Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
File: 38322e3131322e3234302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: RGgI/Fi4Ozos49rkKHkIf6ZAz8n2NIcwRnPhGCzgl8U=
Subject key identifier: 48:99:3A:68:5D:58:09:45:CE:AB:FA:A6:A7:43:ED:AA:74:ED:64:7B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10EFED33CCE0C44D5F0E76DA17D7E563E2608B7A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
Signing time: Wed 29 Apr 2026 21:23:57 +0000
ROA not before: Wed 29 Apr 2026 21:18:57 +0000
ROA not after: Wed 28 Apr 2027 21:23:57 +0000
asID: 47583
IP address blocks: 82.112.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ef:ed:33:cc:e0:c4:4d:5f:0e:76:da:17:d7:e5:63:e2:60:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 29 21:18:57 2026 GMT
Not After : Apr 28 21:23:57 2027 GMT
Subject: CN=48993A685D580945CEABFAA6A743EDAA74ED647B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:38:1d:ed:9f:f7:ef:c2:c6:12:e9:0b:e3:
c4:20:e3:e3:30:76:0e:22:9c:4c:51:4b:b7:27:74:
bf:83:01:a4:04:21:1b:de:33:c1:39:ae:2b:35:79:
5a:a2:f7:13:f0:12:4f:5e:02:e7:a3:af:ab:33:e8:
ee:58:6a:40:c0:f4:54:b0:c7:17:82:1a:c8:5c:91:
f1:b8:e8:e2:00:74:77:09:78:79:65:95:78:ce:20:
f0:9d:de:48:f5:ce:c2:c7:04:a3:60:03:eb:6c:8a:
4f:c5:e7:43:25:d3:8e:1e:9c:68:fa:f2:56:9f:43:
94:7b:7c:2e:82:46:a9:0a:a2:a1:b0:63:b6:fd:e8:
56:bc:10:85:1c:98:de:5b:ba:08:8e:96:b0:d3:3e:
06:74:92:e5:a7:ac:65:ca:2f:fa:bf:73:eb:a7:4c:
11:f2:12:f1:fe:4a:96:8c:52:c6:22:e5:ac:b9:8b:
6e:86:61:31:11:02:f0:8b:43:05:88:c4:8e:9a:48:
6d:d5:a9:0c:39:70:56:7f:6b:6f:72:69:4b:76:49:
72:7e:f9:7e:d6:ef:fe:b7:a3:2d:36:25:9a:e2:10:
76:c9:98:5a:c7:a2:2b:74:32:b7:88:ad:15:82:49:
8f:d1:23:d3:3e:13:67:6c:f8:22:3d:34:35:81:ab:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:99:3A:68:5D:58:09:45:CE:AB:FA:A6:A7:43:ED:AA:74:ED:64:7B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:9a:71:1f:bc:3d:12:37:31:39:3a:e3:8a:a1:6f:f5:d7:16:
ad:73:4d:0f:83:03:6c:6a:fa:7b:6a:08:ad:f8:9f:8c:ac:a6:
f9:0f:ba:6a:31:5f:47:39:0a:85:66:50:1f:36:9e:c3:96:a5:
67:32:2c:ba:e8:e5:d2:22:10:85:08:cf:fa:7a:bc:30:ae:0f:
66:b5:af:27:9c:67:16:b6:2e:a1:83:39:be:19:1e:e6:c3:df:
e2:89:1d:5f:fa:79:7f:37:10:fc:0b:20:40:20:a2:45:51:54:
09:8a:28:90:5b:4b:76:5e:32:04:80:e8:b4:61:90:bf:19:6c:
14:50:7e:fb:43:24:e5:6b:64:5c:f1:d9:ef:7f:36:18:3a:b1:
10:1a:d4:c0:63:a8:7c:9c:37:8f:24:c5:4e:07:e3:69:d6:56:
0c:6e:74:09:3d:00:e2:cc:33:13:e6:ba:e2:60:eb:80:32:36:
28:17:b7:0b:a3:23:ad:e5:8f:cf:86:d2:46:cd:48:00:9d:02:
f6:37:aa:c0:78:01:1d:45:3f:89:96:6e:92:6a:08:10:aa:db:
96:34:01:ae:cc:ff:2e:49:67:9c:af:07:54:89:53:07:18:17:
07:17:f3:f5:c3:a9:69:76:57:12:a9:fa:59:d9:b5:72:2e:36:
5a:4b:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:49:26 2026 by rpki-client