Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32332e302f32342d3332203d3e203531313637.roa
File: 38342e35342e32332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: efnLxO3fabhUiwS2AOds8VWFI1WJQ29ZrnEGV79RLMc=
Subject key identifier: 34:DC:79:55:CB:3D:A3:D9:BD:43:EB:03:EF:B9:11:F2:27:F6:E0:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D0DAECCB4E6E280903DB3F896D16A1A54512E27
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:55 +0000
ROA not before: Fri 24 Jul 2026 15:21:55 +0000
ROA not after: Fri 23 Jul 2027 15:26:55 +0000
asID: 51167
IP address blocks: 84.54.23.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:0d:ae:cc:b4:e6:e2:80:90:3d:b3:f8:96:d1:6a:1a:54:51:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:55 2026 GMT
Not After : Jul 23 15:26:55 2027 GMT
Subject: CN=34DC7955CB3DA3D9BD43EB03EFB911F227F6E007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:45:94:bd:35:46:0c:2b:ce:97:e5:15:ac:
69:69:d3:23:a1:1a:8e:ec:ae:a8:84:df:21:5b:cd:
4f:96:ce:e8:07:e1:2f:43:40:d1:df:2b:63:88:65:
22:fe:ac:ba:82:1a:8a:23:57:48:43:d8:06:73:bd:
bf:f3:f4:e6:5b:80:fd:91:c0:f8:58:c1:49:dd:d3:
eb:dd:7d:d3:55:99:d4:70:da:1e:22:0c:f9:51:56:
0c:67:41:a9:30:6c:51:2d:04:d9:24:d4:d8:95:82:
ce:f9:ef:ea:9c:e5:0a:1e:33:c7:7d:74:7d:96:48:
77:56:32:83:79:12:08:dd:18:81:33:c9:80:24:34:
77:d8:47:1e:86:65:f8:2b:45:6d:22:e8:78:73:bf:
d4:19:63:06:71:4e:d3:4e:47:3a:fa:13:33:70:99:
15:d5:86:d5:b5:db:24:79:ac:1b:c2:1b:bb:3c:f9:
96:bd:1f:cf:52:e5:71:bf:73:54:6e:5d:3e:f1:39:
73:53:72:e1:c1:e2:87:95:b1:6c:66:2d:0a:61:fa:
dc:ad:f8:40:c6:70:5f:cb:6b:c3:d6:55:7e:25:26:
38:ac:c0:96:f6:2a:44:e9:c6:fe:e1:03:e5:a1:be:
81:8e:ce:72:56:7e:1c:a0:bb:70:79:7d:60:b6:0a:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:79:55:CB:3D:A3:D9:BD:43:EB:03:EF:B9:11:F2:27:F6:E0:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.23.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d1:cf:79:a4:57:5c:67:81:ab:ad:e1:77:4f:91:35:c6:07:
25:6e:83:9e:95:09:db:ff:93:44:2c:12:5b:c3:ed:e3:ee:59:
91:ca:83:ee:ea:02:c7:ec:21:c1:21:5d:03:b2:ee:20:c0:17:
16:41:c3:5e:63:cf:34:b8:43:73:1b:b1:9d:12:b6:05:df:58:
d5:2e:16:c8:ed:17:3c:13:39:41:7f:9d:8e:8d:6d:a1:db:ea:
e6:b2:86:97:6a:74:1a:b2:92:98:8d:fb:6d:c7:10:29:3e:ed:
38:2a:ab:06:84:e9:1d:43:09:66:01:c7:8a:39:51:4a:3f:4f:
62:fe:51:40:fd:d0:a2:5c:b1:c4:b5:c4:93:8e:5c:7c:a8:26:
d0:30:01:d7:6b:46:9f:25:ef:e4:4a:de:e5:00:b4:ea:4b:71:
2b:eb:eb:a4:3c:b6:b1:2e:c6:b6:ab:42:7f:b1:57:27:6e:95:
85:b8:c4:36:d1:c7:1b:f2:e4:c2:a1:2f:98:73:84:fc:0a:ba:
7f:0d:57:9a:b0:95:dd:13:36:0d:ee:c1:be:e7:ea:67:fc:f1:
09:c5:28:e4:ef:e8:18:74:82:29:42:e1:95:27:28:42:83:b4:
9d:11:26:18:5a:9a:c4:e1:d7:a1:0b:a4:b1:84:ba:3c:9d:a9:
58:97:cd:01
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUPQ2uzLTm4oCQPbP4ltFqGlRRLicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjQxNTIxNTVaFw0yNzA3MjMxNTI2NTVaMDMxMTAvBgNV
BAMTKDM0REM3OTU1Q0IzREEzRDlCRDQzRUIwM0VGQjkxMUYyMjdGNkUwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kkWUvTVGDCvOl+UVrGlp0yOh
Go7srqiE3yFbzU+WzugH4S9DQNHfK2OIZSL+rLqCGoojV0hD2AZzvb/z9OZbgP2R
wPhYwUnd0+vdfdNVmdRw2h4iDPlRVgxnQakwbFEtBNkk1NiVgs757+qc5QoeM8d9
dH2WSHdWMoN5EgjdGIEzyYAkNHfYRx6GZfgrRW0i6Hhzv9QZYwZxTtNORzr6EzNw
mRXVhtW12yR5rBvCG7s8+Za9H89S5XG/c1RuXT7xOXNTcuHB4oeVsWxmLQph+tyt
+EDGcF/La8PWVX4lJjiswJb2KkTpxv7hA+WhvoGOznJWfhygu3B5fWC2CtrnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUNNx5Vcs9o9m9Q+sD77kR8if24AcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNDJlMzUzNDJlMzIzMzJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABUNhcw
DQYJKoZIhvcNAQELBQADggEBAIPRz3mkV1xngaut4XdPkTXGByVug56VCdv/k0Qs
ElvD7ePuWZHKg+7qAsfsIcEhXQOy7iDAFxZBw15jzzS4Q3MbsZ0StgXfWNUuFsjt
FzwTOUF/nY6NbaHb6uayhpdqdBqykpiN+23HECk+7TgqqwaE6R1DCWYBx4o5UUo/
T2L+UUD90KJcscS1xJOOXHyoJtAwAddrRp8l7+RK3uUAtOpLcSvr66Q8trEuxrar
Qn+xVydulYW4xDbRxxvy5MKhL5hzhPwKun8NV5qwld0TNg3uwb7n6mf88QnFKOTv
6Bh0gilC4ZUnKEKDtJ0RJhhamsTh16ELpLGEujydqViXzQE=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:58 2026 by rpki-client