Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e38362e33322e302f31392d3234203d3e203630363634.roa
File: 38382e38362e33322e302f31392d3234203d3e203630363634.roa (raw, json)
Hash identifier: qh7A5okAhc7IjDfHAWWVkwl97MNUWWq1DzlvUKG+Y60=
Subject key identifier: AD:3F:8E:B2:D1:CD:DA:1D:0E:97:29:A4:89:AC:2C:71:E6:64:B7:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06BF8D2D95B84F8B730167638E5E2ACFB6F73FB7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e38362e33322e302f31392d3234203d3e203630363634.roa
Signing time: Fri 24 Apr 2026 18:23:55 +0000
ROA not before: Fri 24 Apr 2026 18:18:55 +0000
ROA not after: Fri 23 Apr 2027 18:23:55 +0000
asID: 60664
IP address blocks: 88.86.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bf:8d:2d:95:b8:4f:8b:73:01:67:63:8e:5e:2a:cf:b6:f7:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 24 18:18:55 2026 GMT
Not After : Apr 23 18:23:55 2027 GMT
Subject: CN=AD3F8EB2D1CDDA1D0E9729A489AC2C71E664B7C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:02:5d:ac:e1:c6:56:a0:db:67:c4:a0:d1:
37:25:3c:54:35:75:18:3f:a9:a4:87:bf:75:dc:0e:
71:4d:f9:b2:a6:67:d5:9d:ea:7c:8f:53:9b:4a:e8:
cd:62:a0:9b:8f:7f:ba:25:2e:68:4b:49:f9:a5:52:
e9:97:47:3a:b6:d8:4e:8a:41:76:06:c5:79:e5:2a:
2e:03:d0:64:21:e6:3a:ce:ff:4c:83:52:b2:f7:30:
9f:ed:dc:92:73:99:86:1c:fa:d5:b3:cc:17:50:18:
7e:e5:9a:24:ac:4c:47:c2:25:2c:f3:ba:ad:9d:ae:
fe:2a:dc:63:ad:39:51:81:55:07:60:38:b1:79:a0:
77:53:cf:74:60:67:2f:66:a9:98:75:11:42:f7:3a:
dd:f8:a0:72:74:b0:53:ce:d4:9c:7c:01:97:32:2f:
0e:e4:f5:6c:32:e4:4e:cb:c2:c4:c9:2d:dd:f8:17:
2f:dd:19:6b:cb:40:b9:10:b0:da:33:db:c0:67:42:
ac:a3:50:b6:f5:34:ba:63:2a:4e:35:a4:70:46:28:
37:e7:af:12:8d:f5:ea:7d:d7:80:87:9d:80:a3:53:
df:8b:2a:d0:d0:9d:6b:00:39:99:80:16:9e:dc:c5:
5a:06:e4:a4:2a:4d:7c:86:7c:33:0a:3f:3d:37:ac:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:8E:B2:D1:CD:DA:1D:0E:97:29:A4:89:AC:2C:71:E6:64:B7:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e38362e33322e302f31392d3234203d3e203630363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
00:f0:ce:7c:19:54:cc:d7:34:fa:54:fb:75:06:00:80:84:0e:
e3:5f:c8:55:bc:08:be:78:5f:d6:c9:29:5f:a9:95:96:98:1b:
28:9f:02:ed:fd:a1:4f:4b:21:9a:28:64:0c:de:e4:15:38:cb:
d0:05:b2:62:e4:5a:03:5d:3c:ad:73:59:b5:67:8f:fc:8a:dc:
c6:d8:47:52:e0:be:4c:63:73:f0:2d:25:c1:22:1a:b1:5e:a7:
3d:d7:5e:7a:fe:8f:4f:f1:80:44:15:66:49:6a:14:ad:93:1b:
d0:c6:98:73:6d:53:4e:c8:92:09:15:8d:74:0c:b1:17:89:f9:
27:85:84:4f:85:35:cf:53:6e:b9:fa:61:e9:fc:90:5c:6b:e4:
80:0b:08:b9:5a:6f:59:58:27:13:c8:b7:1a:b0:30:64:2e:d0:
44:5f:15:4e:9f:3b:12:82:ea:f8:6b:fc:ad:39:f3:f3:f9:2a:
14:60:7c:e2:b5:46:b8:66:78:0d:61:42:71:82:42:d4:42:91:
43:6f:df:d8:7a:87:7e:30:b8:d2:6b:f1:20:08:c5:98:53:8d:
59:43:ab:78:b0:ff:1b:95:1a:1b:58:9d:67:4f:43:1d:8d:a4:
03:e4:5d:6d:bc:a2:9f:e2:cd:94:f8:5b:c6:1c:37:68:ad:77:
e8:d7:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:01 2026 by rpki-client