Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235312e302f32342d3234203d3e20323133373234.roa
File: 38322e3139382e3235312e302f32342d3234203d3e20323133373234.roa (raw, json)
Hash identifier: /wzyWNEBbLlsjx8Z2mgzWBxvhDx3uS0wMhraclPx8z4=
Subject key identifier: D6:91:A0:50:99:3C:7C:7B:C5:F4:1C:6B:DA:F8:E7:E3:C8:9E:AD:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 693694C0192DCAB61DCE40B1168E46DB25EB3A88
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235312e302f32342d3234203d3e20323133373234.roa
Signing time: Wed 22 Apr 2026 21:23:51 +0000
ROA not before: Wed 22 Apr 2026 21:18:51 +0000
ROA not after: Wed 21 Apr 2027 21:23:51 +0000
asID: 213724
IP address blocks: 82.198.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:36:94:c0:19:2d:ca:b6:1d:ce:40:b1:16:8e:46:db:25:eb:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 22 21:18:51 2026 GMT
Not After : Apr 21 21:23:51 2027 GMT
Subject: CN=D691A050993C7C7BC5F41C6BDAF8E7E3C89EADC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:d0:58:cb:68:aa:f4:10:5b:1f:75:87:63:
5e:24:c5:13:33:fb:d1:d5:4d:39:6c:00:c6:ee:0b:
a7:5d:59:fd:68:99:dc:e3:ec:59:17:60:0c:82:89:
b7:75:56:4a:a4:ca:18:42:2e:c4:04:99:e1:6e:14:
6b:6b:f9:ee:c2:ab:ba:ea:93:ca:93:51:f7:a6:cb:
4e:33:f1:75:1e:c9:3f:26:4f:c6:6b:6f:da:aa:14:
c7:99:66:3a:47:89:89:0c:e4:15:8b:e1:83:59:d5:
50:16:b6:8a:da:8c:57:92:ce:e6:d0:64:1f:15:9a:
0a:ae:4b:60:62:5b:b6:28:68:a1:cb:0d:d9:fd:dd:
86:c9:1f:b3:b5:87:5c:1d:46:1f:c6:f1:c1:3e:26:
14:6d:ac:66:03:84:2f:5c:6a:92:19:fd:50:5a:1d:
9c:c5:2c:aa:f3:1a:68:f8:e6:0e:4e:f6:fd:94:9b:
6e:3f:a7:9b:65:99:38:5f:40:bb:ed:cb:a7:e9:8d:
df:31:83:2f:0e:fe:63:d7:98:ca:69:fa:69:a9:d2:
26:80:02:02:e3:41:80:c7:95:6e:a5:24:36:da:7c:
d2:5e:79:25:42:79:34:f8:a2:9c:71:df:69:0b:30:
88:8c:96:c3:1d:23:a1:75:40:c8:02:88:02:09:63:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:A0:50:99:3C:7C:7B:C5:F4:1C:6B:DA:F8:E7:E3:C8:9E:AD:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235312e302f32342d3234203d3e20323133373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.251.0/24
Signature Algorithm: sha256WithRSAEncryption
01:73:95:bb:03:21:43:dd:eb:a8:39:3f:ec:85:9e:32:0e:7f:
53:b8:11:19:1e:ea:69:48:19:ed:f4:a3:6a:18:80:82:3c:1a:
60:ae:7c:0c:68:ed:58:cc:b4:e9:c7:41:24:51:70:1c:70:16:
0f:3f:5a:3f:e2:5b:40:c4:b8:20:2f:6f:58:bf:13:56:98:8c:
fc:c3:3e:08:8e:0b:09:1d:f5:17:55:dd:78:41:fa:57:49:97:
68:a2:51:09:ea:52:51:f2:46:57:8e:e3:e8:f5:3a:5b:3f:08:
66:35:e5:b1:31:70:a8:99:89:ba:36:19:d7:2b:4f:73:9b:14:
b5:23:0a:39:e4:34:b2:1c:10:88:da:8b:55:5c:d8:bd:9e:34:
72:0b:c2:85:36:30:eb:3f:be:de:91:19:a3:f5:af:35:5c:eb:
90:24:86:b1:39:68:4f:f2:71:1c:0d:ec:35:7a:c3:31:44:45:
1e:73:45:62:b2:f2:a3:68:b0:c7:b2:f0:86:5f:ad:7f:9a:98:
71:b2:51:70:5f:07:42:41:76:1c:e1:fa:e1:d2:88:aa:31:3e:
64:aa:1d:0e:a5:2d:f2:b8:2e:b9:a1:0d:de:73:9c:50:ac:af:
65:16:87:d7:81:23:c8:70:1a:b2:f2:aa:b0:1c:4f:7b:36:5f:
a4:6e:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:04:43 2026 by rpki-client