Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
File: 38352e3230382e34382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: qNVCi0i0rR7wsLZRGlw8ADdl31MipfwUBsduRSryqoQ=
Subject key identifier: 1E:02:0E:52:1F:8A:84:AD:0D:87:9B:FA:0B:F5:57:7E:E2:08:86:36
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32E459D7B61FD3D6E9A166F7D8EA4E15787B8FA8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:59 +0000
ROA not before: Fri 24 Jul 2026 15:21:59 +0000
ROA not after: Fri 23 Jul 2027 15:26:59 +0000
asID: 51167
IP address blocks: 85.208.48.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e4:59:d7:b6:1f:d3:d6:e9:a1:66:f7:d8:ea:4e:15:78:7b:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:59 2026 GMT
Not After : Jul 23 15:26:59 2027 GMT
Subject: CN=1E020E521F8A84AD0D879BFA0BF5577EE2088636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:22:fe:31:e8:39:5e:e7:33:f6:6b:ae:b1:
13:30:7c:62:a9:fc:b7:2a:03:f0:cb:31:13:92:cb:
09:20:44:fa:ab:92:65:83:8e:44:5c:cc:18:8c:61:
07:3e:47:06:f3:82:68:c0:f8:76:df:73:8a:e1:c7:
b6:9e:7e:86:d1:ae:da:ac:af:e7:c1:ed:fd:98:0a:
33:24:10:08:48:48:39:d6:be:85:b6:ed:9d:0f:b5:
4f:dd:73:14:55:18:26:3a:c0:fb:16:cf:33:d8:31:
0e:f4:cb:a8:8b:72:b4:24:8a:f3:09:04:d4:be:e9:
f2:70:74:be:13:9d:b8:c8:51:ed:ab:b6:70:30:19:
ba:c5:c8:f1:df:bd:03:25:81:4b:79:ed:6a:e8:b3:
28:e1:cd:e6:6c:4f:bd:2f:2e:9f:d8:61:db:74:72:
5a:60:04:16:0a:ba:5c:02:54:65:b2:13:9a:24:bd:
f6:1d:de:7b:e8:a7:4e:db:f1:45:6e:50:77:ad:29:
54:f5:43:be:4b:bf:c0:77:1a:54:bf:33:d9:e4:33:
30:db:c9:30:2e:94:9e:1a:29:95:54:90:5b:34:55:
5f:55:70:19:41:3c:fa:2c:60:09:ff:50:d6:71:96:
13:b5:7c:c2:42:e9:ea:fb:9b:01:0f:da:a6:f5:97:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:0E:52:1F:8A:84:AD:0D:87:9B:FA:0B:F5:57:7E:E2:08:86:36
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:df:ec:0e:73:9b:14:3b:dd:a8:cd:8d:b6:2d:4d:62:d7:43:
79:14:74:fc:6c:5b:cc:1c:ab:fd:3d:b2:bc:2f:c5:d5:9d:b5:
76:7f:d4:e0:3b:38:8d:c8:95:9e:af:ae:a0:ae:c7:2d:ea:fa:
fb:9a:e1:8a:5f:47:06:bd:08:a6:40:57:1e:3a:21:93:1f:84:
fb:9d:bf:fd:b7:33:7d:15:8f:dc:be:c4:cd:5f:24:42:05:0e:
d3:43:27:c9:18:21:5f:ed:b3:0b:6d:8f:d0:4d:ce:76:29:f1:
cb:02:07:72:2c:97:b8:72:32:a8:24:48:23:3a:7f:dd:f7:fe:
2d:98:de:30:67:9b:82:7a:77:0a:3a:06:9f:0d:48:29:ae:eb:
95:06:f5:76:5c:e3:6c:54:ff:0c:f4:d3:66:ab:11:96:1f:0e:
e3:83:80:20:b8:06:19:f3:af:17:ba:17:00:d3:c3:9a:79:6d:
5d:31:1c:47:06:11:7c:5a:93:0b:7b:a7:1a:88:cd:24:b4:26:
c5:2a:cd:76:af:85:b8:b1:bc:66:9f:e9:aa:1e:85:b3:95:cd:
10:ab:0f:74:10:b0:8a:ca:30:c1:62:5e:d1:5c:2e:2b:6c:00:
bc:eb:03:c5:df:96:c0:77:c3:81:09:9e:f8:72:c0:72:12:7c:
0d:28:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:25 2026 by rpki-client