Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e203539323533.roa
File: 38382e3231382e3230302e302f32342d3234203d3e203539323533.roa (raw, json)
Hash identifier: sLxiJI+mWTDtNZo/6e3lQB+bsplXO8Ej3louD8f0RAs=
Subject key identifier: BD:4E:A2:62:E6:85:45:C3:A9:EB:0C:0B:18:3E:EF:3B:06:69:D5:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34C447D32C64B4A7B63E710B30F61BFF39FA5952
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e203539323533.roa
Signing time: Wed 29 Jul 2026 22:27:17 +0000
ROA not before: Wed 29 Jul 2026 22:22:17 +0000
ROA not after: Wed 28 Jul 2027 22:27:17 +0000
asID: 59253
IP address blocks: 88.218.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c4:47:d3:2c:64:b4:a7:b6:3e:71:0b:30:f6:1b:ff:39:fa:59:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 22:22:17 2026 GMT
Not After : Jul 28 22:27:17 2027 GMT
Subject: CN=BD4EA262E68545C3A9EB0C0B183EEF3B0669D518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:c5:bf:f3:03:f8:ef:03:bc:80:88:3d:ff:
00:aa:ae:a3:66:bf:60:b7:23:a6:eb:88:f2:2e:71:
c7:bd:68:4e:f0:6c:a3:52:02:2e:c6:52:46:1b:58:
d4:16:b8:e1:38:af:c1:42:de:cb:6f:63:52:20:8b:
39:0b:7c:52:2f:b8:a8:ea:90:53:82:be:df:e6:d0:
4a:41:f0:98:c8:49:48:33:19:61:35:1a:68:7a:d7:
85:b2:b7:c6:04:15:cb:2f:e6:75:cb:99:db:12:2b:
97:86:70:90:c9:f8:0b:65:ec:06:20:ac:83:74:f8:
7b:0c:db:a3:81:eb:02:06:36:1a:43:ec:68:be:4d:
bc:54:84:43:1f:13:40:1e:32:69:5d:1e:57:72:48:
0f:8e:d6:f7:70:92:3e:72:07:d7:b7:f2:c4:87:6b:
82:7d:9f:ca:de:55:78:d3:99:6a:04:ad:97:cf:fa:
e0:49:fa:3a:41:22:a8:9d:ad:b5:2e:b5:c5:72:03:
59:51:a7:f5:4f:06:f7:c5:a4:8a:1b:0c:7b:8c:95:
94:bf:9d:13:21:b0:39:2f:f6:7e:c9:65:ef:20:21:
05:37:40:b5:3d:a8:75:14:f0:6b:35:b6:2d:2c:68:
5b:21:7f:ab:fc:a2:ed:f2:b7:f6:7e:87:46:d2:61:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:A2:62:E6:85:45:C3:A9:EB:0C:0B:18:3E:EF:3B:06:69:D5:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e203539323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c4:14:1d:fb:a1:0d:98:47:56:f0:c7:61:19:b9:39:3e:82:
22:7b:a7:da:bd:65:3c:2f:d1:76:c4:1b:5e:da:d3:5d:f8:9a:
e4:d7:39:82:a7:81:d6:5b:fb:40:84:20:7e:08:ad:a8:4e:3e:
29:fe:f9:5b:bd:fe:29:67:31:7f:5c:34:f8:89:52:04:68:73:
e0:9e:c9:8c:20:81:4e:0c:14:93:e2:b4:c3:09:5b:d9:42:a5:
d5:49:39:d4:21:48:df:f4:a6:92:07:4a:a6:67:86:f9:20:7a:
d8:a7:5c:ee:02:f1:cd:b5:95:dc:f6:22:e0:be:69:e6:f2:fb:
4f:db:97:4c:91:33:0c:af:d5:9e:1f:f3:f8:a2:16:bc:6f:3a:
c3:04:de:21:d1:52:91:d5:29:c5:51:dd:b2:3c:71:cf:55:81:
af:37:21:71:e9:e8:f1:0d:22:c4:af:b4:eb:b2:30:51:92:3e:
45:c9:16:5f:ea:e9:47:32:b4:c2:bc:09:bd:7e:7f:0f:5d:0e:
6d:08:6a:43:3d:c6:ca:29:1e:46:42:06:28:7f:e6:27:42:21:
e5:73:f5:bb:e8:09:17:38:08:23:fd:90:60:61:81:cd:3d:a2:
7c:ad:79:de:66:72:59:b1:7e:81:12:09:c1:a7:b8:43:b4:48:
e2:44:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:38 2026 by rpki-client