Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3235322e302f32322d3234203d3e203437353833.roa
File: 38322e3131322e3235322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: k34KAfQgd0cP7TeUnaZcOB25mlxYfxsN5IVjBNscCX4=
Subject key identifier: DB:E9:D3:D7:35:CC:C4:06:C3:E0:E3:B9:9A:EC:0B:8F:07:A8:AD:CA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 215207EF1DA5E3E2145603055C299AB2DF533B28
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3235322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 07 May 2026 17:24:05 +0000
ROA not before: Thu 07 May 2026 17:19:05 +0000
ROA not after: Thu 06 May 2027 17:24:05 +0000
asID: 47583
IP address blocks: 82.112.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:52:07:ef:1d:a5:e3:e2:14:56:03:05:5c:29:9a:b2:df:53:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 7 17:19:05 2026 GMT
Not After : May 6 17:24:05 2027 GMT
Subject: CN=DBE9D3D735CCC406C3E0E3B99AEC0B8F07A8ADCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:ab:00:f5:3a:b6:52:46:99:31:20:4d:fb:
da:b1:73:6f:61:41:71:7d:a5:87:fb:35:5f:e8:a9:
4a:8e:02:a0:a2:d4:a4:c7:ca:35:ba:32:db:af:c9:
33:ff:b8:99:23:47:5e:35:cb:bc:e8:88:4d:61:92:
a4:ed:98:60:82:09:19:8e:89:b4:ed:43:a2:81:5d:
71:0d:dd:76:a4:8b:fb:a3:ef:c6:22:f8:b9:b7:b6:
8c:71:83:08:c3:47:d0:b1:00:fb:20:d4:b7:b3:72:
6c:9f:3c:ab:54:3a:d4:89:c8:07:5d:78:3b:ba:04:
9f:57:97:c3:16:73:c6:21:2f:36:eb:2b:2a:1f:64:
3e:bf:19:68:23:9b:a5:92:a8:2f:8f:45:ce:ed:73:
07:bc:81:b9:c9:81:66:55:b5:60:b2:c6:7b:5a:a4:
50:ff:24:88:89:52:1d:cb:d5:c3:6f:84:ce:6a:10:
3c:f1:fb:76:46:70:c1:ce:98:4b:1c:80:d4:99:53:
dd:01:9b:c0:39:9c:77:fe:3e:a0:54:7e:13:f9:4a:
da:56:1b:45:62:2b:d5:b3:a7:0d:f9:62:64:72:e8:
5e:94:13:aa:c5:5d:2f:63:ee:96:1b:cb:3b:5e:a8:
56:1c:50:87:58:e0:92:0f:81:0b:7d:d1:69:36:60:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:D3:D7:35:CC:C4:06:C3:E0:E3:B9:9A:EC:0B:8F:07:A8:AD:CA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3131322e3235322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:7b:f5:fd:c1:e9:59:25:17:6d:93:36:d0:7d:e9:86:1f:f9:
66:38:e3:c0:70:70:35:1d:41:ea:98:ab:85:b4:00:cb:28:2f:
b4:48:29:a3:61:fe:ff:b9:ad:2a:69:8d:18:b4:93:4b:4a:5b:
49:58:79:ea:fb:75:33:75:37:9e:00:3d:22:99:01:52:73:92:
6a:10:2c:a3:7c:99:3a:7e:89:a5:19:da:d3:c2:41:fb:64:62:
8c:94:17:13:22:25:15:47:2e:6b:d7:85:b0:d1:20:69:a0:c6:
7c:bb:a8:03:a7:1a:b7:71:1a:39:91:6c:c6:de:65:93:6e:f1:
be:f3:80:da:c8:93:a0:a4:9c:43:9d:ac:36:31:93:ce:ba:82:
d3:28:6c:15:a3:7a:5a:ce:ab:af:8d:0a:fa:a9:2b:d4:7b:71:
52:c3:f1:54:80:d4:c9:05:c4:09:c9:39:36:f0:b7:a0:22:4b:
51:01:6e:63:8c:9d:91:98:5b:ae:7b:46:cc:c4:5a:c7:5d:4f:
d8:0c:67:45:4f:75:a3:6c:ea:d6:b4:df:90:14:e7:4d:c4:3e:
26:b3:fa:c6:cc:8d:19:49:d7:71:aa:a2:dd:06:b0:e1:be:7c:
d3:72:4a:42:2a:98:6f:ed:d9:46:34:76:5d:2a:35:c1:11:14:
de:82:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:20 2026 by rpki-client