Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32342d3234203d3e20313938323437.roa
File: 38322e3138302e3137362e302f32342d3234203d3e20313938323437.roa (raw, json)
Hash identifier: i8sGko8q2nyefAsquQkqWVUv/vF5iH97BjdIz2axuPs=
Subject key identifier: 62:4A:B8:71:16:89:B2:B5:21:56:4D:F1:47:98:CF:2A:D5:87:BC:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66DC1FB61E24C02FBE60072F069601681F7EB7E9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32342d3234203d3e20313938323437.roa
Signing time: Tue 03 Feb 2026 10:23:13 +0000
ROA not before: Tue 03 Feb 2026 10:18:13 +0000
ROA not after: Tue 02 Feb 2027 10:23:13 +0000
asID: 198247
IP address blocks: 82.180.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:dc:1f:b6:1e:24:c0:2f:be:60:07:2f:06:96:01:68:1f:7e:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 10:18:13 2026 GMT
Not After : Feb 2 10:23:13 2027 GMT
Subject: CN=624AB8711689B2B521564DF14798CF2AD587BCB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:a5:2a:23:ea:40:20:68:58:2a:79:f7:34:
38:f5:ff:78:d7:e3:84:0d:09:ca:ac:ed:37:b6:73:
66:46:6a:b9:08:e1:45:67:fa:0c:63:9e:70:49:d5:
b7:fa:a3:f6:b0:21:9b:84:e0:67:1a:7d:6f:66:e1:
69:f3:cf:32:52:6f:ac:fc:43:b6:af:20:58:2e:e2:
d5:7d:2e:e7:24:a4:76:00:5a:84:8d:4a:68:a7:cc:
8b:c2:af:e6:ef:46:df:97:d0:cf:57:c0:24:d2:90:
28:c4:fb:72:6d:ce:09:f3:99:c8:4d:0d:01:32:40:
1a:18:41:a5:79:98:8a:3a:3b:51:23:3f:87:0d:b4:
c1:ee:65:dc:8e:21:49:9f:57:93:b2:27:bc:75:08:
fd:27:c9:49:ce:7f:f6:d2:9c:30:42:78:b8:3e:18:
bc:94:09:ce:81:55:23:a0:df:bd:68:6b:1d:f5:81:
47:96:3c:18:5a:f2:50:73:c2:bd:88:44:99:b8:97:
91:af:df:17:c5:95:83:2d:36:e8:4b:f6:de:1f:e7:
1e:ad:39:f3:7e:fa:05:ac:4d:82:88:79:96:a5:44:
23:30:ef:3a:43:90:96:85:38:c9:fc:93:62:38:6b:
f6:6d:53:e0:e7:88:67:54:32:7f:72:ee:64:c4:da:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:B8:71:16:89:B2:B5:21:56:4D:F1:47:98:CF:2A:D5:87:BC:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32342d3234203d3e20313938323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.176.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ab:3e:00:8a:ad:a8:4f:ca:e6:56:ed:f1:63:0c:33:96:6f:
c0:36:94:47:ce:dc:f5:a7:77:4a:1f:9c:49:e2:38:4a:06:23:
4f:9d:19:78:15:27:06:47:ab:2c:1c:5d:c8:2a:3d:cc:89:22:
27:01:c2:a3:0d:a3:bf:71:48:ad:48:48:4d:7b:af:30:78:6f:
21:60:f4:4a:6f:e1:3c:5e:c7:c4:a7:7d:1b:77:ee:80:59:70:
30:f1:e7:0d:9a:01:77:7a:7b:54:39:ef:c8:7e:14:1c:80:f6:
04:a4:f3:eb:41:48:05:db:84:0c:de:a2:e1:f6:82:cb:ab:27:
a0:55:d0:d9:b3:c5:ed:e7:a7:b6:75:40:91:b6:12:72:ad:7f:
72:9a:fe:6b:88:7f:c6:14:23:48:39:3c:c0:6a:06:2c:14:4a:
1a:84:4a:d3:c6:83:b6:3a:bc:2a:ce:5f:56:8e:97:fd:9e:7d:
e3:20:01:0b:a7:b9:df:d2:d8:ca:fa:71:c7:cd:f9:ae:a0:96:
1a:4e:7a:20:54:7b:2f:83:48:5a:7d:83:fe:8f:b3:4f:c8:3f:
1c:eb:3a:1e:a2:7c:55:48:03:2f:a4:1f:30:d0:4d:fa:5f:a3:
d3:5f:2e:98:6f:6c:68:d2:23:48:4c:ff:0b:84:a7:1e:43:5b:
07:78:26:2c
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZtwfth4kwC++YAcvBpYBaB9+t+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMDMxMDE4MTNaFw0yNzAyMDIxMDIzMTNaMDMxMTAvBgNV
BAMTKDYyNEFCODcxMTY4OUIyQjUyMTU2NERGMTQ3OThDRjJBRDU4N0JDQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDc6UqI+pAIGhYKnn3NDj1/3jX
44QNCcqs7Te2c2ZGarkI4UVn+gxjnnBJ1bf6o/awIZuE4GcafW9m4WnzzzJSb6z8
Q7avIFgu4tV9LuckpHYAWoSNSminzIvCr+bvRt+X0M9XwCTSkCjE+3JtzgnzmchN
DQEyQBoYQaV5mIo6O1EjP4cNtMHuZdyOIUmfV5OyJ7x1CP0nyUnOf/bSnDBCeLg+
GLyUCc6BVSOg371oax31gUeWPBha8lBzwr2IRJm4l5Gv3xfFlYMtNuhL9t4f5x6t
OfN++gWsTYKIeZalRCMw7zpDkJaFOMn8k2I4a/ZtU+DniGdUMn9y7mTE2jPhAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUYkq4cRaJsrUhVk3xR5jPKtWHvLYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzMjM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABStLAwDQYJKoZIhvcNAQELBQADggEBAF2rPgCKrahPyuZW7fFjDDOWb8A2lEfO
3PWnd0ofnEniOEoGI0+dGXgVJwZHqywcXcgqPcyJIicBwqMNo79xSK1ISE17rzB4
byFg9Epv4Txex8SnfRt37oBZcDDx5w2aAXd6e1Q578h+FByA9gSk8+tBSAXbhAze
ouH2gsurJ6BV0Nmzxe3np7Z1QJG2EnKtf3Ka/muIf8YUI0g5PMBqBiwUShqEStPG
g7Y6vCrOX1aOl/2efeMgAQunud/S2Mr6ccfN+a6glhpOeiBUey+DSFp9g/6Ps0/I
PxzrOh6ifFVIAy+kHzDQTfpfo9NfLphvbGjSI0hM/wuEpx5DWwd4Jiw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:26 2026 by rpki-client