Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e36382e302f32322d3332203d3e20313431393935.roa
File: 38322e3139372e36382e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: 0X/9lNRaftxY41LPdZbEAIHOHwyBw9jDJ4hVDlHR54o=
Subject key identifier: 93:EB:39:C7:17:B9:C5:CC:75:5F:C2:C7:BA:29:9C:09:62:5A:EC:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32B97DCD6FDF42A54A283ADACF02D936E4D71E1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e36382e302f32322d3332203d3e20313431393935.roa
Signing time: Thu 05 Feb 2026 21:23:17 +0000
ROA not before: Thu 05 Feb 2026 21:18:17 +0000
ROA not after: Thu 04 Feb 2027 21:23:17 +0000
asID: 141995
IP address blocks: 82.197.68.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:b9:7d:cd:6f:df:42:a5:4a:28:3a:da:cf:02:d9:36:e4:d7:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 5 21:18:17 2026 GMT
Not After : Feb 4 21:23:17 2027 GMT
Subject: CN=93EB39C717B9C5CC755FC2C7BA299C09625AEC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:82:c6:4c:94:de:62:92:8f:a1:84:0b:77:
8b:6e:82:1e:19:2c:6f:16:31:f4:9f:76:b7:97:02:
3f:ff:97:5d:2d:d5:53:97:fa:92:96:d9:c1:99:3c:
56:7c:48:57:69:25:35:55:0e:b4:7d:2d:c8:8a:f1:
54:6f:0c:a3:42:7b:c1:a5:f4:2f:db:0d:fc:97:b7:
de:57:56:05:77:c5:fd:5d:58:a9:71:1c:7a:aa:74:
fe:41:29:b4:bc:f5:34:38:40:e7:a0:e8:74:ef:37:
c1:fc:f3:0b:e0:e8:38:21:6d:c0:4c:42:fd:ba:b6:
c4:02:28:35:79:f2:b1:b6:fc:9d:ea:3c:ac:6e:9a:
6f:40:08:b1:8d:a0:b4:fd:d0:17:19:c2:50:7c:ba:
d9:d1:f1:12:f2:16:96:2d:3f:84:60:35:54:fa:24:
a2:0f:b5:25:88:d3:bb:c1:4e:c6:e1:11:86:18:5b:
49:2a:57:cd:01:f7:14:29:b7:2a:49:da:c8:23:ba:
0c:b3:c5:c5:e4:f4:b1:2d:df:5e:1a:bc:62:0d:50:
06:cc:c6:aa:89:45:f1:69:48:48:17:4f:97:42:b3:
c1:35:0c:08:9f:4a:c6:7c:bb:3b:d5:9f:2d:10:0d:
1e:de:e4:2e:c1:46:c9:22:da:3c:96:fd:f5:77:1c:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:39:C7:17:B9:C5:CC:75:5F:C2:C7:BA:29:9C:09:62:5A:EC:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e36382e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:49:36:f6:a2:d0:b5:db:d6:26:7a:a5:83:71:85:c3:cc:6c:
56:4c:2d:4e:64:9b:db:31:25:50:d9:3a:8c:4e:24:3e:5d:b5:
e2:2e:a9:c6:d2:e8:14:bf:7c:ef:29:46:d9:5c:ed:00:2f:09:
7e:e9:50:9f:08:83:fc:04:ca:31:d5:8f:ad:5b:9f:bc:71:63:
49:d1:d8:ab:d5:64:26:58:b0:79:bb:35:0f:e1:fd:8e:da:92:
cf:85:a2:a0:69:25:64:23:e5:25:1a:7b:9c:87:1d:ce:6e:be:
43:1a:1a:41:ce:5e:1f:5b:c9:ea:86:b5:01:71:c2:ef:7d:c9:
5a:2a:b1:99:06:15:9a:f1:4c:54:8d:72:0d:38:9d:b3:03:37:
5e:67:7d:75:f3:df:c6:e1:ab:29:23:36:f4:93:ca:bb:d9:08:
3c:68:fc:1e:b8:af:7a:53:aa:34:71:61:cb:94:87:d7:50:4d:
8f:9b:3a:71:b3:81:0d:31:0e:29:32:7e:be:a6:eb:18:1d:1a:
23:5f:f2:3e:78:b9:ef:c4:49:0c:44:b6:af:68:eb:6f:e9:6e:
20:a0:cf:2d:e4:a6:d1:3a:1e:cb:b8:ab:7c:77:25:10:dc:22:
13:8f:6e:3f:34:26:4e:17:dc:13:30:90:5c:04:8c:34:6a:4d:
1e:f1:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:46 2026 by rpki-client