Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e20323136313531.roa
File: 38382e3231382e3230302e302f32342d3234203d3e20323136313531.roa (raw, json)
Hash identifier: A/GDIeJzDpxu3HX6pkQ8ovqORObsCf/QhPVfNjiVm4I=
Subject key identifier: 3C:55:AA:8E:64:9B:91:DF:5C:A2:EC:55:BA:42:17:C2:16:64:CA:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B676EE195DC4AE7FB1A34DEB29D488C090A7A6E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e20323136313531.roa
Signing time: Wed 25 Mar 2026 12:23:31 +0000
ROA not before: Wed 25 Mar 2026 12:18:31 +0000
ROA not after: Wed 24 Mar 2027 12:23:31 +0000
asID: 216151
IP address blocks: 88.218.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:67:6e:e1:95:dc:4a:e7:fb:1a:34:de:b2:9d:48:8c:09:0a:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 25 12:18:31 2026 GMT
Not After : Mar 24 12:23:31 2027 GMT
Subject: CN=3C55AA8E649B91DF5CA2EC55BA4217C21664CA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:3f:fa:5c:39:81:1b:f0:3f:62:ee:11:e8:
56:d3:d8:49:23:0a:62:5c:30:2a:69:53:fc:c5:f4:
ec:6c:11:3d:90:c1:66:4d:9f:d2:8c:a8:16:80:08:
67:c8:3c:7f:22:69:e8:4c:1a:2b:9d:d3:88:65:b8:
dc:01:ea:97:e0:3d:06:df:4b:34:18:4f:28:17:6d:
1e:31:5f:7d:e8:65:ad:5a:1b:46:a9:7d:6e:7f:0c:
6e:d5:d1:52:36:82:4a:1d:45:ed:ab:07:40:f2:94:
13:21:8f:c5:c7:d3:a8:15:6d:a2:78:4c:06:45:e3:
6d:e7:7d:96:e3:11:86:64:a8:09:c2:0f:b8:4b:2a:
0c:79:80:dc:e4:f5:6c:a4:7e:ed:36:82:2e:73:9b:
12:b4:a4:50:7f:fe:da:76:ce:75:f2:7b:be:20:73:
c6:91:45:b0:46:f2:9b:09:4d:d7:a7:7d:22:3d:5a:
e0:4d:7b:7c:af:74:83:67:ff:47:f0:79:f3:53:4e:
33:f1:ff:d9:e4:f3:6b:03:3a:1e:62:b3:e3:35:6f:
1b:e8:59:11:3c:07:ea:d7:35:6a:65:e7:18:37:04:
ca:44:7b:86:e1:54:d4:ea:a2:1e:6c:f2:a2:93:48:
19:a5:a5:40:04:12:d7:ca:b1:ab:d2:47:41:c9:95:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:AA:8E:64:9B:91:DF:5C:A2:EC:55:BA:42:17:C2:16:64:CA:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230302e302f32342d3234203d3e20323136313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.200.0/24
Signature Algorithm: sha256WithRSAEncryption
68:51:03:15:89:76:3e:46:56:08:ef:61:4d:0c:d8:16:1f:ac:
59:5c:88:87:b5:8a:03:fd:ad:67:fe:25:29:8d:b0:a9:84:51:
2f:58:3d:61:db:be:53:e6:6d:01:3a:cf:c8:4a:4c:8f:af:3c:
ed:66:73:ea:40:b0:cb:17:b2:57:04:48:33:a9:31:93:84:e5:
a3:40:a2:2e:37:95:a6:b9:0f:c6:83:e4:36:68:25:e7:62:61:
5f:74:9f:46:36:ec:30:cc:7b:cb:51:b6:e2:fb:35:b5:ca:87:
c6:b1:9c:5d:ea:25:5d:3d:6e:9c:cb:a2:b9:02:f2:27:b5:fd:
e0:50:b9:3b:84:b0:b8:79:55:72:93:a4:3f:1e:7d:52:31:b4:
94:51:4a:d1:b9:cf:31:d7:49:38:96:0c:6b:9d:9e:4c:0d:c0:
05:ed:1f:b5:a7:6b:25:8b:c0:7a:b3:a0:7e:13:6a:c6:51:8c:
e4:97:14:9e:5f:22:ba:4f:99:99:d8:47:5f:3d:51:23:8b:f0:
a1:67:3b:68:d0:9d:ea:80:95:7c:0f:5e:c4:d3:ed:c9:fb:0f:
76:d2:3b:75:e3:b7:9b:69:17:6c:32:1e:d3:7f:12:4e:18:24:
57:41:16:fa:e2:97:6d:f7:ea:cb:48:55:a2:9c:c7:39:80:86:
7d:49:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:09 2026 by rpki-client