Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
File: 38352e3230382e35302e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: 5HCuT0WQr6ssD5DCDZNc47ozssTPj3KH/6doen7BOsA=
Subject key identifier: E7:75:6F:FC:87:45:D2:87:31:77:3D:C0:FA:F1:35:C1:5C:DB:B3:F0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26D47A0588FFA9269B9D4B14110B98E0212B1098
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
Signing time: Fri 24 Jul 2026 15:27:04 +0000
ROA not before: Fri 24 Jul 2026 15:22:04 +0000
ROA not after: Fri 23 Jul 2027 15:27:04 +0000
asID: 43260
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d4:7a:05:88:ff:a9:26:9b:9d:4b:14:11:0b:98:e0:21:2b:10:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:22:04 2026 GMT
Not After : Jul 23 15:27:04 2027 GMT
Subject: CN=E7756FFC8745D28731773DC0FAF135C15CDBB3F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:95:d8:71:9a:a3:cb:97:47:c1:b7:b3:73:
4c:45:f9:09:3d:0f:98:f2:42:b4:94:c3:af:2c:56:
01:1a:11:67:ba:59:a6:52:5d:24:aa:26:f4:67:b6:
5e:85:96:9a:3e:d5:fa:49:4a:60:d8:27:fa:49:0c:
ad:87:9f:e4:6c:06:1a:10:9a:e1:cf:f6:3e:4e:43:
29:28:1f:70:96:d2:fc:df:1e:06:b4:4e:7d:2e:d2:
27:0c:c2:37:33:16:26:0c:14:01:e8:a9:67:80:8a:
c2:67:a6:f2:65:33:2d:89:40:cb:8c:61:b0:25:44:
17:4e:b4:ac:e5:0a:9b:84:33:dd:bd:b2:82:ca:aa:
b3:a8:96:6c:34:fe:dc:36:e6:df:d9:6f:e7:20:1b:
25:98:3b:cd:e7:63:d0:51:17:29:f0:fe:14:59:36:
b6:7f:0e:a6:d3:88:e4:fd:e2:ca:c3:cd:13:06:b7:
bc:d3:db:a8:c4:9e:17:d6:ee:01:a1:23:4e:11:b0:
96:a8:cd:46:28:79:04:cb:ca:c7:74:6b:cc:e2:53:
46:4e:ee:8f:e5:87:b7:de:eb:0c:48:c1:45:e0:4c:
91:5e:60:1b:c2:ac:8e:e9:3a:89:a7:8f:0c:ea:4d:
a5:8a:6a:d9:3a:e2:f7:6a:ad:c2:57:ed:2f:f9:44:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:75:6F:FC:87:45:D2:87:31:77:3D:C0:FA:F1:35:C1:5C:DB:B3:F0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
90:79:e6:c8:31:01:6e:50:5a:d0:72:c8:e5:9a:b4:ac:d8:b1:
2e:85:9d:59:e6:a1:11:64:04:2e:bb:a7:53:51:f4:3c:20:ee:
03:95:92:d0:85:8a:a5:2a:35:b2:91:77:c7:06:dc:f0:79:e4:
13:79:91:19:6f:c7:d4:de:fe:16:c6:b2:e9:89:ba:f9:f6:6f:
e1:f0:23:fd:5d:ca:0a:d0:ca:64:f3:88:00:4e:b2:bd:c6:18:
0b:62:a4:0e:06:71:0f:05:d0:b6:8d:d4:43:4a:62:6e:d7:40:
11:a8:99:32:cd:a1:d6:71:6e:f5:bf:16:92:8b:32:62:04:3e:
70:b8:0c:73:a0:7e:e3:32:bf:79:86:c7:f2:db:ae:61:42:5c:
36:60:2d:11:38:09:58:70:c1:6d:0c:16:87:41:22:91:74:8c:
5f:c2:ec:4d:bd:07:bc:8d:0b:22:49:fb:a3:0e:f8:e1:b4:a8:
bd:1b:3e:a6:9f:f5:6d:a9:3e:ca:76:9b:df:3a:e5:0d:5a:07:
9f:5e:a5:81:a0:f0:e4:ad:bf:b2:24:f3:f4:97:07:c9:d7:b9:
28:e2:2d:0d:3f:ce:e1:f0:11:9a:de:08:ff:62:43:d1:31:9f:
1c:c6:3e:b6:52:85:e8:63:1b:43:05:ec:57:49:2f:5e:d5:73:
81:2a:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:42:17 2026 by rpki-client