Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3234203d3e20323132323338.roa
File: 38362e34382e31352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: dwRTas/iKiHXx/R9iGb0+b40FrQR1ZMkQFcy7j8lFF4=
Subject key identifier: 76:08:70:38:8C:D0:AA:76:CD:45:5F:09:EA:1B:F0:C9:24:03:78:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3418E492B558A67D7DB336AA6BEE6748CA879E35
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:08 +0000
ROA not before: Tue 22 Sep 2026 13:24:08 +0000
ROA not after: Tue 21 Sep 2027 13:29:08 +0000
asID: 212238
IP address blocks: 86.48.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:18:e4:92:b5:58:a6:7d:7d:b3:36:aa:6b:ee:67:48:ca:87:9e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:08 2026 GMT
Not After : Sep 21 13:29:08 2027 GMT
Subject: CN=760870388CD0AA76CD455F09EA1BF0C924037889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:df:5f:9e:b7:1c:ce:15:2c:40:3b:69:df:
85:84:4d:32:21:0f:ab:c3:c9:33:e0:a0:47:94:ec:
25:64:d0:9a:7f:9c:01:e4:96:3f:b5:39:34:ea:0a:
2d:2a:a8:ac:5a:30:20:4e:ce:f9:bb:f4:46:70:c3:
0d:bd:6f:d2:ff:92:20:1c:87:24:b3:dc:ed:e8:82:
0c:ff:a2:02:97:86:d9:ff:9a:e1:a9:fe:3a:be:67:
ab:78:b4:3e:6d:e3:4d:22:3a:71:74:6d:1c:0c:be:
14:29:12:38:53:e1:bf:7d:b7:2c:4c:1c:01:7c:14:
ae:8b:9b:2c:01:aa:af:a0:5b:4f:a9:fe:c4:bf:23:
5f:57:8c:f1:32:2f:07:b4:78:70:eb:b3:85:f2:c8:
39:d1:c3:00:52:7f:83:3c:6e:20:7b:af:2b:70:59:
63:5f:1d:bc:e8:cf:86:e5:b2:a7:d6:44:ad:5e:d2:
70:3d:f8:e6:64:e2:74:1e:07:e2:4c:d4:6a:82:48:
45:99:42:de:0c:f6:d1:05:de:db:72:b6:64:41:0a:
ac:58:f4:87:fb:fc:fb:ee:e8:5c:b8:bb:98:cd:e7:
10:70:d5:ed:a1:2b:09:dd:73:6e:ff:e4:6d:e2:6a:
7e:8d:7a:18:93:3a:0e:f6:8b:d7:d5:5c:99:33:df:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:70:38:8C:D0:AA:76:CD:45:5F:09:EA:1B:F0:C9:24:03:78:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.15.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8b:87:4a:c1:01:bd:ab:a0:2d:5a:a1:79:87:20:68:b6:4f:
3f:18:62:c7:66:03:d9:03:c6:74:c3:8d:8a:85:8f:0a:db:8a:
3e:aa:c7:00:94:4f:35:94:bb:17:28:36:df:35:53:82:59:25:
c1:3e:b8:ab:c6:fa:d6:c9:bd:57:b4:49:4a:b0:5b:cf:aa:20:
31:83:5f:b3:10:b2:ea:ed:ef:21:bf:c6:b4:37:16:3a:1d:45:
81:26:2f:00:ba:bb:8a:f8:0c:a4:08:68:ff:89:36:cb:7f:a8:
d7:03:3d:91:8a:60:f1:03:2d:b0:48:fa:0e:25:fd:96:a6:47:
3c:bc:1a:7f:17:7e:04:98:68:52:c3:dc:a4:8f:7c:6f:8c:b4:
77:ef:9b:a5:ec:90:e8:2b:da:ec:ef:5b:d8:84:8f:93:4a:0f:
d9:57:a1:9a:2a:f1:d7:df:1c:1f:cc:cf:15:8d:4c:e0:ea:2f:
1d:99:82:53:50:f2:9f:0a:70:2b:e8:ce:29:0f:a3:9e:11:9a:
2b:be:61:b3:cb:81:c6:7b:68:61:63:0c:4e:92:c5:66:1b:c2:
d8:95:8f:36:bf:7b:30:cc:3f:ef:d7:1c:0f:ed:40:0b:ba:64:
4a:78:b6:c9:47:ba:4f:36:93:1e:cb:58:32:08:f0:89:b2:89:
11:2a:6f:70
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNBjkkrVYpn19szaqa+5nSMqHnjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjIxMzI0MDhaFw0yNzA5MjExMzI5MDhaMDMxMTAvBgNV
BAMTKDc2MDg3MDM4OENEMEFBNzZDRDQ1NUYwOUVBMUJGMEM5MjQwMzc4ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnEN9fnrcczhUsQDtp34WETTIh
D6vDyTPgoEeU7CVk0Jp/nAHklj+1OTTqCi0qqKxaMCBOzvm79EZwww29b9L/kiAc
hySz3O3oggz/ogKXhtn/muGp/jq+Z6t4tD5t400iOnF0bRwMvhQpEjhT4b99tyxM
HAF8FK6LmywBqq+gW0+p/sS/I19XjPEyLwe0eHDrs4XyyDnRwwBSf4M8biB7rytw
WWNfHbzoz4blsqfWRK1e0nA9+OZk4nQeB+JM1GqCSEWZQt4M9tEF3ttytmRBCqxY
9If7/Pvu6Fy4u5jN5xBw1e2hKwndc27/5G3ian6NehiTOg72i9fVXJkz33ANAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUdghwOIzQqnbNRV8J6hvwySQDeIkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzEzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYw
DzANBgkqhkiG9w0BAQsFAAOCAQEAkouHSsEBvaugLVqheYcgaLZPPxhix2YD2QPG
dMONioWPCtuKPqrHAJRPNZS7Fyg23zVTglklwT64q8b61sm9V7RJSrBbz6ogMYNf
sxCy6u3vIb/GtDcWOh1FgSYvALq7ivgMpAho/4k2y3+o1wM9kYpg8QMtsEj6DiX9
lqZHPLwafxd+BJhoUsPcpI98b4y0d++bpeyQ6Cva7O9b2ISPk0oP2Vehmirx198c
H8zPFY1M4OovHZmCU1DynwpwK+jOKQ+jnhGaK75hs8uBxntoYWMMTpLFZhvC2JWP
Nr97MMw/79ccD+1AC7pkSni2yUe6TzaTHstYMgjwibKJESpvcA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:12 2026 by rpki-client