Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e33312e302f32342d3234203d3e20313336373837.roa
File: 38362e36322e33312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Y57fFKKlFWsH4Mpv6shKmrO3isO8OVjellSr/tgAFWs=
Subject key identifier: 9F:F8:2A:7B:DF:54:E6:58:6E:8D:D5:42:C7:DB:9F:7D:E9:DA:8E:FE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37395BE9711453FCB0E6121C41B4A85A19A343ED
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e33312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 17 Sep 2026 16:29:01 +0000
ROA not before: Thu 17 Sep 2026 16:24:01 +0000
ROA not after: Thu 16 Sep 2027 16:29:01 +0000
asID: 136787
IP address blocks: 86.62.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:39:5b:e9:71:14:53:fc:b0:e6:12:1c:41:b4:a8:5a:19:a3:43:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 17 16:24:01 2026 GMT
Not After : Sep 16 16:29:01 2027 GMT
Subject: CN=9FF82A7BDF54E6586E8DD542C7DB9F7DE9DA8EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:a3:5c:fc:7a:e6:89:50:46:59:1d:0a:25:
d8:35:76:92:f7:a6:30:82:7b:f6:35:ae:1f:33:67:
e4:a2:e2:0d:c5:46:58:e5:7f:51:9f:e6:14:ab:49:
22:0d:94:3d:01:3b:5d:ec:6f:39:17:af:66:94:ae:
70:12:d9:b1:2e:1d:a5:86:79:3d:18:3e:13:61:b2:
e1:77:78:41:45:93:5d:f7:47:7a:bd:8b:ed:58:ba:
27:04:6d:d8:74:95:06:2c:67:33:b2:4a:fe:20:af:
44:bd:17:55:60:81:68:af:6c:e5:83:23:54:be:04:
d1:4f:32:a7:b9:2a:5a:cf:64:67:93:33:fd:68:fe:
35:bd:a8:aa:fe:01:92:95:b1:16:dc:09:f0:1b:85:
bd:18:19:52:e5:e9:e4:22:b8:63:6c:a6:9e:6e:33:
a6:13:c7:5b:a4:e8:aa:f3:63:66:22:00:5d:74:93:
e1:cb:27:bb:e4:34:b6:9d:52:a7:1a:8e:6a:78:3e:
19:60:90:53:7d:78:84:9a:ef:c2:73:44:98:14:44:
c8:96:14:4f:ec:71:d8:53:d8:30:6f:a9:9a:6d:5e:
18:97:a6:0e:51:b8:f3:1e:0a:25:34:45:c6:78:01:
8b:76:6f:1c:ed:0c:da:98:a4:a7:99:96:86:52:61:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:2A:7B:DF:54:E6:58:6E:8D:D5:42:C7:DB:9F:7D:E9:DA:8E:FE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e33312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.31.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2e:42:31:4c:c0:91:b7:be:cc:d2:a2:09:3d:f5:c0:33:83:
f7:fc:32:f4:f2:50:99:e4:31:20:73:51:d0:fd:c0:11:a0:cf:
ad:7b:88:2b:05:d5:af:ba:ef:e1:dc:f5:48:47:f8:42:6e:a7:
b6:14:3a:ab:ff:d5:6c:d1:f2:20:c5:a6:ef:59:28:0d:80:29:
d0:8e:fa:26:e6:e6:1e:a9:39:3e:88:e6:40:92:10:e4:c4:af:
9f:e2:b1:52:1a:ef:8b:24:0b:bd:af:15:ab:36:e4:2d:3b:69:
a3:29:f5:83:7c:4d:d6:57:f0:42:52:21:51:37:53:4a:ab:7b:
a3:88:ef:7c:b7:49:a9:ff:99:28:fd:01:a5:57:aa:46:3c:96:
55:76:5c:1c:42:6e:83:21:ab:94:61:9d:9b:44:bb:37:5c:7a:
68:e2:0f:d1:66:50:00:e7:7a:e9:aa:17:d6:4b:4a:14:b3:35:
21:22:42:54:53:37:78:43:24:ed:6a:bb:70:05:88:14:33:01:
d6:af:5f:bb:31:77:38:26:ed:4a:86:19:c3:d6:f9:ea:a5:43:
c5:96:51:b0:77:37:21:4a:6b:c7:8e:58:d4:f2:96:cf:76:a5:
ca:a8:c1:66:5c:e6:af:0f:cf:f1:bb:a3:50:d5:2b:fa:53:e0:
a6:bf:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:54:30 2026 by rpki-client