Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235322e302f32322d3232203d3e20323132393830.roa
File: 38322e3139382e3235322e302f32322d3232203d3e20323132393830.roa (raw, json)
Hash identifier: PwwCqZP2w3BWqbCdgG6ywEL1OSFpmDuoNwrs+b/OiEU=
Subject key identifier: 80:04:A3:B7:DD:F6:1E:4F:29:55:9A:46:FF:82:85:C9:C7:68:2D:E4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 374B1FEC89ACF23F9D99471A44DE03AB47EE5424
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235322e302f32322d3232203d3e20323132393830.roa
Signing time: Fri 01 May 2026 15:48:59 +0000
ROA not before: Fri 01 May 2026 15:43:59 +0000
ROA not after: Fri 30 Apr 2027 15:48:59 +0000
asID: 212980
IP address blocks: 82.198.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:4b:1f:ec:89:ac:f2:3f:9d:99:47:1a:44:de:03:ab:47:ee:54:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 15:43:59 2026 GMT
Not After : Apr 30 15:48:59 2027 GMT
Subject: CN=8004A3B7DDF61E4F29559A46FF8285C9C7682DE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:27:5d:40:78:c9:29:27:e5:7e:60:82:5d:26:
5b:a3:9a:b5:ac:a8:33:cd:ed:60:63:b5:4f:37:25:
57:51:38:f7:e9:57:b7:52:7a:76:bb:2a:07:a7:ac:
c9:11:42:d3:d1:47:31:10:4f:08:22:ac:dd:ab:20:
cd:64:28:17:cf:51:2a:98:2d:4c:3c:f0:27:4f:0b:
dc:6f:d5:0f:83:fa:be:24:bd:74:4e:79:66:1f:45:
2e:94:7e:07:dd:7d:f1:0c:3c:9b:ac:98:83:4d:68:
10:a6:57:ba:d3:9d:7d:c5:2b:4c:96:41:78:52:19:
79:9c:7e:51:00:69:a2:c5:af:cb:52:a5:a2:64:a8:
82:6a:7a:eb:b6:a9:bc:c1:37:d9:66:48:d8:a5:d0:
71:66:4e:83:4e:14:37:71:b5:aa:8a:50:19:83:52:
e4:74:0e:ea:d7:98:49:75:8b:90:92:6c:a4:83:07:
44:f2:64:af:a2:0a:0d:bc:3b:e0:34:72:76:2d:70:
e4:fb:6b:a4:8c:c6:ed:2f:15:a3:03:79:a4:7c:ac:
e5:04:18:e9:c9:8b:67:af:a1:6d:32:b7:ef:78:c5:
6b:0f:6f:7d:9c:8a:65:e1:95:ef:5a:77:4c:f3:5b:
e0:5b:27:80:48:7a:f4:97:63:88:b6:07:58:db:c0:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:04:A3:B7:DD:F6:1E:4F:29:55:9A:46:FF:82:85:C9:C7:68:2D:E4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235322e302f32322d3232203d3e20323132393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:29:77:81:7a:12:3f:16:d0:0c:0f:e7:10:54:a3:38:e0:79:
77:f2:b8:79:cf:be:18:1e:49:28:76:20:c7:2c:5a:96:3c:21:
23:f4:a5:2b:25:a8:23:7c:56:eb:ff:63:fa:b0:6e:a2:2e:7a:
0d:66:49:21:62:fa:ed:61:85:13:8d:33:70:4d:ee:b7:32:05:
d5:00:35:ec:e2:db:1e:30:fa:3a:0d:b1:38:0d:34:d4:61:86:
4b:09:6e:e2:03:a0:93:2d:29:9f:0a:19:16:7f:3f:50:5b:70:
75:0a:78:ce:cf:fa:1d:35:81:c9:d8:09:01:d4:8e:4d:c1:95:
4d:c6:e3:14:e2:39:4c:bf:a6:ad:e7:45:88:41:0c:cd:b4:94:
77:c5:f7:c8:87:4e:49:8d:90:8e:60:f7:2d:7b:5d:14:fe:7d:
3b:0d:c8:ba:58:02:21:1f:4c:40:48:0e:42:91:2a:9f:ad:e5:
7f:4a:b9:fd:2c:d0:a9:1c:d2:11:69:39:15:d9:59:45:5b:11:
5e:f4:14:93:85:25:16:0d:18:c9:57:aa:61:53:05:15:6c:e3:
7b:ea:10:d2:00:1b:77:56:e6:fd:0c:30:f8:e4:8d:5f:fc:0f:
e6:27:59:d9:6c:46:0c:e4:1a:92:c0:22:90:99:b3:27:eb:34:
a7:70:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:19 2026 by rpki-client