Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234382e302f32322d3234203d3e203437353833.roa
File: 38322e3131322e3234382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5MCP6jAGFApeaepD1o/4XF71S66D1C4QGnu51OCj4nU=
Subject key identifier: F1:25:29:C0:2C:94:19:48:DE:68:96:66:91:1F:79:C4:72:E3:A2:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1F859A3BA27FF987EF5F4912BAB885BE5A6AECD2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234382e302f32322d3234203d3e203437353833.roa
Signing time: Thu 07 May 2026 17:24:05 +0000
ROA not before: Thu 07 May 2026 17:19:05 +0000
ROA not after: Thu 06 May 2027 17:24:05 +0000
asID: 47583
IP address blocks: 82.112.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:85:9a:3b:a2:7f:f9:87:ef:5f:49:12:ba:b8:85:be:5a:6a:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 17:19:05 2026 GMT
Not After : May 6 17:24:05 2027 GMT
Subject: CN=F12529C02C941948DE689666911F79C472E3A2C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:95:60:64:25:be:3f:17:0d:1d:02:48:c9:
68:c9:38:19:e7:84:51:ee:8b:14:05:35:c5:b4:0b:
62:c2:1f:d1:3f:17:87:a5:1c:7c:61:07:fe:77:7a:
d4:74:38:80:38:44:e7:5f:cc:2f:95:c3:70:ce:06:
7f:e7:f4:8c:35:b7:98:f8:2d:3f:d8:08:a3:64:93:
40:33:97:33:08:be:3f:8a:4f:e7:d8:6d:15:63:84:
36:98:a6:ed:ca:ee:23:ba:b2:69:eb:80:c9:ec:d6:
a3:3c:6b:51:e4:27:56:e0:9f:a0:2c:c9:26:42:e0:
6d:fd:d9:ea:f1:17:55:35:56:49:15:a7:1c:ea:bb:
dd:cf:18:22:cd:31:9f:c8:44:79:31:94:ae:27:cc:
09:df:ba:f3:c5:d2:e1:83:bf:7d:e9:4d:22:e1:ab:
90:8e:1e:44:16:99:80:9e:6d:a3:3f:96:32:ef:e3:
50:76:df:c4:2c:6f:f3:e1:34:aa:a7:ac:e0:55:59:
86:ac:94:61:e4:57:61:55:63:a5:8e:19:89:12:fa:
67:40:f2:cb:f0:95:0e:70:ad:bc:96:2e:7e:89:f5:
9a:d7:01:b9:ab:62:ac:d8:2e:d2:47:66:14:4e:7e:
21:8e:07:b0:1f:8b:29:5f:9b:05:2c:96:a0:f7:06:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:29:C0:2C:94:19:48:DE:68:96:66:91:1F:79:C4:72:E3:A2:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3234382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:24:46:42:94:27:cc:dd:05:aa:94:ea:f3:8e:7b:5b:1a:b3:
32:df:f1:f9:28:cb:18:2f:f5:f7:22:61:50:31:50:a2:94:1e:
ed:8b:33:99:d4:1f:e0:b4:a6:e1:85:04:e9:e6:27:cd:72:72:
29:7a:d2:14:3e:f0:c2:e6:b8:85:4f:47:9a:25:71:32:37:3f:
2f:ea:00:33:6b:6e:d9:65:64:c0:1b:ff:34:42:d9:25:8b:57:
62:56:46:a5:d4:ab:4a:58:16:57:77:71:99:44:6e:e4:76:d2:
57:e5:ad:30:7e:a7:88:01:cb:a7:cd:52:c9:4c:db:be:aa:a3:
d6:9e:b7:92:b4:08:1f:c1:22:42:c8:76:1e:ee:6b:e9:70:6d:
85:3b:18:88:d9:b1:7b:4e:61:ef:bf:66:bc:e5:2f:60:ae:67:
15:89:04:1a:c2:43:0a:b5:20:67:51:7d:cf:89:af:04:f3:08:
ab:72:b1:ed:9a:03:a7:61:19:f9:2a:fc:a0:87:ba:d6:e1:4a:
71:fb:50:4e:1a:45:5c:89:e3:ec:4a:e1:c8:d2:93:4c:fe:61:
76:01:4f:de:ca:ce:22:41:f9:0d:a6:81:8a:14:bf:27:5d:56:
ca:0b:12:5b:19:2c:48:b5:4e:ee:14:95:4f:6f:f6:6c:0c:fa:
77:c1:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:42 2026 by rpki-client