Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: pyo9m6bAF9rlBvu12Hg9uTHgwUuIlRr6AmlDzsFlyKI=
Subject key identifier: 11:28:B8:C0:FE:69:47:6A:94:33:FC:9E:31:75:CC:BA:96:89:75:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E2BF7E60E32D98E45E2DD45116B7C8206D6051F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 22 May 2026 08:24:24 +0000
ROA not before: Fri 22 May 2026 08:19:24 +0000
ROA not after: Fri 21 May 2027 08:24:24 +0000
asID: 47583
IP address blocks: 85.31.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2b:f7:e6:0e:32:d9:8e:45:e2:dd:45:11:6b:7c:82:06:d6:05:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 22 08:19:24 2026 GMT
Not After : May 21 08:24:24 2027 GMT
Subject: CN=1128B8C0FE69476A9433FC9E3175CCBA968975FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:e7:90:aa:c4:cb:7c:d1:38:53:ba:83:14:
13:5f:a0:f6:f9:e3:56:46:d6:c0:d4:68:2e:ee:43:
f9:98:2f:43:dc:f6:4e:5c:32:89:e4:75:ae:31:79:
a3:c1:cb:41:a6:57:e1:df:a3:22:78:2c:4a:2f:ca:
b8:bf:d1:19:77:e6:eb:dc:5c:df:32:a2:59:b2:3c:
51:11:4a:36:a9:36:2d:de:be:c6:ca:1c:9f:ad:67:
fe:52:17:a3:bc:a6:cc:5d:b4:91:25:7f:d3:8c:c3:
ff:ee:da:ac:46:00:c9:70:27:98:e9:91:a7:86:0b:
6b:e3:03:46:08:df:82:fd:29:f7:45:ba:16:30:41:
1c:b2:1f:72:e4:66:5a:ad:82:f0:42:6d:b2:e7:b1:
7a:54:ac:1f:6b:94:51:af:5a:dd:25:dc:9e:25:a7:
ef:c2:72:26:f4:65:46:d8:8c:65:c8:c6:9f:f9:67:
a6:39:7f:10:41:86:31:ef:d7:32:23:f2:41:b5:a0:
b1:90:3d:73:a4:8b:60:a6:c7:c1:54:4e:78:71:a4:
ed:31:97:f3:5c:0d:ad:6d:fb:97:62:72:d5:4d:37:
be:52:cb:41:cb:97:09:0b:0f:6e:91:08:53:f5:5a:
7a:af:c3:e5:25:73:b2:e3:c4:00:b5:f2:5b:62:42:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:B8:C0:FE:69:47:6A:94:33:FC:9E:31:75:CC:BA:96:89:75:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.228.0/22
Signature Algorithm: sha256WithRSAEncryption
56:44:22:2e:8f:6a:54:cb:1a:55:ea:8e:22:42:84:72:a2:cb:
ff:27:d0:c4:2f:25:93:06:e5:1a:31:2f:ea:4f:07:57:44:a3:
7d:0a:32:0e:82:7b:0e:1a:db:97:bf:70:c6:46:07:0a:74:ed:
7a:e2:c4:90:f0:01:2c:82:4b:77:d1:65:4c:3e:33:79:23:a1:
43:66:3b:c8:92:77:eb:46:59:5b:2c:d3:6b:58:25:51:b9:a1:
f1:d7:e1:92:2d:61:e1:7d:1e:99:6b:65:b1:bf:59:28:7a:f4:
1d:37:f5:bc:1d:81:87:ee:aa:58:ea:0b:13:43:64:0e:ae:91:
f8:ba:82:b6:25:72:1d:68:25:09:7a:43:06:7b:49:ce:9b:d7:
93:dc:a3:5c:47:5b:85:69:74:2c:6d:92:93:6a:84:05:a2:ed:
b1:bb:1c:e1:b0:6a:9b:22:ea:1f:c9:a9:ce:a1:51:cb:18:68:
ac:63:54:89:d1:16:77:35:54:87:37:ae:08:9d:b6:5e:e6:1c:
3f:b8:e3:86:d3:9b:98:ea:c3:ca:b7:06:46:8e:30:fc:88:1e:
1f:48:5d:97:b1:ee:18:e7:c1:a1:b6:ef:46:f9:6d:63:e3:fe:
08:5f:47:f7:09:40:63:0e:bd:1e:7f:67:a6:da:3c:e6:ab:6b:
d0:80:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:18:25 2026 by rpki-client