Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31362e302f32302d3332203d3e203531313637.roa
File: 38362e34382e31362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: 4vznDmfxwBPFJ9KL7L30amXchULFJS7x+r5XY4vhbVM=
Subject key identifier: F7:E7:B6:A4:E6:32:63:B8:74:B9:8D:A7:E8:D9:6A:07:B7:87:19:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4492D88FC77C11E4DAEFDFAF7B4724CE237A37B5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31362e302f32302d3332203d3e203531313637.roa
Signing time: Fri 24 Apr 2026 09:23:53 +0000
ROA not before: Fri 24 Apr 2026 09:18:53 +0000
ROA not after: Fri 23 Apr 2027 09:23:53 +0000
asID: 51167
IP address blocks: 86.48.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:92:d8:8f:c7:7c:11:e4:da:ef:df:af:7b:47:24:ce:23:7a:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 24 09:18:53 2026 GMT
Not After : Apr 23 09:23:53 2027 GMT
Subject: CN=F7E7B6A4E63263B874B98DA7E8D96A07B7871917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:c3:e3:57:7c:c2:76:f8:d0:89:d2:10:b0:
a8:3a:6a:2e:a3:06:f6:12:83:8d:60:d7:68:52:93:
4b:0d:8b:5c:b6:b3:af:cc:44:54:d9:4e:e3:e6:db:
d6:7e:1f:6d:67:af:90:57:a7:a4:3a:4b:68:be:4e:
de:fe:9e:99:1c:77:b3:93:d1:a2:33:ac:29:a0:e0:
e0:d3:62:de:74:d1:56:bd:7c:6c:2d:20:f6:69:bb:
8c:02:4d:78:01:35:03:e8:6f:cf:8b:2e:e0:77:57:
ae:5e:34:e1:18:c3:8e:67:9f:df:11:33:93:5a:19:
50:9c:2c:da:14:f7:ce:e9:5b:6f:3e:62:37:ad:26:
29:3d:a6:5f:82:4f:ec:2b:7e:e4:2e:17:a0:bf:1b:
f2:b9:f2:6c:ca:38:c8:f8:63:0c:7d:f0:65:91:75:
64:79:3a:0a:60:28:bd:de:11:95:f7:d6:24:0a:49:
f3:2a:e8:ba:b5:0d:9b:5f:4e:b7:1f:2e:74:84:fd:
70:9c:29:4d:96:c1:02:1e:03:11:ba:f3:6e:9a:5b:
bd:11:5f:73:69:78:a9:f3:70:87:0e:90:d9:92:1d:
38:25:a2:b6:5b:0e:f3:86:f7:81:bd:a3:79:82:ef:
a8:72:8a:3e:bc:43:6b:2a:23:8a:e6:11:57:e8:6f:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E7:B6:A4:E6:32:63:B8:74:B9:8D:A7:E8:D9:6A:07:B7:87:19:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31362e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:0d:0f:2d:2b:aa:55:02:69:c2:00:14:fe:1f:ce:0b:77:b6:
b6:8d:94:f0:e6:ed:c9:1a:04:28:ce:1a:f4:28:15:38:37:68:
da:c2:4e:af:a7:fc:45:21:a1:36:ec:0c:0a:50:22:c0:ae:92:
0c:ec:f5:98:ae:11:ca:79:1d:0c:fb:14:e8:5f:02:3c:75:69:
ef:b7:a4:49:36:53:4b:c3:7a:42:87:8d:89:6e:04:60:4e:4c:
5e:ab:cf:3f:ff:11:3a:08:6d:fe:87:fc:45:54:35:f4:b2:95:
d4:ba:5e:2f:6c:c7:7a:42:7b:8e:4e:ea:13:e7:b3:77:72:04:
9c:c3:21:db:9a:01:05:b2:cf:61:fa:dc:f9:7e:83:82:69:1b:
cc:a3:11:5b:12:dd:6a:c9:ad:44:37:3a:92:eb:41:68:b0:71:
37:32:93:48:43:cd:6f:5a:d8:ea:e4:1b:d4:4d:b2:03:73:f2:
e6:5a:b6:f3:c4:f0:70:41:8a:40:e7:44:99:1e:ea:c7:d2:25:
a9:e7:df:a7:49:9e:9a:f9:de:ab:bc:8c:f8:dd:00:39:d6:8c:
ce:6d:f9:dd:82:1b:00:f0:ea:df:77:b5:2a:10:48:b1:8c:ce:
da:ba:6d:b8:18:ed:67:7e:48:93:47:88:cf:fb:9b:be:32:be:
80:d2:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:12 2026 by rpki-client