Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234352e302f32342d3234203d3e2032393134.roa
File: 38322e3139382e3234352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: lq+zy4q2k9MeuqGlyp7hjQ+zdDzOoZ8zlfX8pHYRrOE=
Subject key identifier: 2B:27:3E:C6:D6:10:C3:29:56:76:9A:F1:DA:47:9E:E2:C0:B8:7E:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B4C2BDBB133940DE26CAE141B82EE0208D47A5D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234352e302f32342d3234203d3e2032393134.roa
Signing time: Tue 21 Apr 2026 10:58:39 +0000
ROA not before: Tue 21 Apr 2026 10:53:39 +0000
ROA not after: Tue 20 Apr 2027 10:58:39 +0000
asID: 2914
IP address blocks: 82.198.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4c:2b:db:b1:33:94:0d:e2:6c:ae:14:1b:82:ee:02:08:d4:7a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 10:53:39 2026 GMT
Not After : Apr 20 10:58:39 2027 GMT
Subject: CN=2B273EC6D610C32956769AF1DA479EE2C0B87E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:cb:94:75:cb:f1:95:70:32:03:54:b2:c5:
23:d3:e6:0d:be:f2:31:57:90:1e:d9:74:af:69:e3:
24:44:a7:47:d5:c3:17:73:ab:84:18:06:5b:53:bd:
5d:4e:8b:37:cb:bb:9f:ae:86:c8:b4:e7:6d:a2:0f:
7e:24:4d:8d:03:f6:33:4b:9a:12:ee:f0:a1:0b:a7:
b9:02:de:b7:bc:09:6b:f3:5e:17:b3:82:5b:f9:c0:
c2:79:37:ef:c3:46:d4:92:0d:f6:29:7b:8b:98:f2:
34:d1:21:b3:f2:96:9c:13:da:9f:3b:fe:5e:c0:e0:
05:67:a9:f6:3d:10:17:b2:66:38:72:0d:6d:d8:31:
0a:ee:6a:b4:65:64:69:83:a2:8f:1d:ef:a9:d9:56:
79:d6:8a:a3:97:26:85:cd:3c:94:78:2a:16:67:bf:
21:c7:10:2c:44:d5:b6:d3:a5:b8:bc:ea:be:8d:c3:
88:73:3d:05:8e:81:75:ea:61:b7:01:81:b8:b0:87:
c0:2a:26:65:c4:32:df:93:51:9b:28:9f:7e:fd:1b:
e5:69:8c:10:34:ce:2a:6a:c3:55:90:ef:c6:e3:6b:
87:c0:2e:b0:8b:a7:8a:9d:b2:26:af:c0:04:33:76:
2f:0a:c7:19:52:db:1a:b0:ac:82:60:46:b5:d9:14:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:3E:C6:D6:10:C3:29:56:76:9A:F1:DA:47:9E:E2:C0:B8:7E:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.245.0/24
Signature Algorithm: sha256WithRSAEncryption
47:35:5f:9f:d2:f5:b4:54:2f:43:29:02:e6:fd:51:18:89:a5:
ca:cb:c3:da:a0:77:1a:6c:0a:fe:ba:dd:b4:e3:38:4b:d5:de:
5b:35:7b:d8:c5:73:2f:d7:db:28:69:7d:1c:0c:e5:9a:6a:34:
ab:9c:f3:9d:a3:4e:a2:71:c0:98:4b:c0:c8:11:aa:41:23:3f:
36:60:26:e2:6d:bc:93:bf:18:d4:56:ed:df:ca:e1:b9:1b:2b:
a3:17:2c:b4:77:e7:ae:2d:39:83:b8:40:35:81:2c:22:15:66:
13:25:e5:4e:17:f8:44:ed:9d:05:34:c0:a6:e1:1d:a1:10:07:
e4:64:b5:c4:5d:2b:98:3d:1e:2b:31:01:dc:69:66:3c:2d:41:
73:d2:4d:fe:24:6b:0b:c5:8b:6f:f3:c8:7f:c3:9d:d1:76:2d:
11:0f:b0:dd:6e:93:b3:7c:32:b2:76:d0:0b:8d:d9:0b:41:46:
47:2c:87:7a:c2:69:0d:0f:50:57:84:70:84:99:98:ef:8e:41:
c4:ca:d0:31:93:38:f5:74:92:64:99:82:fc:39:45:de:3d:e7:
63:67:a7:bf:dd:4e:b7:d7:18:21:ba:28:a9:50:9e:55:97:b8:
4f:fc:ec:e7:43:55:59:71:a0:da:4b:b0:c0:d7:4f:79:64:5e:
98:b5:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:42 2026 by rpki-client