Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e39322e3130342e302f32342d3234203d3e20323136323533.roa
File: 38352e39322e3130342e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: m69GgMW8PnLB6NQwPhzVQMZQFAzd6fzBCpMAUTywPE4=
Subject key identifier: C0:44:6B:01:D9:43:CC:82:0B:D9:FC:2B:08:78:80:35:E1:62:85:9A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 478D1A35C7767FDB4BC850AB00F3DE032D2D848F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e39322e3130342e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:34 +0000
ROA not before: Fri 16 Oct 2026 18:44:34 +0000
ROA not after: Fri 15 Oct 2027 18:49:34 +0000
asID: 216253
IP address blocks: 85.92.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8d:1a:35:c7:76:7f:db:4b:c8:50:ab:00:f3:de:03:2d:2d:84:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:34 2026 GMT
Not After : Oct 15 18:49:34 2027 GMT
Subject: CN=C0446B01D943CC820BD9FC2B08788035E162859A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:82:9a:12:0f:e7:1c:7b:a5:ed:8a:a4:d1:
24:7c:67:3d:3a:00:05:2d:22:f0:31:ae:5e:b5:a4:
21:85:71:f4:3b:eb:43:f6:6e:62:cc:05:1b:d9:bd:
06:87:d2:79:f6:ef:79:c1:b8:55:3d:e7:08:c1:ec:
0c:65:0c:b9:30:c7:90:4a:cd:00:1c:86:cf:0f:ba:
f2:d3:77:28:54:26:30:ff:7c:de:7c:01:f7:52:35:
b9:b1:f7:92:12:da:2d:9e:86:70:ac:45:d7:fb:d6:
62:8b:2e:2f:08:af:3a:cd:93:06:be:98:6f:a8:8f:
ca:41:ee:7d:86:61:27:d3:1a:29:0a:5a:1f:66:da:
d9:cc:78:18:25:7c:95:0c:58:be:f3:5b:6e:d3:2e:
29:12:d7:fd:8b:60:fd:9d:6a:48:f1:31:93:85:f5:
76:5e:e3:90:23:31:07:32:66:93:8f:23:4b:17:7a:
8b:ae:91:ef:6a:1d:5b:0a:9b:11:93:cb:33:ce:59:
9b:74:df:d9:8d:b7:db:4c:61:c4:77:59:13:86:ea:
47:05:c0:9e:04:9d:50:8b:12:81:25:3a:64:bb:df:
78:8f:38:27:d4:75:f8:04:a5:1e:f1:61:46:66:c1:
1b:02:fc:3b:5d:22:f1:62:96:5f:6b:1b:fe:40:6d:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:6B:01:D9:43:CC:82:0B:D9:FC:2B:08:78:80:35:E1:62:85:9A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e39322e3130342e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.104.0/24
Signature Algorithm: sha256WithRSAEncryption
74:12:c8:d9:f8:a4:c1:1e:5e:83:a9:b3:4c:91:46:ab:43:3a:
d1:6b:19:67:4e:03:eb:5f:9a:82:de:ea:de:a1:10:1a:5a:ee:
4b:5b:bf:85:8c:f1:48:36:cc:a2:3d:c7:f2:a1:5d:e1:c7:91:
4e:b7:ad:d8:03:98:30:a9:55:32:a7:93:bc:7a:5e:e8:9b:da:
97:ad:72:73:54:42:47:08:62:02:91:03:8f:46:ba:62:22:8c:
95:b2:63:da:e0:ca:bc:4e:45:95:7e:18:f3:05:f4:29:d9:fe:
3a:34:c3:e5:f9:6d:4d:f5:03:90:e1:44:74:a7:11:07:39:35:
9b:4f:00:d4:af:5c:2d:e0:90:78:d6:70:c2:c7:d3:98:46:78:
06:ba:47:a0:6a:85:d8:f4:e7:f0:65:2a:ee:c2:f0:a5:da:95:
69:78:50:8e:52:10:5f:03:b2:3b:32:32:b6:43:85:42:3c:fb:
b9:27:64:f2:cb:d3:1d:f1:20:10:a2:dc:8e:fd:07:b0:fc:3d:
8e:3d:45:8a:76:c1:40:64:27:a4:62:d5:f8:8d:56:e7:de:d2:
50:b9:5e:50:fb:8b:9e:7e:98:36:d4:17:74:ef:2b:7a:6c:34:
d4:d2:4b:27:94:0f:ee:62:73:bd:c3:e4:53:1e:a8:94:6b:00:
e5:67:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:23 2026 by rpki-client