Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa
File: 38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: xd2o/KWa//qjdS6/H+4AvHgEBoUIPhwcxbYAdxi3UrM=
Subject key identifier: 93:92:98:87:B8:6A:13:EC:F2:EB:A9:4B:27:29:1F:5C:EA:62:EB:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73E64618546908A5E913E0F480C66056CFE71A7A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa
Signing time: Wed 01 Apr 2026 14:23:32 +0000
ROA not before: Wed 01 Apr 2026 14:18:32 +0000
ROA not after: Wed 31 Mar 2027 14:23:32 +0000
asID: 206283
IP address blocks: 82.180.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e6:46:18:54:69:08:a5:e9:13:e0:f4:80:c6:60:56:cf:e7:1a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 1 14:18:32 2026 GMT
Not After : Mar 31 14:23:32 2027 GMT
Subject: CN=93929887B86A13ECF2EBA94B27291F5CEA62EB3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:1a:2d:6c:7a:bc:6d:28:fd:97:35:ef:8c:
6f:35:ff:5f:51:0f:a5:3f:b5:83:21:bf:c4:c3:30:
c2:57:75:32:4e:e1:4b:b0:95:78:d4:af:cc:42:bd:
28:11:c0:5e:e6:ee:5c:50:c3:99:d5:ef:9d:45:b9:
2a:41:39:ea:89:14:f2:1d:ff:6a:68:da:ff:a2:25:
4c:d9:2b:c2:f5:3b:ef:b5:23:f5:94:e8:12:2f:a1:
ad:ce:93:e3:54:f1:fa:01:51:84:3b:16:10:16:f9:
2d:90:59:66:a8:bf:55:cb:1b:e4:94:1f:bd:a2:f2:
30:61:7a:fb:8e:99:73:57:63:c3:41:97:b1:09:1a:
c0:11:d0:6c:0c:ac:6b:fd:fc:8c:08:cf:e6:33:42:
b5:ab:d9:11:85:20:b9:0f:3b:5f:7d:1b:d4:89:8e:
6c:f2:d3:22:05:cf:2e:c6:de:01:d5:be:ac:ea:2c:
86:85:93:b3:69:ca:9a:8e:b3:f1:95:96:2a:ff:c5:
15:4c:69:23:61:bc:2b:27:26:f1:05:3f:1e:06:68:
80:e9:99:c2:67:3f:8b:b1:f3:59:6d:96:c3:93:9d:
5d:30:ec:ad:16:f8:ac:79:b2:21:4d:59:f8:84:3a:
a4:a0:81:fa:ca:80:a2:cb:f4:14:c0:99:36:5d:12:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:92:98:87:B8:6A:13:EC:F2:EB:A9:4B:27:29:1F:5C:EA:62:EB:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3138332e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.183.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f1:0c:4f:8a:d3:91:cc:0f:b2:d7:29:34:3d:1b:e3:90:93:
8f:f5:6f:e1:66:41:75:07:cd:f5:39:a7:39:c1:ce:97:c8:e8:
ee:15:e0:29:37:5a:e5:77:ac:ec:fa:a7:0c:cd:db:fa:51:2d:
b9:12:7b:0b:35:51:e9:64:ca:6e:b4:10:15:2c:03:ff:48:cc:
fb:57:41:c8:79:46:0f:38:25:fe:7e:74:41:22:d8:6e:bc:ff:
10:db:56:02:40:ca:cc:7f:44:b0:82:f9:53:37:95:7b:18:29:
fc:ea:59:86:32:4d:64:e8:fb:a2:25:3d:6b:1e:e5:b7:1f:59:
e2:3b:02:f7:b3:0f:7a:af:94:d2:f6:a9:67:45:c2:6d:a2:d1:
0d:09:a7:70:b7:05:96:27:37:16:4f:55:f7:38:54:ac:91:6a:
89:67:a8:f4:16:b3:69:53:a9:99:30:c3:90:ea:9f:0e:22:f9:
ae:b0:b3:db:8e:70:9d:6a:ca:2a:6a:e2:d2:ef:78:91:ed:b6:
5e:d3:c4:8c:f0:13:20:5a:ce:83:cc:c1:b7:bd:41:c4:98:06:
6a:b0:0b:0b:af:14:3e:52:f4:1a:0a:c3:9f:94:3d:01:66:b4:
34:e0:7b:7c:6f:07:0f:61:e0:57:f9:69:03:32:e0:2a:fb:25:
3d:4f:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:42 2026 by rpki-client