Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030323231.roa
File: 38322e3131382e32362e302f32342d3234203d3e20323030323231.roa (raw, json)
Hash identifier: +TWwMpXf2vZgkgu3Eg8xML5AK2QEZcy6pOG8WiuSQ3o=
Subject key identifier: AB:7B:EB:0A:28:70:35:B1:5B:F3:4E:26:3C:AE:23:7B:51:9B:9A:4C
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 73059DEC657F1381AB4D2074E9CA1FD7DFDA2FF7
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030323231.roa
Signing time: Fri 05 Jun 2026 07:43:48 +0000
ROA not before: Fri 05 Jun 2026 07:38:48 +0000
ROA not after: Fri 04 Jun 2027 07:43:48 +0000
asID: 200221
IP address blocks: 82.118.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:05:9d:ec:65:7f:13:81:ab:4d:20:74:e9:ca:1f:d7:df:da:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Jun 5 07:38:48 2026 GMT
Not After : Jun 4 07:43:48 2027 GMT
Subject: CN=AB7BEB0A287035B15BF34E263CAE237B519B9A4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:61:08:13:58:30:e4:94:ff:88:b6:17:bd:
25:d7:c2:9b:14:d2:00:01:ac:14:5d:48:35:2f:76:
e7:c7:4d:12:82:b4:5a:83:3c:1d:66:44:fc:b6:36:
68:35:db:bf:79:fc:2c:c7:56:2c:c5:e8:86:ee:aa:
e5:c8:a2:8a:bc:f8:5d:3c:d8:b3:48:72:c3:27:cf:
d9:70:24:4a:23:b9:e6:76:12:00:37:9e:09:8d:df:
dc:42:e3:57:28:a8:56:ef:cb:a4:ed:10:97:c3:68:
cd:29:56:e5:d1:6d:d2:6c:ab:da:02:2c:e1:de:31:
68:71:9c:d2:72:67:b9:a2:c4:52:93:a5:cc:55:3e:
77:c6:e4:7b:0f:b0:6d:45:78:3b:a4:c0:c6:32:fe:
cc:bd:de:f5:70:63:b0:af:e4:94:86:77:84:6a:a1:
2a:93:78:61:76:c4:a7:e5:72:ab:8c:4b:7d:a1:8b:
b3:86:d0:54:b1:6c:85:6b:a9:ec:da:85:e7:30:c7:
93:91:7f:6d:a9:38:b2:52:2c:29:19:2d:d9:73:3d:
3a:69:ed:32:4c:1e:23:5b:4c:7b:2d:ea:99:b6:cc:
96:92:39:1a:54:5b:1d:59:75:b2:4b:6d:6d:3e:ae:
da:e7:20:ac:2f:ea:75:16:b7:f9:02:6e:f3:ce:50:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7B:EB:0A:28:70:35:B1:5B:F3:4E:26:3C:AE:23:7B:51:9B:9A:4C
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323030323231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a7:25:20:ff:ca:8a:82:ad:e9:9a:3a:10:7e:75:8a:1f:4c:
23:96:be:7b:09:b7:ab:85:c5:ab:d1:12:af:ff:fc:d6:6b:5e:
45:b8:7f:bb:1e:a7:7b:63:d4:c4:80:cd:a2:02:12:ff:9e:0f:
e1:0e:a0:3b:44:48:5f:ee:77:d4:4a:af:48:e6:9f:94:d4:7f:
12:a3:76:f3:a9:38:7f:20:e9:ae:09:8b:7b:d4:aa:ee:c3:1d:
82:3d:24:e5:9b:d7:e1:56:26:34:c3:ac:7e:dd:66:79:3b:59:
31:68:d9:68:8b:5d:66:f7:50:1f:b0:f9:82:30:02:12:ce:1c:
62:83:d4:e7:7a:36:ad:9c:e4:59:8e:20:c2:4b:3a:78:36:f4:
c5:e9:8f:e2:bc:95:ef:9c:a8:6c:11:72:b1:88:7c:b0:48:5c:
da:db:39:02:5e:e9:34:4e:ac:e5:09:cc:ba:ca:9f:ce:77:a6:
09:fc:b3:37:11:27:91:76:e8:ee:39:38:fe:1c:96:2a:02:55:
d8:25:f1:46:e3:d7:1f:49:0b:7a:88:1b:aa:38:37:0b:b5:07:
52:d5:ed:e4:22:0b:02:a1:a9:06:3c:a1:f1:77:db:1d:af:93:
fa:be:bc:d1:eb:53:e2:c9:c5:f3:7a:95:b0:00:cf:03:87:d2:
02:75:e2:01
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUcwWd7GV/E4GrTSB06cof19/aL/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNjA2MDUwNzM4NDhaFw0yNzA2MDQwNzQzNDhaMDMxMTAvBgNV
BAMTKEFCN0JFQjBBMjg3MDM1QjE1QkYzNEUyNjNDQUUyMzdCNTE5QjlBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkd2EIE1gw5JT/iLYXvSXXwpsU
0gABrBRdSDUvdufHTRKCtFqDPB1mRPy2Nmg12795/CzHVizF6IbuquXIooq8+F08
2LNIcsMnz9lwJEojueZ2EgA3ngmN39xC41coqFbvy6TtEJfDaM0pVuXRbdJsq9oC
LOHeMWhxnNJyZ7mixFKTpcxVPnfG5HsPsG1FeDukwMYy/sy93vVwY7Cv5JSGd4Rq
oSqTeGF2xKflcquMS32hi7OG0FSxbIVrqezahecwx5ORf22pOLJSLCkZLdlzPTpp
7TJMHiNbTHst6pm2zJaSORpUWx1ZdbJLbW0+rtrnIKwv6nUWt/kCbvPOUOOPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUq3vrCihwNbFb804mPK4je1GbmkwwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzgzMjJlMzEzMTM4MmUzMjM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzIzMjMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UnYaMA0GCSqGSIb3DQEBCwUAA4IBAQBNpyUg/8qKgq3pmjoQfnWKH0wjlr57Cber
hcWr0RKv//zWa15FuH+7Hqd7Y9TEgM2iAhL/ng/hDqA7REhf7nfUSq9I5p+U1H8S
o3bzqTh/IOmuCYt71Kruwx2CPSTlm9fhViY0w6x+3WZ5O1kxaNloi11m91AfsPmC
MAISzhxig9TnejatnORZjiDCSzp4NvTF6Y/ivJXvnKhsEXKxiHywSFza2zkCXuk0
TqzlCcy6yp/Od6YJ/LM3ESeRdujuOTj+HJYqAlXYJfFG49cfSQt6iBuqODcLtQdS
1e3kIgsCoakGPKHxd9sdr5P6vrzR61PiycXzepWwAM8Dh9ICdeIB
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:47 2026 by rpki-client