Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3232342e302f32302d3234203d3e203437353833.roa
File: 38322e3131322e3232342e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: bDkdIxFGcHTY029PQos+aq7WTzIRc4YTO3orQJKJzj8=
Subject key identifier: 9F:50:08:04:06:C5:6A:43:77:E0:B1:DE:6D:61:AE:73:A7:D8:89:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EAE139DBCD9A34EC23D710C798E78E7F80A9CF3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3232342e302f32302d3234203d3e203437353833.roa
Signing time: Thu 23 Apr 2026 17:23:52 +0000
ROA not before: Thu 23 Apr 2026 17:18:52 +0000
ROA not after: Thu 22 Apr 2027 17:23:52 +0000
asID: 47583
IP address blocks: 82.112.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ae:13:9d:bc:d9:a3:4e:c2:3d:71:0c:79:8e:78:e7:f8:0a:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 23 17:18:52 2026 GMT
Not After : Apr 22 17:23:52 2027 GMT
Subject: CN=9F50080406C56A4377E0B1DE6D61AE73A7D88918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:a1:30:dc:ab:6d:2e:c6:40:44:80:c6:9c:
ea:9e:d1:fd:d4:7f:63:96:81:e8:46:2a:79:7a:43:
a9:06:9e:ec:03:8d:80:d4:7a:65:d3:ee:26:eb:19:
a5:f3:41:b2:1c:55:df:4a:a0:20:1d:53:fc:4f:33:
e2:d4:1c:3a:1b:43:1f:d5:50:2a:cb:26:92:34:09:
a0:56:ec:0b:99:90:3e:ea:b9:eb:e0:50:eb:c3:8a:
a7:8f:e2:db:99:14:bf:f8:5a:f9:f4:56:5b:2a:a2:
2d:8c:33:f5:f6:07:95:21:35:be:04:76:36:55:07:
a0:ed:c6:00:40:86:39:cd:2e:f1:bd:74:21:e5:23:
f3:93:70:c3:01:ca:59:c5:3f:69:ed:97:03:8c:a5:
68:4f:dc:77:e6:17:f4:ce:d5:00:b9:6e:64:fb:fa:
7b:26:17:03:80:d6:39:c2:6b:b2:52:74:15:25:95:
15:2f:a5:c1:25:fe:cf:e2:7f:fe:84:08:52:ac:74:
80:b2:50:e0:7f:7f:0b:28:3a:4b:5d:64:8f:2f:54:
43:e5:79:d9:0f:b7:b0:01:53:5a:6b:da:98:f4:6f:
78:08:a7:cb:74:e9:a0:03:14:56:9e:9a:eb:29:6c:
ba:fe:f6:7e:25:8d:4e:b4:40:86:cd:d7:65:3c:db:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:08:04:06:C5:6A:43:77:E0:B1:DE:6D:61:AE:73:A7:D8:89:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3232342e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:cc:da:8f:a1:5d:18:65:e3:fd:68:73:b9:c2:80:1a:7f:91:
4f:60:78:5f:59:4b:a7:31:30:35:ee:c8:64:a8:ab:9c:97:d7:
26:af:5c:6c:ab:41:7a:d0:d0:22:85:7a:19:f8:fe:42:16:4d:
b3:6d:dd:f7:54:14:fe:b5:ee:6d:2c:5c:29:0a:ce:a4:bb:2e:
c9:04:d3:58:c8:ee:1e:5f:c2:1b:7e:83:c6:23:1d:74:2d:81:
2b:03:83:a9:b1:5a:ae:fa:51:a3:f3:e3:2a:39:75:48:ad:87:
6a:df:18:e6:ad:4a:00:30:e3:2a:00:0e:dd:20:27:f0:87:ca:
35:0f:92:87:ef:4a:1a:62:7a:af:00:7c:e8:33:8d:22:cb:22:
00:7a:fe:9a:e6:96:42:db:bc:fb:be:e3:41:9f:38:ac:6e:a5:
c1:29:65:05:7d:9f:b7:59:0a:d1:f7:92:7f:e0:b6:91:81:7a:
2a:f6:54:dc:d8:2f:65:71:c1:04:da:a0:a3:97:bd:bd:c5:ca:
a1:6f:29:4c:01:c6:36:b1:2e:5d:cf:0e:ad:ec:2e:a5:43:f7:
cb:70:70:93:61:b3:cc:9c:86:08:e5:b7:66:ed:19:93:54:53:
00:5b:e4:bd:1c:3c:e4:ce:9d:73:05:38:dc:70:60:11:d2:90:
82:5a:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:18 2026 by rpki-client