Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
File: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier: ja3+U57yAGxxGr5Um51OCVQtaQ7uJbanl/ykt0EuLwg=
Subject key identifier: 6D:18:4C:D4:5B:83:20:E4:06:53:47:E2:20:19:23:0D:E3:E0:8D:33
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 3BCBF74698896D8CEBF554314BD1642075FFDF72
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
Signing time: Mon 14 Sep 2026 19:49:35 +0000
ROA not before: Mon 14 Sep 2026 19:44:35 +0000
ROA not after: Mon 13 Sep 2027 19:49:35 +0000
asID: 48925
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cb:f7:46:98:89:6d:8c:eb:f5:54:31:4b:d1:64:20:75:ff:df:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Sep 14 19:44:35 2026 GMT
Not After : Sep 13 19:49:35 2027 GMT
Subject: CN=6D184CD45B8320E4065347E22019230DE3E08D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:00:85:c6:fe:18:49:cd:c5:0a:f6:74:71:
fb:6a:42:62:51:bf:68:90:15:c2:3e:42:6a:6c:09:
7c:c6:80:cf:9a:81:61:28:01:6c:73:f8:fb:35:49:
3b:70:fd:ca:f1:d5:53:56:8d:49:b5:99:29:00:e6:
91:5e:9b:e5:c0:b8:3c:71:c9:69:88:dc:30:45:87:
82:60:e2:b2:4b:a0:34:ee:1c:2e:5c:b8:bd:ab:6e:
9b:88:29:3a:4c:dc:47:d7:12:6d:9f:c5:18:43:56:
87:61:8b:f9:6c:73:95:df:b5:32:3b:d1:0f:4e:09:
57:70:ec:97:db:29:65:83:e7:22:0d:b7:aa:b8:22:
bf:43:e7:a6:a6:b8:2c:0c:e5:4b:ee:b9:92:49:a8:
28:67:b8:de:78:b8:13:22:66:f6:7a:b6:6c:25:56:
68:6d:9d:4a:ad:84:ce:bc:eb:ac:12:be:27:2c:a8:
41:c9:a2:1d:a4:32:a7:a9:55:ea:2e:31:7c:ab:68:
91:0a:c2:8b:8d:30:bd:b3:94:1c:0b:ab:24:5d:86:
da:bb:d4:f4:09:a9:ec:db:db:3d:fb:e5:55:96:1e:
51:b1:cb:48:72:6b:9c:9f:f7:56:13:30:ca:a9:36:
78:dc:ba:d4:36:47:de:ef:ba:5b:35:23:d7:54:18:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:4C:D4:5B:83:20:E4:06:53:47:E2:20:19:23:0D:E3:E0:8D:33
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d6:f6:d5:82:6f:86:d4:37:fc:15:00:f7:f4:95:fe:e2:dd:
d3:0f:7b:d6:7f:35:fc:55:1c:3a:0a:ed:ff:4b:05:ba:7b:2f:
79:97:0b:5c:53:3b:31:0c:94:59:c8:b1:3f:20:6d:74:fa:80:
72:62:6a:78:00:58:f1:88:8c:38:2a:e9:3d:c3:92:d3:22:89:
2f:06:fc:67:d9:07:61:b5:c1:2c:c2:8e:70:fc:ed:f8:5c:59:
e5:e1:5a:4a:ac:d7:24:91:e6:87:3f:33:f9:b8:7c:25:2b:39:
d7:3f:00:7e:bc:17:8d:0a:b4:b0:76:76:91:fe:c7:93:56:b4:
2e:19:79:07:65:a1:31:16:60:97:24:77:e7:9f:d8:05:41:c9:
e5:d3:d9:dc:3d:ac:11:d1:f1:d9:c1:59:16:79:e4:7b:3a:45:
17:35:ee:3b:12:b1:69:15:6d:2d:cd:97:be:5e:e3:05:01:76:
7f:dd:ee:59:8c:34:fe:68:c6:5e:d7:df:18:9b:cb:f3:6c:43:
bc:db:45:e1:0f:3d:ac:ac:9d:bd:4d:0d:c8:5b:67:2c:8a:ff:
1c:e9:42:a8:b6:0e:7b:66:0c:c1:74:77:33:5d:46:c8:a5:ad:
3b:92:a7:54:bb:1b:1c:49:3d:5d:fa:b3:41:b2:7d:fc:5e:47:
81:67:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:35:09 2026 by rpki-client