Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e203633313939.roa
File: 38322e3139382e3235302e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: EpZqMUGRubNcTym4Rc1HwJfPheBajeQoHpPKAG5chGA=
Subject key identifier: 2E:FD:C1:60:7B:DF:6E:EF:B8:C1:53:EB:14:B9:03:F5:4A:B1:75:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52333504ED140B7695F818AF8198F60F7F61D761
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e203633313939.roa
Signing time: Tue 10 Mar 2026 07:45:26 +0000
ROA not before: Tue 10 Mar 2026 07:40:26 +0000
ROA not after: Tue 09 Mar 2027 07:45:26 +0000
asID: 63199
IP address blocks: 82.198.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:33:35:04:ed:14:0b:76:95:f8:18:af:81:98:f6:0f:7f:61:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 10 07:40:26 2026 GMT
Not After : Mar 9 07:45:26 2027 GMT
Subject: CN=2EFDC1607BDF6EEFB8C153EB14B903F54AB1751C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:ef:72:75:5d:cb:24:1d:f0:51:8d:16:e6:
ad:ff:59:67:32:99:6f:ae:4f:0c:e7:d8:cd:da:4a:
8f:37:a6:51:d7:ef:64:95:e4:84:75:5b:b3:a5:6c:
1d:db:b9:0d:5d:cc:55:91:69:9d:c0:c5:53:b8:2b:
21:fc:16:c4:49:8f:ae:ab:24:ec:e2:b9:e5:cf:cc:
dc:3f:46:fa:38:87:75:24:e7:3e:06:13:56:37:d5:
d6:d5:c1:e3:57:b6:e3:db:4e:37:1e:75:ed:eb:d9:
32:9f:09:bf:2a:03:25:1e:93:4e:cf:6e:d1:b3:59:
f7:90:5e:0a:c9:80:7c:0a:4b:c7:f0:ff:e2:46:60:
83:ad:79:f3:6b:96:17:26:97:5c:75:08:b5:6f:77:
bf:c8:1d:9a:e0:b0:28:05:d5:6f:89:50:a6:76:37:
d8:3e:64:eb:e1:fc:8b:02:9d:cb:c7:d5:3e:5c:4b:
90:11:c7:5d:87:78:c0:a6:d5:63:34:f9:60:7e:f1:
76:e1:98:a1:89:f2:bf:23:2e:ed:f4:55:ce:cc:fb:
13:00:c8:ba:2d:51:06:88:65:f8:70:9d:7c:4d:46:
50:27:c2:19:89:c7:30:ae:99:81:66:32:a6:91:51:
dc:75:bc:d9:a0:40:b7:ab:72:67:bf:a0:5c:20:d3:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FD:C1:60:7B:DF:6E:EF:B8:C1:53:EB:14:B9:03:F5:4A:B1:75:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:db:51:95:c8:48:98:d5:5c:9a:0d:15:61:cd:75:20:9a:cd:
44:94:25:b0:80:b3:52:83:ce:d6:96:dc:e3:20:ea:5e:80:03:
ff:35:e0:f7:22:33:67:d9:81:74:0c:e3:36:ad:aa:58:20:5c:
c0:92:7c:54:5a:15:18:24:c5:d7:fc:b4:1b:25:90:74:cd:8a:
61:18:dd:ef:a2:04:d7:54:d9:79:4e:16:b7:2b:5c:22:ff:74:
b5:0d:2a:10:50:e3:06:69:c8:2a:36:b0:ad:8a:86:f0:09:35:
95:39:df:59:0c:68:eb:37:24:6f:eb:da:f2:59:a6:02:20:fa:
29:1a:9a:66:b9:58:90:77:f0:34:81:6b:5e:40:d1:82:bf:5a:
8d:49:dc:87:94:07:b8:5b:2a:85:dc:22:af:2f:a1:3a:a3:4e:
5a:b3:d5:29:1b:e6:7d:d2:3a:a4:ae:eb:50:69:c3:06:07:32:
d4:48:3a:eb:7c:6c:c7:bf:0d:c2:45:c1:09:49:de:7f:5a:14:
9f:85:dc:60:54:e0:52:59:7c:9a:83:b4:f0:42:91:c2:e3:ee:
c7:a7:a4:1c:a1:fd:4a:7b:16:d8:22:d2:e6:79:4d:47:97:73:
6a:e8:79:ac:60:3b:76:77:db:08:4c:19:48:5d:20:87:00:15:
e6:96:b0:51
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUjM1BO0UC3aV+BivgZj2D39h12EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTAwNzQwMjZaFw0yNzAzMDkwNzQ1MjZaMDMxMTAvBgNV
BAMTKDJFRkRDMTYwN0JERjZFRUZCOEMxNTNFQjE0QjkwM0Y1NEFCMTc1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8e9ydV3LJB3wUY0W5q3/WWcy
mW+uTwzn2M3aSo83plHX72SV5IR1W7OlbB3buQ1dzFWRaZ3AxVO4KyH8FsRJj66r
JOziueXPzNw/Rvo4h3Uk5z4GE1Y31dbVweNXtuPbTjcede3r2TKfCb8qAyUek07P
btGzWfeQXgrJgHwKS8fw/+JGYIOtefNrlhcml1x1CLVvd7/IHZrgsCgF1W+JUKZ2
N9g+ZOvh/IsCncvH1T5cS5ARx12HeMCm1WM0+WB+8XbhmKGJ8r8jLu30Vc7M+xMA
yLotUQaIZfhwnXxNRlAnwhmJxzCumYFmMqaRUdx1vNmgQLercme/oFwg0x1dAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQULv3BYHvfbu+4wVPrFLkD9UqxdRwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM4MmUzMjM1
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzEzOTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Usb6MA0GCSqGSIb3DQEBCwUAA4IBAQBt21GVyEiY1VyaDRVhzXUgms1ElCWwgLNS
g87WltzjIOpegAP/NeD3IjNn2YF0DOM2rapYIFzAknxUWhUYJMXX/LQbJZB0zYph
GN3vogTXVNl5Tha3K1wi/3S1DSoQUOMGacgqNrCtiobwCTWVOd9ZDGjrNyRv69ry
WaYCIPopGppmuViQd/A0gWteQNGCv1qNSdyHlAe4WyqF3CKvL6E6o05as9UpG+Z9
0jqkrutQacMGBzLUSDrrfGzHvw3CRcEJSd5/WhSfhdxgVOBSWXyag7TwQpHC4+7H
p6Qcof1KexbYItLmeU1Hl3Nq6HmsYDt2d9sITBlIXSCHABXmlrBR
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:12:31 2026 by rpki-client