Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235322e302f32342d3234203d3e203633313939.roa
File: 38322e3139382e3235322e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: CSoejiCWe5nNk47GJPGI2KQTh4QKVC2C+dV1Go7xCac=
Subject key identifier: A5:12:EF:7F:C4:76:57:B6:16:BC:03:B0:16:6D:61:AE:7A:B9:34:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0AB340562A7C7F7DA44EB29C59522D236E0FED3B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235322e302f32342d3234203d3e203633313939.roa
Signing time: Mon 23 Mar 2026 21:00:21 +0000
ROA not before: Mon 23 Mar 2026 20:55:21 +0000
ROA not after: Mon 22 Mar 2027 21:00:21 +0000
asID: 63199
IP address blocks: 82.198.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b3:40:56:2a:7c:7f:7d:a4:4e:b2:9c:59:52:2d:23:6e:0f:ed:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 23 20:55:21 2026 GMT
Not After : Mar 22 21:00:21 2027 GMT
Subject: CN=A512EF7FC47657B616BC03B0166D61AE7AB934F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:d0:55:5d:65:57:ce:92:16:fe:e7:bb:65:
93:ab:ac:ae:88:06:65:6d:d4:98:bf:ca:7c:4f:52:
6e:56:e9:a0:11:a7:59:52:b8:42:bd:15:c2:a7:d5:
38:24:cf:83:d9:69:49:2c:75:ea:9a:d4:38:cb:bb:
a7:dd:a4:77:b1:4a:86:78:6e:9f:bb:e8:c1:e1:c9:
9b:8f:e1:ca:66:f7:78:11:e4:44:fc:df:f6:b2:11:
e4:44:24:fc:05:f8:7e:7c:2e:66:8a:7f:a3:3d:9d:
c0:07:bf:ba:bf:98:d0:53:a6:93:b4:35:8d:40:87:
51:a8:f5:33:ae:18:f2:54:87:29:0f:bd:0e:e5:dd:
61:a4:ae:f5:88:ee:e7:69:e7:e2:99:00:1e:be:53:
0d:b0:af:10:ac:13:23:93:99:10:5e:dd:5c:52:f4:
6e:08:a4:fe:67:e8:84:ab:a7:af:f0:a8:30:88:d2:
7f:3b:c7:19:83:b6:c4:6a:8f:f3:2f:eb:eb:0f:08:
e0:e9:d6:80:d6:b9:c8:4e:11:05:18:eb:29:60:ec:
55:00:6e:79:fb:a6:ca:94:67:44:f5:43:c1:67:81:
02:b3:1a:cf:45:f3:7c:ec:d3:a4:4e:09:c5:6c:27:
0b:68:a1:61:ab:5b:4c:d8:76:ff:9c:fc:32:1a:28:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:EF:7F:C4:76:57:B6:16:BC:03:B0:16:6D:61:AE:7A:B9:34:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235322e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5e:65:66:c1:81:01:47:e6:25:1f:96:d9:2f:f9:33:d5:88:
a4:69:07:81:14:14:29:76:2b:6a:d4:37:21:97:8f:ad:d8:27:
bf:f3:ea:77:5b:63:53:38:d2:f9:34:e2:20:65:ce:ff:4a:87:
e4:27:57:d0:f4:b0:07:ba:d4:1a:2a:43:23:a6:83:0c:05:e9:
ce:a5:09:66:e1:4b:7f:f3:12:00:e7:ce:13:54:dc:de:f3:21:
bf:24:14:67:b5:fd:c9:07:db:dd:b0:4a:bc:27:b7:15:e3:05:
7d:ca:9b:68:13:f9:29:63:a7:9b:ad:1a:bd:8e:2a:c1:9d:31:
32:4e:35:7f:85:3c:1d:93:43:9f:1d:49:93:81:c0:86:7b:92:
69:ee:3b:53:fc:81:15:64:9f:a8:9c:2e:cd:fc:80:38:60:01:
36:82:a4:01:f3:67:c2:cc:6d:95:75:e3:f6:3b:1c:bf:5a:34:
4c:5e:a2:c3:3a:41:c5:fd:8e:2c:b2:e8:f7:ea:05:9e:37:dc:
e9:00:c6:de:f7:0a:da:15:8a:91:56:f1:b5:55:4b:4f:8c:dc:
90:ab:25:b4:80:06:bb:82:81:8a:31:f4:f0:3c:bf:ab:6d:a7:
07:fa:eb:32:fc:6f:31:56:89:cb:7b:75:57:7e:46:db:2b:3f:
4a:62:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:51 2026 by rpki-client