Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
File: 38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: axRMJD0wQj7slYMzzPKhce+B9YZ2wc/hxiOs6xHAV2w=
Subject key identifier: 4B:30:63:C1:56:EA:7F:62:E9:60:67:EA:3D:A7:B3:64:A7:58:0E:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 256619EF8516F8BC8E3A3ADC2C398628E16E45BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 24 Jul 2026 15:26:38 +0000
ROA not before: Fri 24 Jul 2026 15:21:38 +0000
ROA not after: Fri 23 Jul 2027 15:26:38 +0000
asID: 141039
IP address blocks: 83.136.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:66:19:ef:85:16:f8:bc:8e:3a:3a:dc:2c:39:86:28:e1:6e:45:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:38 2026 GMT
Not After : Jul 23 15:26:38 2027 GMT
Subject: CN=4B3063C156EA7F62E96067EA3DA7B364A7580E17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:ee:e5:91:a1:a2:c2:f8:6e:28:f0:ad:5c:
d7:b8:26:b4:27:c6:6e:98:69:dc:98:bc:00:79:56:
99:e6:a8:3b:86:bd:ae:6c:6d:62:ee:fe:dc:5b:d5:
2c:70:28:7c:c1:34:66:be:0f:0b:5d:8b:3f:c7:45:
36:32:ac:15:a8:43:32:04:88:54:98:19:fa:1e:2c:
6d:b3:f3:95:af:65:4e:2c:34:b2:8f:c7:a5:2c:d0:
d1:e9:f9:5c:be:a1:cf:de:c3:f8:48:f7:19:65:2b:
d1:da:65:8f:aa:bd:14:2d:36:26:a9:c2:46:64:dc:
0f:60:90:13:65:7f:2c:65:44:60:41:23:88:dd:18:
c7:e3:24:ef:a4:33:e8:f3:fe:fb:fe:18:9e:f5:cc:
89:31:a5:fc:e8:97:37:99:2a:0c:73:d2:0a:c0:23:
be:e6:65:88:68:29:ed:28:a4:99:77:1b:72:7f:f9:
6a:63:11:9a:e3:1f:c6:ec:98:8a:0f:0e:ba:88:f8:
58:31:ae:58:cb:71:43:fb:81:78:29:9a:c1:9d:fb:
ef:75:e1:fc:0f:02:48:99:18:32:65:3e:f2:8b:26:
42:9e:40:7c:3d:2f:a2:02:35:3f:1c:3b:eb:18:93:
77:81:9f:09:9c:0c:0a:df:55:fd:27:c8:e9:db:d9:
63:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:30:63:C1:56:EA:7F:62:E9:60:67:EA:3D:A7:B3:64:A7:58:0E:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138322e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.182.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f6:a3:48:f9:d4:75:87:76:65:31:cc:13:01:21:d4:02:e5:
b2:f7:65:c9:47:76:08:68:bf:d3:e2:2c:15:c4:63:e6:f8:cd:
81:86:60:6a:77:4b:b0:90:40:35:24:45:e6:62:dd:f5:78:ad:
c0:1d:b3:fa:84:09:77:6f:dd:87:13:d5:8e:28:bd:33:fb:c1:
63:b7:d8:bb:93:60:a0:a7:27:f3:f9:54:ff:d8:a5:c2:7a:fc:
1e:39:fa:6d:47:3d:44:43:54:f4:00:29:05:eb:1c:4d:8a:cf:
f2:e4:11:87:c1:22:93:07:0a:94:dc:28:c3:33:3e:e6:59:bd:
8a:41:5b:5c:b4:29:42:f9:62:1d:2b:c9:49:ef:96:28:f3:68:
b3:01:c2:be:b6:14:b9:d4:25:83:65:f4:a1:56:a7:ac:01:3b:
ee:7b:a5:46:4a:b9:f3:92:51:1a:4e:fe:9c:4c:51:42:c7:7d:
df:90:cd:00:dc:cb:11:a9:9d:cf:ed:e7:b4:48:89:16:77:bd:
03:a3:94:16:14:65:74:45:41:64:cb:64:49:17:c8:2b:c7:23:
d1:90:7e:4d:68:f4:56:6e:6a:38:98:a9:45:74:5a:2b:07:4e:
6c:7f:a4:12:df:8a:56:fd:94:e4:41:ad:79:09:8e:7f:74:3f:
fd:78:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:19:45 2026 by rpki-client