Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230322e302f32342d3234203d3e20313336373837.roa
File: 38382e3231382e3230322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Cc7TadqZcpVLdgiqzTw7zm7hoNEMWF7zRQHXtTFVQlQ=
Subject key identifier: 97:48:96:84:04:FB:8B:FE:7D:A5:12:AA:BF:3E:DF:7B:27:31:53:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39778A1C97B07B4FC083D80EAB73974B540EB219
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230322e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 18 Oct 2026 19:29:54 +0000
ROA not before: Sun 18 Oct 2026 19:24:54 +0000
ROA not after: Sun 17 Oct 2027 19:29:54 +0000
asID: 136787
IP address blocks: 88.218.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:77:8a:1c:97:b0:7b:4f:c0:83:d8:0e:ab:73:97:4b:54:0e:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 18 19:24:54 2026 GMT
Not After : Oct 17 19:29:54 2027 GMT
Subject: CN=9748968404FB8BFE7DA512AABF3EDF7B273153A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:30:a8:87:d0:a7:2c:3e:11:6a:0c:dd:b9:7d:
16:c9:c7:ac:02:3c:82:3d:63:b0:8e:d3:c0:2e:45:
ba:d2:63:8b:d5:d4:5a:d2:1a:f5:a9:dd:81:2e:29:
b9:f8:0c:f4:a6:86:54:76:4a:d0:95:b6:38:ef:5a:
6d:13:b6:60:c2:72:08:02:ca:4a:45:16:7c:c3:10:
91:1a:10:07:84:54:9e:51:2d:d9:c8:c0:e0:a7:b3:
d7:df:ca:41:16:7c:a2:c4:ca:38:ca:32:fe:98:80:
1b:e9:d0:06:81:1e:6f:d4:f8:b8:fd:b9:46:f8:d8:
90:7b:37:5d:a1:1f:f4:4e:63:0a:08:44:40:ea:7e:
cb:cc:df:cf:88:30:33:bc:03:84:1e:8c:1a:ea:e7:
b5:60:f7:ef:e4:4a:41:0a:95:29:89:ae:2c:4e:a6:
e7:b9:c2:a6:4f:04:a9:70:f8:46:a1:d5:9a:d5:66:
2c:51:30:35:b1:1a:76:25:1a:49:17:6c:93:70:46:
89:ef:b9:2e:6c:ae:d5:95:e2:52:0e:d2:a9:38:ef:
dd:bf:84:99:73:27:5a:8b:c9:13:70:0e:81:e1:55:
cb:71:83:14:25:9a:5f:91:11:ce:c9:e3:08:08:9f:
8f:8e:c1:c9:7e:70:3a:75:75:5c:4d:08:7d:1d:fe:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:96:84:04:FB:8B:FE:7D:A5:12:AA:BF:3E:DF:7B:27:31:53:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.202.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7a:16:19:5e:61:d9:c2:b7:77:7f:7e:6f:be:5c:41:a2:3d:
ce:4b:39:3b:60:ac:c9:14:2d:d9:ab:68:40:87:98:52:41:1b:
2d:c8:d7:7b:b6:85:fe:0b:2b:65:ce:d0:0e:13:b7:1b:af:4a:
d1:2f:99:35:38:43:63:fb:76:cc:75:cf:77:3d:7c:81:ef:2b:
b4:62:cc:f3:fe:5d:7b:0b:62:de:fd:b2:c5:1a:64:5e:37:1f:
e8:57:30:f8:71:65:23:57:9d:1d:d2:72:e4:66:2a:51:cc:22:
15:e4:d0:a2:69:77:b5:bd:6c:9a:18:d8:85:12:a4:fc:30:b6:
83:88:ab:69:67:82:fe:74:c0:a6:3f:9d:62:61:12:d2:a0:b2:
31:1d:34:e4:28:31:41:24:a0:18:31:6c:3c:4e:5d:43:e0:b5:
a0:c0:85:cd:5e:4e:3d:f2:c3:5a:b1:2d:21:67:0c:ea:6d:ff:
44:0c:cd:b2:26:96:9e:67:be:08:4c:98:d5:25:4c:42:db:5d:
e2:65:05:0f:fa:08:1c:d8:e0:b9:0a:71:b5:af:74:6a:18:5e:
bd:e1:4c:64:58:bb:33:1d:50:60:0b:53:f7:1c:8f:3d:ab:1c:
cd:0a:02:9f:09:5a:4a:73:b7:2f:ab:9d:f8:15:8f:53:b5:d7:
ed:73:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:47:09 2026 by rpki-client