Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234352e302f32342d3234203d3e20333935373933.roa
File: 38322e3139382e3234352e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: SgaYRMw+fI7qTfh8+lFkTBXNJ1L/ZfYSBy6/kZ9gW5s=
Subject key identifier: BA:3A:A9:E6:57:F1:FF:09:3A:A9:F7:9B:D4:AC:FC:27:9C:19:E0:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F18988F5952F67FAB9918024769C7300769C7BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234352e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 22 Apr 2026 21:23:52 +0000
ROA not before: Wed 22 Apr 2026 21:18:52 +0000
ROA not after: Wed 21 Apr 2027 21:23:52 +0000
asID: 395793
IP address blocks: 82.198.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:18:98:8f:59:52:f6:7f:ab:99:18:02:47:69:c7:30:07:69:c7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 22 21:18:52 2026 GMT
Not After : Apr 21 21:23:52 2027 GMT
Subject: CN=BA3AA9E657F1FF093AA9F79BD4ACFC279C19E033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:07:4f:79:dc:b4:57:00:e7:14:a0:f0:57:fa:
62:0c:eb:b3:0b:e5:9f:26:9a:6c:19:83:21:15:d5:
7a:84:42:18:4c:33:7b:95:c8:29:ee:10:ff:ce:aa:
23:d6:4f:8a:a2:61:3d:aa:8f:96:89:30:e5:e1:74:
3e:20:db:8f:5e:22:57:ac:79:02:26:31:a9:35:e5:
e9:2d:5c:16:1c:a1:44:7d:1d:22:cc:9b:47:6a:52:
37:f3:9a:a9:d8:b5:02:84:6e:5b:34:b1:33:3c:aa:
f4:84:eb:5c:16:c7:67:a9:0e:d2:a0:97:38:aa:26:
68:e3:fc:a5:78:79:e2:19:44:50:af:52:78:df:34:
9f:2b:d8:c9:14:7b:bb:df:d1:98:6a:f4:c0:af:d0:
06:fa:2b:79:93:02:df:8b:69:2b:e9:8f:12:9e:be:
45:16:cb:e2:ab:b4:bb:83:06:25:db:1b:c6:40:1b:
55:9d:b4:5c:67:b1:18:d8:e3:bc:06:c3:44:c4:b4:
7b:87:06:a4:99:a2:49:06:d4:75:ac:99:36:e4:1e:
f2:fd:db:20:50:c7:98:46:e4:e4:67:1d:44:90:f6:
c9:97:5f:70:98:53:53:d8:85:12:2c:7e:27:c2:56:
68:80:d9:8a:44:62:28:a5:8c:8d:b1:55:8e:8a:59:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:A9:E6:57:F1:FF:09:3A:A9:F7:9B:D4:AC:FC:27:9C:19:E0:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234352e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c1:b3:ac:f6:34:1a:68:53:9a:28:b1:89:6c:0a:6d:8e:e6:
af:e9:21:d0:2d:9e:9a:4f:b7:7c:70:f8:1e:4c:f3:c4:8b:bf:
88:de:e7:2b:19:bb:3b:1d:88:e8:e7:8b:22:ac:5e:83:31:8b:
73:79:d5:22:5f:ec:1a:73:07:a2:35:81:17:f4:43:74:e0:8c:
13:73:05:19:0d:46:82:33:38:eb:1a:55:49:4a:16:6e:65:53:
af:ac:05:36:95:e0:fb:a5:d5:76:3f:3b:ed:fa:5f:db:c5:ea:
a9:9e:d1:ad:d7:ca:eb:41:6b:65:8b:3a:7c:6b:75:cf:99:cb:
7b:b2:9b:f7:b7:58:db:62:bd:83:a1:98:f8:91:9b:89:1d:05:
0c:b4:03:c8:89:cc:a3:2b:a2:73:69:2e:86:9d:50:f7:2d:63:
da:cf:9e:20:40:98:2a:7a:57:94:fc:c7:9b:ab:0d:6c:3a:b8:
31:d0:85:34:6a:09:55:06:5d:9c:a2:7f:01:09:b2:42:cc:df:
f1:05:4a:db:f9:a3:4f:82:21:1e:e0:f2:03:36:94:35:8c:24:
92:43:91:4f:35:24:12:02:95:04:c1:2b:ca:1d:e6:c5:1e:b2:
7e:04:44:f7:a2:5e:4c:da:bc:52:5b:79:2a:bc:64:5b:19:95:
57:1f:31:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:02 2026 by rpki-client