48:
08:b4:b3:4b:09:03:32:f0:80:dd:eb:56:fd:b5:09:c0:98:f0:
ec:d3:3e:08:e3:39:56:57:2c:02:ed:54:a5:03:00:34:21:d6:
93:9c:22:8c:5a:cd:a6:23:c3:37:b1:89:29:57:9b:38:58:ef:
9b:68:0e:ea:47:68:16:77:26:cf:ec:08:f2:9a:42:62:94:ff:
21:fd:94:43:68:6a:96:14:f0:96:6d:be:60:ff:71:ef:6a:35:
cc:2e:7f:2a:e2:f4:84:f9:af:08:73:e0:e6:1a:49:f5:f0:68:
95:9c:4d:0c:39:2e:06:6c:1a:d4:6c:d7:81:e9:70:7e:86:21:
18:c0:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:46 2026 by rpki-client