Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203531383532.roa
File: 38352e3230382e34392e302f32342d3234203d3e203531383532.roa (raw, json)
Hash identifier: KKaKa4eXsXDFc0cgF1wbf9PEv20TKxppg3PymHmn5XU=
Subject key identifier: E0:04:A1:02:69:9A:CF:8D:14:46:37:1E:17:1E:5F:36:06:C2:E6:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6EBDA5A26ACDE5E49D34A614DB6883F31859DEE7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203531383532.roa
Signing time: Wed 21 Oct 2026 17:26:01 +0000
ROA not before: Wed 21 Oct 2026 17:21:01 +0000
ROA not after: Wed 20 Oct 2027 17:26:01 +0000
asID: 51852
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:bd:a5:a2:6a:cd:e5:e4:9d:34:a6:14:db:68:83:f3:18:59:de:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 17:21:01 2026 GMT
Not After : Oct 20 17:26:01 2027 GMT
Subject: CN=E004A102699ACF8D1446371E171E5F3606C2E632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:08:4b:e7:61:fe:43:d6:1c:64:d0:ad:3a:1e:
ee:c7:c7:a1:e2:47:72:1f:0b:ad:7b:f3:8a:15:a1:
fa:ae:f4:ad:61:32:bb:3a:01:6b:13:97:25:ab:09:
62:d0:a4:77:ac:5a:a3:db:1d:fc:27:14:14:c0:4a:
97:10:37:f1:ac:8b:65:6b:64:5d:16:a7:42:97:02:
7b:7e:ab:ba:36:37:b5:c4:33:08:c2:0d:53:b6:68:
c3:03:93:c6:b0:47:a2:66:53:91:54:58:91:00:83:
e4:d1:57:e7:54:96:e9:97:e8:b7:c9:f7:94:79:a3:
7e:97:f7:b4:15:fd:aa:66:2a:7b:2d:e0:d3:54:d7:
97:16:e1:17:ae:0b:fa:41:45:47:0e:35:97:50:e1:
7b:28:95:8e:53:96:78:54:8e:67:6e:c6:67:e9:d8:
67:0e:5a:74:22:92:a9:db:16:0e:83:09:a4:d0:a4:
39:a0:94:be:4b:e0:be:37:62:3f:4f:a0:f3:09:09:
15:9f:5c:2f:6e:94:f9:ab:f6:b3:90:86:cc:2d:ca:
dd:94:0d:99:1a:64:44:ea:68:c8:49:16:98:e8:fe:
4f:05:67:e6:6e:81:02:67:ee:f8:9d:99:d9:29:25:
5f:b6:f1:1c:50:e7:5a:4d:98:1b:c5:66:7e:d4:8e:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:04:A1:02:69:9A:CF:8D:14:46:37:1E:17:1E:5F:36:06:C2:E6:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e203531383532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
63:59:e5:1a:19:ef:41:eb:d5:cb:3c:8d:9a:c4:30:11:76:13:
6f:3e:2a:99:de:e0:16:13:8e:e5:d4:45:17:2f:ba:4b:bd:9d:
cc:b2:c7:f5:4f:02:c5:4b:03:9d:e3:06:6a:33:0d:b9:59:3d:
a0:2b:34:15:d3:12:47:ea:5d:80:3f:2a:b0:43:22:ae:fd:fe:
47:a1:ea:f2:a9:c8:06:ed:e9:7e:31:eb:81:a7:28:3e:83:f6:
f4:cd:92:69:c3:37:24:e6:4b:eb:96:3d:0f:90:99:29:ea:62:
7b:96:eb:9c:5a:bd:06:4d:c4:ca:9e:e8:4f:ee:c9:2d:54:cb:
35:37:1e:39:65:19:32:68:70:18:bc:f1:80:1d:11:fc:bc:a5:
21:c2:6e:e4:7d:e3:0d:0b:9c:fa:ba:44:bc:e4:10:bc:b3:55:
6e:a8:ae:17:6a:2d:be:2f:fb:65:b1:63:33:39:fd:5a:d0:b0:
e8:07:2d:8f:f4:b6:01:70:a6:66:d0:6d:9c:55:a8:24:ed:7f:
36:c9:cc:a6:25:40:3d:de:c5:46:ab:91:9d:0c:85:75:0f:25:
11:7c:0d:6a:a2:6d:11:b1:4d:f8:b6:b2:cf:95:1e:dd:55:e1:
c3:eb:71:04:56:98:46:59:dd:e1:03:74:4f:a7:5c:e8:10:5f:
65:c9:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:06:12 2026 by rpki-client