Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203531313637.roa
File: 38302e3139302e38302e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: CahG5zoh+mPIAdbgXqSrdMvBNCEFEeXZQNzYb5u8m+8=
Subject key identifier: 2B:55:E8:AE:86:D8:04:19:1D:03:E8:11:5F:8F:36:7B:D7:96:9A:CE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5764D58EBEB5DC47A34CA25D78447437CF97998C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203531313637.roa
Signing time: Wed 22 Apr 2026 12:23:50 +0000
ROA not before: Wed 22 Apr 2026 12:18:50 +0000
ROA not after: Wed 21 Apr 2027 12:23:50 +0000
asID: 51167
IP address blocks: 80.190.80.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:64:d5:8e:be:b5:dc:47:a3:4c:a2:5d:78:44:74:37:cf:97:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 22 12:18:50 2026 GMT
Not After : Apr 21 12:23:50 2027 GMT
Subject: CN=2B55E8AE86D804191D03E8115F8F367BD7969ACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:46:bd:ce:e7:01:80:64:3f:39:fc:54:6b:
0c:80:51:d6:67:c9:1c:a4:bd:ab:79:4f:f3:8e:c5:
eb:26:ec:44:54:67:92:c1:92:27:10:6f:e1:ca:a3:
36:c9:0d:84:55:ce:9b:9b:9c:c1:81:7f:f1:09:6c:
83:c6:65:63:e8:9b:e6:42:15:81:8f:4a:e7:62:2e:
ff:18:7b:85:6e:e5:05:47:be:45:1d:75:7f:26:87:
b5:c9:2e:c1:0d:7c:85:eb:a5:01:af:ac:28:22:c0:
85:99:82:20:0c:f6:58:e3:b5:82:1f:3c:d9:65:75:
0d:06:92:23:eb:61:f4:da:ce:30:5c:00:e1:51:83:
2c:1e:b1:f0:4c:15:a4:fb:7b:de:27:f8:6a:fa:d7:
bb:72:ad:ba:39:db:d7:48:a0:73:40:8b:42:77:ce:
78:1c:04:1a:c4:f7:18:67:ff:59:5b:91:ed:30:98:
0d:2b:87:8d:78:e8:4d:2f:92:fd:50:0d:bb:06:d8:
c5:ca:fd:cc:3c:b2:65:00:b4:b7:4c:0c:a9:64:cf:
27:15:b7:69:2b:15:41:84:8e:16:44:13:4f:b6:61:
ba:19:67:1e:c1:28:df:c5:2e:bc:72:ce:04:14:f6:
ba:da:b2:0c:2d:35:c3:80:04:c7:25:09:74:ae:98:
58:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:E8:AE:86:D8:04:19:1D:03:E8:11:5F:8F:36:7B:D7:96:9A:CE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
90:a4:38:61:49:df:4d:9d:b1:77:20:72:58:9a:8a:c1:9b:af:
1a:e9:4c:80:b9:30:53:9d:d5:9f:df:03:d0:32:09:a1:1f:1c:
fe:3f:6f:6c:65:af:b7:59:34:d2:f6:c2:99:69:27:28:79:ed:
53:c4:31:f7:49:8d:70:7c:c4:ff:85:f7:28:1b:e0:f2:d9:dd:
d0:03:5f:fa:0f:36:80:54:c5:bb:9f:f5:c3:82:bf:53:4e:38:
5b:54:39:8f:7d:11:43:62:08:ee:87:2d:b1:e0:1f:cf:16:34:
ae:5e:0a:29:5e:7f:cb:cd:03:ea:31:67:61:ef:56:98:4a:d1:
06:06:63:3d:4f:18:90:b4:96:be:59:23:1c:34:9e:5f:27:db:
9a:a5:25:5c:e8:67:a5:f0:cc:e0:55:f5:f5:40:18:6a:68:e2:
3a:c3:b8:aa:9d:7f:e2:c7:9f:28:71:57:5a:c7:27:d2:1e:8c:
89:b5:fa:a3:e2:5c:8f:ea:2b:8a:6e:a4:e7:7b:30:5e:cc:6a:
e2:aa:88:04:8a:4e:d7:be:48:51:96:32:d5:68:5a:e7:e1:71:
af:e3:28:33:f4:dc:dd:ff:41:6f:da:c0:7c:31:72:89:ca:de:
a9:81:d3:3d:ca:5a:8e:66:ee:31:22:37:19:1a:cb:18:f6:36:
25:47:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:57 2026 by rpki-client