Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203531313637.roa
File: 38352e3233392e3233302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: 7D3TJFM3pM/aDQ/RmfwvWTa+I7rgq5KAYAxpUDo1HIU=
Subject key identifier: 0E:36:F5:F4:39:F7:0E:01:D0:AE:6B:DB:B0:4C:3E:95:7B:8C:46:39
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E58CCA2DEDA45495963AF7C3E773688D0C7CCB7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203531313637.roa
Signing time: Fri 24 Apr 2026 09:23:53 +0000
ROA not before: Fri 24 Apr 2026 09:18:53 +0000
ROA not after: Fri 23 Apr 2027 09:23:53 +0000
asID: 51167
IP address blocks: 85.239.230.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:58:cc:a2:de:da:45:49:59:63:af:7c:3e:77:36:88:d0:c7:cc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 24 09:18:53 2026 GMT
Not After : Apr 23 09:23:53 2027 GMT
Subject: CN=0E36F5F439F70E01D0AE6BDBB04C3E957B8C4639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:37:55:33:d5:de:17:4d:0b:f7:69:fb:0a:
c8:c2:d8:ee:e3:d4:c4:30:f9:74:30:a5:f8:67:5a:
85:c2:7b:40:f6:d9:b6:b9:2c:fc:90:2e:d4:3a:c5:
94:76:e9:38:53:27:be:b1:ec:c5:95:3e:50:64:72:
e0:31:99:de:ef:7b:45:e6:2c:a0:74:9f:58:c1:13:
d9:5b:fa:04:49:b9:ee:b7:cd:33:91:a7:59:cb:c6:
d2:eb:5c:05:a9:74:78:46:82:09:dd:a6:8a:69:ab:
e0:10:4c:e1:d0:0e:9c:cf:9d:e1:94:a1:52:68:4f:
be:1c:35:d6:95:b0:9d:ff:7c:99:7e:9b:84:cc:c4:
ec:0e:be:63:e4:d1:d3:b5:12:e4:80:a0:8b:b3:bb:
98:9c:f1:51:37:e4:d4:93:9e:a3:02:c0:d1:8b:bd:
5b:73:67:4c:9d:62:b9:8b:ad:26:84:07:1c:80:2f:
68:f8:35:45:0c:4b:22:85:c9:ad:fb:f3:79:b2:ef:
93:d2:b2:a5:7b:24:cf:37:53:b7:7d:0f:e3:fe:ab:
93:77:ed:03:ed:46:74:a0:39:28:d2:bf:fb:eb:8a:
1f:4e:92:73:7c:cc:84:62:0c:9e:2d:b8:6b:b8:5d:
a1:a4:4a:51:58:0d:17:12:f2:28:7f:23:41:2a:51:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:F5:F4:39:F7:0E:01:D0:AE:6B:DB:B0:4C:3E:95:7B:8C:46:39
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.230.0/23
Signature Algorithm: sha256WithRSAEncryption
25:c6:d2:15:4a:96:c3:9c:9f:22:60:4f:3f:6c:5b:10:fd:03:
a4:df:9d:d6:a2:b5:df:97:63:fe:ef:ad:38:63:41:7e:f2:f9:
c5:28:73:30:31:5e:92:81:d3:5f:d3:a5:90:05:a2:2b:fa:61:
23:29:9d:02:73:71:e2:08:db:8e:ec:8a:9c:30:fe:f7:63:21:
b2:99:a4:26:02:4b:2b:06:b6:75:ec:a9:ad:26:eb:07:47:f3:
a3:48:d8:a8:eb:5a:51:cd:ec:73:33:51:1c:1a:46:2f:2f:5e:
c7:af:e8:e7:f1:c8:50:bb:b2:c0:9e:04:a9:9c:ef:d2:16:80:
82:7f:bd:34:c4:59:0f:dc:4c:e6:63:f8:5b:5c:45:a0:eb:c0:
ce:2c:d9:7a:1c:45:02:bc:4d:a7:c3:b0:2a:7f:bb:c6:7e:e1:
d8:64:93:a1:4f:3e:1d:1e:97:a3:ca:39:52:f7:d7:20:79:bc:
0e:d5:52:df:e1:39:db:d8:d1:61:0c:a2:5f:e3:b2:60:e2:2d:
93:a1:bb:ce:c3:0c:5f:d4:d5:8d:4f:5f:cb:41:26:1f:aa:7a:
7d:46:a8:98:3f:97:e7:1a:b0:aa:63:4b:a2:6b:c9:5d:c6:42:
c3:4c:f1:64:2b:e2:d5:53:99:7b:22:88:3d:e6:62:44:96:18:
5c:74:e3:2d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTljMot7aRUlZY698Pnc2iNDHzLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MjQwOTE4NTNaFw0yNzA0MjMwOTIzNTNaMDMxMTAvBgNV
BAMTKDBFMzZGNUY0MzlGNzBFMDFEMEFFNkJEQkIwNEMzRTk1N0I4QzQ2MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpzdVM9XeF00L92n7CsjC2O7j
1MQw+XQwpfhnWoXCe0D22ba5LPyQLtQ6xZR26ThTJ76x7MWVPlBkcuAxmd7ve0Xm
LKB0n1jBE9lb+gRJue63zTORp1nLxtLrXAWpdHhGggndpoppq+AQTOHQDpzPneGU
oVJoT74cNdaVsJ3/fJl+m4TMxOwOvmPk0dO1EuSAoIuzu5ic8VE35NSTnqMCwNGL
vVtzZ0ydYrmLrSaEBxyAL2j4NUUMSyKFya3783my75PSsqV7JM83U7d9D+P+q5N3
7QPtRnSgOSjSv/vrih9OknN8zIRiDJ4tuGu4XaGkSlFYDRcS8ih/I0EqUaevAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUDjb19Dn3DgHQrmvbsEw+lXuMRjkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjMz
MzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Ve/mMA0GCSqGSIb3DQEBCwUAA4IBAQAlxtIVSpbDnJ8iYE8/bFsQ/QOk353WorXf
l2P+7604Y0F+8vnFKHMwMV6SgdNf06WQBaIr+mEjKZ0Cc3HiCNuO7IqcMP73YyGy
maQmAksrBrZ17KmtJusHR/OjSNio61pRzexzM1EcGkYvL17Hr+jn8chQu7LAngSp
nO/SFoCCf700xFkP3EzmY/hbXEWg68DOLNl6HEUCvE2nw7Aqf7vGfuHYZJOhTz4d
HpejyjlS99cgebwO1VLf4Tnb2NFhDKJf47Jg4i2TobvOwwxf1NWNT1/LQSYfqnp9
RqiYP5fnGrCqY0uia8ldxkLDTPFkK+LVU5l7Iog95mJElhhcdOMt
-----END CERTIFICATE-----
Generated at Wed May 13 04:05:05 2026 by rpki-client