Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234302e302f32322d3332203d3e203531313637.roa
File: 38352e3139302e3234302e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: 72KlnASWvV8iHwlTCHL74Ke9qj/W1RGzH/qTfg81iBo=
Subject key identifier: 71:FE:74:B5:42:B9:59:23:24:8B:A8:AD:41:B4:27:27:9D:53:69:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66331F95C3BAFE36E630AA7BA7141DA168E42E3E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234302e302f32322d3332203d3e203531313637.roa
Signing time: Tue 10 Feb 2026 08:23:19 +0000
ROA not before: Tue 10 Feb 2026 08:18:19 +0000
ROA not after: Tue 09 Feb 2027 08:23:19 +0000
asID: 51167
IP address blocks: 85.190.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:33:1f:95:c3:ba:fe:36:e6:30:aa:7b:a7:14:1d:a1:68:e4:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 10 08:18:19 2026 GMT
Not After : Feb 9 08:23:19 2027 GMT
Subject: CN=71FE74B542B95923248BA8AD41B427279D5369DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:10:5e:da:ac:47:e3:ba:ea:17:53:6a:dc:
84:f5:81:76:b6:c9:f3:17:64:4a:43:57:3d:3e:39:
fe:f0:06:77:0a:9c:b3:22:fa:af:89:c2:cf:1f:b8:
42:2e:41:6a:84:64:54:aa:d6:83:8a:3f:a3:e8:1f:
86:55:87:26:cd:b1:91:ce:ba:d7:76:51:44:67:44:
43:f3:3e:76:c3:2d:23:34:a2:4f:13:90:03:26:58:
6c:ee:13:ae:6a:a1:e4:4c:74:fc:12:92:7f:c8:c5:
aa:f1:fd:c8:8f:75:bd:a3:fa:1c:9c:dc:db:8a:ee:
c1:22:a3:bf:f6:48:c0:ba:64:84:90:12:0f:e5:f9:
c8:a2:d0:af:06:ab:78:cc:b2:25:68:02:c8:3c:31:
a7:54:56:6c:f7:4e:98:70:69:5e:d8:17:7b:84:cc:
52:7e:c9:3c:f4:67:51:8a:ce:ca:4f:aa:d6:3d:f3:
ea:8d:b8:e0:70:79:3a:b3:56:3a:bf:a3:25:31:0d:
12:c8:9b:e3:d6:45:f8:4b:e7:48:bf:79:15:c4:b3:
0c:50:75:e2:44:38:68:93:9b:f3:94:af:bf:46:5e:
e7:3e:08:6b:96:c7:0e:09:e9:44:f6:a1:3a:e1:07:
67:ef:26:ab:b8:7e:b5:81:41:fe:db:ef:80:8c:7e:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:74:B5:42:B9:59:23:24:8B:A8:AD:41:B4:27:27:9D:53:69:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234302e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.240.0/22
Signature Algorithm: sha256WithRSAEncryption
04:15:30:8e:6a:fd:12:72:5b:55:23:a2:2f:f9:98:8d:5a:e0:
14:62:04:7f:d8:ea:2b:6c:0a:b4:ef:ea:ea:a0:e2:26:96:2b:
ca:ba:ee:6f:4a:7d:91:3f:04:13:7f:d1:c9:1d:4e:7f:69:d2:
c6:b7:04:56:6a:57:e3:d7:43:eb:08:9e:03:3f:b6:8f:21:34:
52:70:12:91:65:a8:b7:20:47:71:35:71:f6:81:f5:70:55:c4:
33:34:ed:1b:58:9f:1c:65:f4:64:6f:69:4b:3a:a0:d8:6b:fe:
92:71:1b:e3:3f:1b:3d:56:cb:77:84:60:18:97:bf:40:e6:af:
0c:f2:22:58:23:08:d1:df:ee:85:8f:6f:a9:f2:8f:d1:7e:78:
9a:02:89:bf:c5:04:0b:ce:ae:3d:07:71:7e:d8:b8:e3:cc:9d:
b9:e9:b1:7f:5c:36:f5:63:e6:55:97:bf:1f:77:f6:cc:fa:08:
b8:6b:74:a8:e7:c6:10:f3:fd:7d:12:27:68:da:9a:d8:e5:7d:
ba:2f:f4:a5:a2:20:eb:eb:d4:4e:a3:2f:aa:6b:8b:1a:0b:a9:
7b:f0:a9:27:e0:2e:af:ab:60:fc:ac:64:27:68:c6:d0:18:26:
3b:19:01:e3:d8:26:27:53:43:c5:d0:12:99:24:f7:12:3a:1e:
27:ce:2b:a3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZjMflcO6/jbmMKp7pxQdoWjkLj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAyMTAwODE4MTlaFw0yNzAyMDkwODIzMTlaMDMxMTAvBgNV
BAMTKDcxRkU3NEI1NDJCOTU5MjMyNDhCQThBRDQxQjQyNzI3OUQ1MzY5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdbBBe2qxH47rqF1Nq3IT1gXa2
yfMXZEpDVz0+Of7wBncKnLMi+q+Jws8fuEIuQWqEZFSq1oOKP6PoH4ZVhybNsZHO
utd2UURnREPzPnbDLSM0ok8TkAMmWGzuE65qoeRMdPwSkn/Ixarx/ciPdb2j+hyc
3NuK7sEio7/2SMC6ZISQEg/l+cii0K8Gq3jMsiVoAsg8MadUVmz3TphwaV7YF3uE
zFJ+yTz0Z1GKzspPqtY98+qNuOBweTqzVjq/oyUxDRLIm+PWRfhL50i/eRXEswxQ
deJEOGiTm/OUr79GXuc+CGuWxw4J6UT2oTrhB2fvJqu4frWBQf7b74CMflL1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUcf50tUK5WSMki6itQbQnJ51Tad4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzEzOTMwMmUzMjM0
MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Vb7wMA0GCSqGSIb3DQEBCwUAA4IBAQAEFTCOav0ScltVI6Iv+ZiNWuAUYgR/2Oor
bAq07+rqoOImlivKuu5vSn2RPwQTf9HJHU5/adLGtwRWalfj10PrCJ4DP7aPITRS
cBKRZai3IEdxNXH2gfVwVcQzNO0bWJ8cZfRkb2lLOqDYa/6ScRvjPxs9Vst3hGAY
l79A5q8M8iJYIwjR3+6Fj2+p8o/RfniaAom/xQQLzq49B3F+2LjjzJ256bF/XDb1
Y+ZVl78fd/bM+gi4a3So58YQ8/19Eido2prY5X26L/SloiDr69ROoy+qa4saC6l7
8Kkn4C6vq2D8rGQnaMbQGCY7GQHj2CYnU0PF0BKZJPcSOh4nziuj
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:15:56 2026 by rpki-client