Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234362e302f32332d3233203d3e20323132323338.roa
File: 38322e3139382e3234362e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: RDkHjqIQys1D4HMVciNy6yDUcGlH8PXXMVT2q1I8hU0=
Subject key identifier: E1:AC:BB:B6:09:63:23:B5:17:F5:3C:38:65:E4:DD:3E:DA:87:1C:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5CBCB155218A5EAA8E31D9083B49D8F51E97C03A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234362e302f32332d3233203d3e20323132323338.roa
Signing time: Wed 22 Apr 2026 21:23:51 +0000
ROA not before: Wed 22 Apr 2026 21:18:51 +0000
ROA not after: Wed 21 Apr 2027 21:23:51 +0000
asID: 212238
IP address blocks: 82.198.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:bc:b1:55:21:8a:5e:aa:8e:31:d9:08:3b:49:d8:f5:1e:97:c0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 22 21:18:51 2026 GMT
Not After : Apr 21 21:23:51 2027 GMT
Subject: CN=E1ACBBB6096323B517F53C3865E4DD3EDA871CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:49:e0:6a:16:a4:fb:73:18:32:84:f1:d9:
c2:e2:be:2c:96:fb:ee:68:d1:18:4d:17:81:07:69:
09:2c:9b:ef:9a:f9:4e:4d:28:87:6e:2c:95:23:23:
af:fa:1b:53:be:e4:da:6c:80:bc:96:2d:8e:b6:9a:
ee:15:b9:8e:55:ad:f0:64:5f:2e:d0:7e:57:5b:5f:
0d:0d:52:d1:e7:86:52:42:90:c7:17:f2:43:1d:bd:
07:cc:18:78:ed:87:dd:19:66:14:03:e2:97:db:4f:
26:e0:da:3b:5e:ed:ec:6b:c7:ed:c7:19:de:49:94:
66:3f:d1:34:f4:89:ba:a0:6e:80:37:c4:9d:d5:5c:
e5:c2:6f:c9:0a:ca:29:0d:ae:11:3d:13:83:52:dc:
d8:3e:53:0e:a5:23:18:bb:43:0d:6d:86:c7:b9:87:
07:44:9f:95:8c:ef:3c:4d:79:0e:28:21:b8:3a:86:
18:58:65:dd:7d:08:ea:4e:c7:74:9e:af:1b:63:f7:
7c:c3:6d:55:e4:17:34:4d:cc:2a:54:dc:05:0f:a8:
44:6b:c5:a3:44:a2:7a:e5:32:aa:ba:88:33:e2:9e:
14:86:7e:8e:c3:98:12:98:e6:d6:e6:30:c1:c7:e8:
30:83:67:c7:47:12:65:da:94:0f:3f:61:5f:56:a8:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:BB:B6:09:63:23:B5:17:F5:3C:38:65:E4:DD:3E:DA:87:1C:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3234362e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.246.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a2:6e:d5:77:5f:c0:15:e0:ac:0e:40:fc:36:5c:2e:f5:6e:
5f:db:dc:91:c1:f1:c6:b1:c4:92:f0:db:94:73:0d:16:45:98:
b7:5f:0c:33:3e:65:32:cd:71:f3:ad:d5:f2:cb:fc:0a:28:2e:
17:9d:02:64:0c:4f:2a:04:21:54:db:de:b0:9d:01:ee:bc:5d:
c8:12:9d:61:b8:13:ab:fb:19:fa:5c:63:71:c7:a6:6d:c1:1a:
7d:c4:6d:9d:ee:4d:1e:43:88:b4:60:b1:da:65:fb:e9:ec:a2:
9e:e6:ba:74:b8:1c:94:e0:e8:f0:ee:ae:bb:38:23:c5:8b:d9:
f4:0e:7a:50:67:78:04:f3:e8:8a:cc:6b:4a:76:e2:e7:8c:ed:
b8:b1:bb:56:5f:ea:8c:b4:84:34:0f:05:39:80:6b:ff:91:8e:
30:99:b9:88:b7:39:6d:5b:88:fe:90:d5:2c:f3:20:3e:05:5c:
bc:8d:df:0e:dc:29:58:89:d9:7d:c6:16:61:2b:ac:d7:6b:df:
70:62:f2:c3:0a:81:11:8b:44:1e:f5:94:8b:63:fa:ba:09:64:
3c:cf:af:83:fc:7b:4e:b8:e4:01:a7:c8:7d:89:b1:d4:d7:4d:
42:b2:61:3a:9e:a1:71:ed:16:10:69:5d:49:ec:94:8d:7a:eb:
bd:a9:2c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:57:43 2026 by rpki-client