Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234302e302f32342d3234203d3e20313937353337.roa
File: 38322e3139382e3234302e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: hkPl7wvX9M6aA/zJigU4t6FcL1uYGHikVuQCkEgIO+U=
Subject key identifier: 68:84:43:48:FA:FB:A6:94:CC:7E:18:00:D7:FC:A0:26:82:2E:A3:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A62E190D3C8C6A071E04152DEFD2AF7F8047E04
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234302e302f32342d3234203d3e20313937353337.roa
Signing time: Wed 22 Apr 2026 21:23:51 +0000
ROA not before: Wed 22 Apr 2026 21:18:51 +0000
ROA not after: Wed 21 Apr 2027 21:23:51 +0000
asID: 197537
IP address blocks: 82.198.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:62:e1:90:d3:c8:c6:a0:71:e0:41:52:de:fd:2a:f7:f8:04:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 22 21:18:51 2026 GMT
Not After : Apr 21 21:23:51 2027 GMT
Subject: CN=68844348FAFBA694CC7E1800D7FCA026822EA3CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:bc:2e:96:0d:13:f6:11:fe:f8:86:6a:5f:
9e:25:97:8f:8b:b4:61:6f:db:69:82:c6:d1:92:a6:
2d:85:e3:bc:b0:ad:51:73:5a:43:e0:0e:71:b6:3e:
96:fe:3d:d2:c4:33:b5:9b:a6:d4:0e:74:13:4b:94:
2f:d5:53:c1:62:7d:ca:ce:bb:ff:f5:10:45:9b:2c:
f9:e7:01:c1:29:46:43:fb:15:01:47:d4:c0:7e:f7:
6c:13:f9:c3:de:54:42:ea:88:da:d1:a0:f8:12:d2:
50:20:2d:7e:d0:d6:1c:ee:63:9c:aa:f6:4d:bb:63:
fe:82:1a:32:a0:2b:92:44:c2:3a:3f:cd:23:fa:62:
80:5b:ce:fd:87:a5:dc:57:cd:0e:ea:35:f4:77:e5:
81:e5:cf:8c:53:fc:9f:00:11:0b:07:5e:70:d5:ce:
f0:56:72:38:d1:51:31:c0:4f:fb:a4:e8:82:6a:7f:
4a:ea:0d:c5:e2:a6:30:49:c1:36:45:7b:e5:74:62:
13:91:eb:25:df:ec:d5:85:2c:f2:2a:2c:9e:89:af:
14:2c:a5:14:db:ff:2c:01:a6:ae:06:41:e1:ab:36:
38:51:29:4d:9e:90:cf:be:e3:61:8f:43:a0:bf:08:
55:4e:2d:5f:ff:d5:62:85:36:b6:4c:84:48:f3:ff:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:43:48:FA:FB:A6:94:CC:7E:18:00:D7:FC:A0:26:82:2E:A3:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234302e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f1:1e:e5:03:b6:2b:2e:82:3c:89:a0:16:eb:83:0d:cd:f5:
bc:73:67:9f:0e:5a:03:7e:88:63:1b:e4:de:d0:a7:fe:cc:2f:
cc:0d:6b:90:a7:ee:dc:c5:45:74:f4:b6:1c:3e:c2:e9:5e:70:
92:44:99:b2:37:57:7a:1e:7a:ed:51:f7:f8:3a:95:f2:cd:b9:
c6:7e:24:09:8c:38:88:3c:75:ce:51:eb:30:6d:8f:c6:f3:26:
34:e4:9f:75:10:ec:19:5b:ed:bb:08:73:47:fd:c6:bb:a8:db:
82:92:4b:d7:01:78:42:4c:48:e9:51:d2:9a:83:85:5f:e4:54:
78:50:54:c8:44:81:4a:55:ca:bf:8c:54:d9:3f:10:2e:9f:98:
61:f9:d8:26:4f:15:27:77:a9:bd:e5:d0:9f:73:de:13:b3:70:
1c:aa:c4:b1:80:0c:25:ab:b6:33:72:f1:58:18:5f:a3:44:a9:
40:c2:12:83:41:e2:f6:ab:cf:66:11:b1:0b:4d:48:f4:4e:b1:
94:e1:ff:f6:bc:15:61:9f:f8:5f:9b:55:0c:c8:b9:f3:ef:ec:
f3:8d:49:66:ec:53:d5:f7:ed:23:9a:59:60:42:a5:62:4c:ba:
c3:33:ab:6d:0c:dd:13:8f:2f:7b:56:70:7c:63:93:0e:0e:27:
32:58:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:12 2026 by rpki-client