Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e362e302f32332d3332203d3e203531313637.roa
File: 38362e34382e362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: lliqghZ74gpl5peNRsTrR7Sja8VluDREy3ub2SYnHqI=
Subject key identifier: EB:3A:6B:1E:E2:AB:B4:5F:18:C4:3A:C9:07:64:2F:39:18:A7:74:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45811A4B51B7CD6AAEA43B07CE1E97316088DE77
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e362e302f32332d3332203d3e203531313637.roa
Signing time: Wed 25 Mar 2026 14:23:32 +0000
ROA not before: Wed 25 Mar 2026 14:18:32 +0000
ROA not after: Wed 24 Mar 2027 14:23:32 +0000
asID: 51167
IP address blocks: 86.48.6.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:81:1a:4b:51:b7:cd:6a:ae:a4:3b:07:ce:1e:97:31:60:88:de:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 14:18:32 2026 GMT
Not After : Mar 24 14:23:32 2027 GMT
Subject: CN=EB3A6B1EE2ABB45F18C43AC907642F3918A77463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:ff:8a:96:38:6e:72:c6:a6:d1:66:06:7b:
60:72:ed:22:18:53:6d:50:c6:05:e4:1e:a8:40:6f:
ac:5f:e6:df:3f:22:ba:ca:a2:99:2d:e2:b4:11:e1:
0e:fd:40:2e:40:14:25:b2:e6:22:71:87:dd:86:80:
ed:d3:7b:44:5b:fd:e6:38:64:cb:4c:5b:b2:63:da:
aa:a4:b1:a5:92:b8:ae:6e:d2:ef:5d:84:cc:83:eb:
a3:b2:51:17:2f:eb:27:85:dc:67:d9:9e:cf:09:9f:
29:f6:96:a4:2d:91:47:b7:d9:68:cb:3e:0e:9d:4f:
a8:65:4e:4f:b6:c8:13:ba:20:6c:eb:55:f0:c4:cd:
3d:83:d5:86:76:1e:20:79:7e:e9:bc:c2:57:a0:55:
f0:ea:8d:7e:a3:5d:00:a0:41:f4:5f:fe:18:dd:71:
7e:fc:45:f2:0e:78:8e:5e:9b:e2:e6:8d:be:81:99:
f6:0e:56:3e:4d:32:54:0e:45:08:47:79:04:2e:53:
b6:65:e6:11:55:05:00:67:54:ea:be:83:40:55:ee:
bd:98:ab:ae:7d:cc:ba:e4:12:08:d0:3b:a3:4f:30:
5d:10:f2:99:9f:c0:ce:54:ed:15:af:56:cf:7e:e5:
70:9d:48:c7:a4:13:67:ad:0a:a4:e7:50:90:03:ed:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:6B:1E:E2:AB:B4:5F:18:C4:3A:C9:07:64:2F:39:18:A7:74:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:83:4d:09:59:b4:51:fd:eb:01:b2:40:c9:27:ed:85:41:ac:
5c:3e:de:03:59:ee:67:29:b0:33:cb:0a:1c:e8:fd:55:60:e2:
20:79:4f:d2:f0:88:de:2b:bb:ee:71:44:38:0e:84:bc:fe:f4:
fd:1b:d5:89:00:0d:34:dd:f6:5a:fe:56:57:5d:97:c8:24:e9:
88:0d:2b:03:d2:15:54:fa:8c:17:49:8a:f5:21:9d:a1:1a:99:
5d:19:ca:46:70:ff:ea:2e:82:c6:09:50:14:f9:a0:48:13:c7:
73:27:07:56:69:fb:73:a2:1f:22:35:b7:5e:b3:bd:40:4c:2e:
25:9e:99:81:37:91:24:08:96:8a:76:d3:17:75:9d:1a:c9:83:
0b:94:04:86:ae:fc:24:98:b4:b0:21:4e:3d:1c:d9:df:bc:34:
6f:25:82:c8:7f:d4:a4:8b:e8:e6:f8:eb:e9:49:80:8d:1d:3c:
04:30:43:69:ad:a1:ba:37:70:4c:1e:7d:1d:4e:32:57:be:15:
9e:a0:f5:60:60:42:6c:71:b5:6c:05:48:c4:61:02:4e:6f:01:
87:36:f3:bf:5b:62:ba:b4:60:55:3f:ea:d5:87:d4:d6:57:70:
98:04:17:97:e5:30:a8:7d:a4:d8:d8:f5:93:99:ad:eb:20:d3:
5b:6b:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:23 2026 by rpki-client