Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
File: 38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa (raw, json)
Hash identifier: CMG8MXsy47f53AzeyWnWUictUKqJ+gyP5XomQENiasY=
Subject key identifier: 81:DB:E2:92:3C:E8:35:B0:5F:3C:0D:D6:4D:D6:1C:4E:1E:11:96:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 488A31E95DE028A36976B998C983654D41414C2B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
Signing time: Tue 03 Feb 2026 10:23:13 +0000
ROA not before: Tue 03 Feb 2026 10:18:13 +0000
ROA not after: Tue 02 Feb 2027 10:23:13 +0000
asID: 206283
IP address blocks: 82.180.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8a:31:e9:5d:e0:28:a3:69:76:b9:98:c9:83:65:4d:41:41:4c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 10:18:13 2026 GMT
Not After : Feb 2 10:23:13 2027 GMT
Subject: CN=81DBE2923CE835B05F3C0DD64DD61C4E1E119696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:a4:97:65:d1:05:86:24:a4:ff:3a:7c:ef:
5a:ea:07:0d:8c:d8:65:e9:13:2c:02:6c:ba:db:95:
97:0b:88:cf:0b:a2:41:a2:75:2f:ca:c9:dc:b8:3c:
26:4b:c9:2d:b1:09:0c:2c:87:58:a8:16:a8:7e:f6:
29:55:3a:7f:35:a9:a2:33:b8:f7:39:7c:f4:3f:c9:
5c:b6:b5:fb:ce:b6:3b:ff:fe:33:4f:83:39:cd:33:
38:f7:60:70:7a:02:3f:df:62:47:97:58:bb:87:5f:
97:1e:4e:87:dc:9e:87:84:0d:02:3b:80:78:eb:5b:
e5:43:4b:d0:78:3c:94:c7:57:f8:4e:59:e8:3c:c1:
82:fd:2b:71:81:fa:97:65:80:95:73:9c:54:14:c0:
0b:8f:09:b5:b8:78:fe:8c:d9:6a:24:ed:3f:2d:bc:
fb:0c:ac:9b:03:3f:89:6b:60:69:e6:91:ea:22:c0:
59:76:00:42:c3:51:52:6a:b5:5c:97:25:bd:43:04:
13:28:5f:c4:16:f7:a5:4b:a4:6c:8b:09:ba:53:0a:
96:56:f3:65:f3:ca:a6:0d:18:b9:ff:b5:f3:02:9b:
a7:de:fc:b8:d9:79:15:82:e0:dd:78:0c:b2:89:63:
e7:fe:cb:83:c6:7a:1c:66:a6:d9:85:fc:e9:62:11:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:E2:92:3C:E8:35:B0:5F:3C:0D:D6:4D:D6:1C:4E:1E:11:96:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.176.0/21
Signature Algorithm: sha256WithRSAEncryption
74:9a:07:8e:a4:0e:dc:34:69:b0:88:03:0a:d1:c4:3a:34:d8:
4e:bf:f0:37:78:63:e9:75:30:fb:92:92:09:2f:a9:de:fe:36:
da:95:09:1b:43:0b:48:a8:f8:bb:d3:e9:12:05:e0:0f:f1:60:
c1:93:11:e4:52:cd:cd:57:17:a6:44:2e:28:47:2f:6e:a6:20:
b8:68:97:57:e2:ab:c2:44:74:8e:27:24:5e:b0:74:9c:4a:60:
35:4c:8f:8d:0c:51:d2:2a:54:36:13:ea:ac:db:7d:e9:f0:83:
6a:7a:12:75:2a:64:0b:e1:a6:f0:34:fc:9f:3e:31:cd:39:c4:
a9:95:06:b4:0a:72:8d:36:73:f7:b2:1b:d1:0e:af:9e:c3:de:
e9:f6:5f:e5:c5:2e:ea:e6:6d:78:bd:44:1a:ef:51:91:67:6c:
32:f4:82:72:c6:19:2b:8b:24:e3:56:0a:4f:3d:a4:7d:78:f9:
09:ee:e0:a4:aa:26:74:c3:20:b2:18:fc:10:34:d3:c8:3c:a8:
42:c2:fa:7a:61:6b:64:dd:23:c3:4f:a3:73:21:45:79:f4:34:
ab:63:2b:f1:6a:c9:f1:5f:c0:10:9e:a6:3c:a3:ad:22:76:df:
ed:b9:79:a9:5d:b4:e4:9e:13:da:68:74:12:37:6b:70:77:f9:
79:81:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:15 2026 by rpki-client