Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31392e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e31392e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: gkG1QIY/2LeeELhc5V+nQU93Vfo/Bei80wVvnAHK6Dc=
Subject key identifier: 07:54:E2:FE:35:B4:F9:FE:E2:95:22:96:35:7A:78:72:5D:8F:EA:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A24947F0D3CC3377195E5DB8A5EC9E31D8CF669
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31392e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 03 Feb 2026 10:23:14 +0000
ROA not before: Tue 03 Feb 2026 10:18:14 +0000
ROA not after: Tue 02 Feb 2027 10:23:14 +0000
asID: 206283
IP address blocks: 80.75.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:24:94:7f:0d:3c:c3:37:71:95:e5:db:8a:5e:c9:e3:1d:8c:f6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 10:18:14 2026 GMT
Not After : Feb 2 10:23:14 2027 GMT
Subject: CN=0754E2FE35B4F9FEE2952296357A78725D8FEA0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9c:36:c2:c9:b0:42:27:04:8c:35:29:a6:d5:
2d:41:16:f9:08:a8:dc:2b:62:e9:9c:78:78:7e:9a:
19:b4:57:59:99:0b:e8:d6:3e:08:95:37:3d:7f:3b:
a2:83:17:e8:cb:b4:ec:18:be:03:03:73:a9:cf:58:
8b:5f:0f:ac:68:f4:06:86:c7:c8:71:6b:34:66:d5:
6b:59:4a:d3:4b:1d:be:4c:36:af:e6:c4:59:c6:79:
86:27:1c:35:eb:75:72:dc:dc:5a:ce:4e:8a:3d:08:
ca:81:d2:ff:45:5a:13:0e:94:23:2b:64:21:9b:20:
ad:8a:00:67:9f:10:14:fb:9d:04:1c:aa:47:13:dc:
ad:d9:cb:a9:43:38:b4:51:a0:78:e9:93:a4:b5:20:
c8:de:72:5d:73:82:21:f8:5e:89:91:9b:19:8f:33:
ec:a6:fb:cc:d5:28:61:0a:f9:80:bc:17:de:f7:2e:
10:e9:69:30:1b:43:70:bd:a9:35:60:d4:b8:3c:1e:
43:dd:16:76:1c:c8:fa:69:66:b2:87:eb:ea:cd:0c:
36:47:86:e9:1d:96:ea:2e:a7:32:09:91:70:a9:c5:
8a:b6:f9:a8:7b:d4:f6:0d:1a:93:d1:56:a4:89:9d:
6b:54:df:79:2c:4d:0e:20:aa:92:0b:91:8d:83:31:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:E2:FE:35:B4:F9:FE:E2:95:22:96:35:7A:78:72:5D:8F:EA:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31392e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.19.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a2:47:86:d5:c0:6a:73:08:18:a9:f7:ea:ae:a5:20:cb:80:
9f:75:5a:2c:c6:59:37:38:b9:77:4d:a7:d1:97:a6:53:86:b3:
9a:33:f7:4a:8f:6b:2c:f1:36:83:34:af:2a:a9:a5:e3:7d:45:
4b:07:8c:7e:ea:16:78:3b:a9:51:73:05:f1:71:07:42:90:0a:
f9:0d:6a:71:72:4f:bb:11:8d:e7:cc:ed:1e:83:00:d0:1d:ea:
d3:a3:7c:ca:f9:4a:0c:f5:68:ff:4f:0b:16:1b:99:fc:12:c1:
ca:49:58:51:d8:fb:68:d3:5a:13:f1:57:ab:61:37:c0:2c:4f:
39:2e:b4:85:de:ef:c0:e4:17:dc:f2:0a:2d:05:90:b0:5f:01:
95:49:0a:1d:25:b8:95:8b:20:4e:1a:85:ff:b4:ed:69:46:e5:
10:d6:5e:13:45:87:cc:6a:6d:09:96:3c:0f:a9:69:bf:36:ea:
ef:fd:36:46:c1:5c:9c:86:39:c9:4d:a9:2e:c5:94:bc:2f:92:
b5:3c:c7:62:bc:ac:f8:78:48:5f:5c:02:62:13:4d:f3:1f:dc:
30:4c:0f:aa:8a:ae:f2:af:b0:df:11:8e:02:1c:02:af:ee:f5:
8c:2b:e4:91:13:06:9d:5e:8a:5e:79:00:60:68:54:91:8a:17:
99:4f:77:6b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaiSUfw08wzdxleXbil7J4x2M9mkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMDMxMDE4MTRaFw0yNzAyMDIxMDIzMTRaMDMxMTAvBgNV
BAMTKDA3NTRFMkZFMzVCNEY5RkVFMjk1MjI5NjM1N0E3ODcyNUQ4RkVBMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3nDbCybBCJwSMNSmm1S1BFvkI
qNwrYumceHh+mhm0V1mZC+jWPgiVNz1/O6KDF+jLtOwYvgMDc6nPWItfD6xo9AaG
x8hxazRm1WtZStNLHb5MNq/mxFnGeYYnHDXrdXLc3FrOToo9CMqB0v9FWhMOlCMr
ZCGbIK2KAGefEBT7nQQcqkcT3K3Zy6lDOLRRoHjpk6S1IMjecl1zgiH4XomRmxmP
M+ym+8zVKGEK+YC8F973LhDpaTAbQ3C9qTVg1Lg8HkPdFnYcyPppZrKH6+rNDDZH
hukdluoupzIJkXCpxYq2+ah71PYNGpPRVqSJnWtU33ksTQ4gqpILkY2DMUxjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUB1Ti/jW0+f7ilSKWNXp4cl2P6g8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMDJlMzczNTJlMzEzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjMyMzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBL
EzANBgkqhkiG9w0BAQsFAAOCAQEAHqJHhtXAanMIGKn36q6lIMuAn3VaLMZZNzi5
d02n0ZemU4azmjP3So9rLPE2gzSvKqml431FSweMfuoWeDupUXMF8XEHQpAK+Q1q
cXJPuxGN58ztHoMA0B3q06N8yvlKDPVo/08LFhuZ/BLByklYUdj7aNNaE/FXq2E3
wCxPOS60hd7vwOQX3PIKLQWQsF8BlUkKHSW4lYsgThqF/7TtaUblENZeE0WHzGpt
CZY8D6lpvzbq7/02RsFcnIY5yU2pLsWUvC+StTzHYrys+HhIX1wCYhNN8x/cMEwP
qoqu8q+w3xGOAhwCr+71jCvkkRMGnV6KXnkAYGhUkYoXmU93aw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:34:43 2026 by rpki-client