Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e32382e302f32342d3234203d3e20313336373837.roa
File: 38362e36322e32382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: sUB0Z4QJ0q9FITeWLgH5HrX2gVs5yljggzm2ptRP5zM=
Subject key identifier: 1F:75:0F:09:88:3C:9E:11:9C:5D:2C:74:19:BB:83:36:43:6D:86:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46A005EDB7DFE0D57C0FA0D26F08B02D05C8A379
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e32382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 31 Aug 2026 10:28:27 +0000
ROA not before: Mon 31 Aug 2026 10:23:27 +0000
ROA not after: Mon 30 Aug 2027 10:28:27 +0000
asID: 136787
IP address blocks: 86.62.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a0:05:ed:b7:df:e0:d5:7c:0f:a0:d2:6f:08:b0:2d:05:c8:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 10:23:27 2026 GMT
Not After : Aug 30 10:28:27 2027 GMT
Subject: CN=1F750F09883C9E119C5D2C7419BB8336436D8683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:0d:a4:0b:93:41:f1:12:02:e3:88:2b:14:
de:15:62:49:94:63:c8:de:02:1b:fc:04:76:46:88:
44:d8:f5:42:78:69:e1:ee:c5:6d:84:0e:ed:d9:af:
c8:c1:7a:90:3d:e8:06:d6:3a:60:81:6c:05:e9:1d:
48:8d:7e:70:90:9b:2f:20:ca:b1:40:89:de:2b:5b:
b3:54:b2:ad:0f:e8:72:53:c1:cb:39:8c:a1:3f:0c:
f6:c4:d6:d2:8f:f1:81:f5:65:33:40:60:9d:5c:e9:
7a:df:9c:fe:83:5a:a7:c4:d0:19:3c:7f:ca:c4:85:
27:58:7d:95:6e:8c:c9:ea:2a:79:f2:65:a4:f1:c3:
6f:c3:18:fe:81:14:26:db:69:3e:7f:5d:ba:e8:da:
eb:f8:1d:66:1c:01:6d:8b:a5:8c:0d:ab:3a:5c:64:
9a:95:bc:55:a8:fb:48:b9:32:e8:db:dd:f6:3e:3f:
1b:45:1b:59:e9:6a:43:55:af:d9:fd:7b:ad:b6:80:
c6:62:53:02:c7:4e:59:c0:ca:af:a9:62:de:68:90:
69:40:89:75:65:dc:61:c5:30:55:10:ea:ce:fb:3e:
76:03:ef:54:a4:5d:7d:ae:63:5f:ca:b6:44:35:91:
97:fb:11:9b:f8:d9:2c:48:da:cf:06:2f:21:41:db:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:75:0F:09:88:3C:9E:11:9C:5D:2C:74:19:BB:83:36:43:6D:86:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e32382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.28.0/24
Signature Algorithm: sha256WithRSAEncryption
57:72:5d:5e:78:59:2a:71:6a:f4:2a:bc:0e:a0:5e:13:3e:98:
d8:38:72:e9:a0:9e:94:08:81:45:c3:99:9e:8c:28:bd:2d:20:
53:42:89:16:cf:13:0f:ac:93:fa:1d:e2:0d:9d:a8:21:49:18:
87:56:0a:df:60:cd:bf:79:2a:be:5f:a9:04:ef:3d:b8:f2:3d:
6d:a3:11:f8:4d:69:38:e9:85:9b:cd:0e:46:53:fd:3e:77:53:
eb:7f:11:c6:99:9f:9e:98:3f:12:47:6d:41:c0:36:1e:25:03:
e8:86:38:8f:64:15:5a:4b:3e:5d:f4:07:92:d9:16:1d:99:9e:
0c:b6:de:82:53:c6:7b:42:05:c6:48:bf:c8:07:92:8b:01:d3:
de:21:5c:b7:1d:ac:3d:e5:64:a1:46:5a:1f:93:ed:b9:a5:2a:
f8:9d:4e:fa:7c:67:16:2d:a1:17:2b:24:8a:0d:e4:53:5b:5a:
29:87:42:ed:1f:83:7d:e6:ec:1c:98:dc:eb:92:c7:87:54:62:
32:d7:7e:b9:b1:a7:52:d5:18:ae:64:2e:87:79:27:d1:dd:6c:
cd:56:89:e3:d0:de:51:e1:66:6f:77:cc:72:f2:a5:4c:81:1f:
af:8d:b2:3d:4b:77:15:e2:bb:52:fb:75:e6:fa:4c:0b:9f:cb:
ca:e2:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:09:57 2026 by rpki-client