Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e20383334.roa
File: 38352e3230382e35302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OlfVlCmgR3ceNhYP4kdsnNEFJOpG5EKNN725mHojgPI=
Subject key identifier: D3:8F:5F:AB:9D:50:3C:29:92:26:FC:A8:12:5E:A5:D6:C0:70:05:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D61901E4600CBFABF6406E39A0C1A391AC387FE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e20383334.roa
Signing time: Fri 24 Jul 2026 15:26:44 +0000
ROA not before: Fri 24 Jul 2026 15:21:44 +0000
ROA not after: Fri 23 Jul 2027 15:26:44 +0000
asID: 834
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:61:90:1e:46:00:cb:fa:bf:64:06:e3:9a:0c:1a:39:1a:c3:87:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:44 2026 GMT
Not After : Jul 23 15:26:44 2027 GMT
Subject: CN=D38F5FAB9D503C299226FCA8125EA5D6C070053F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:ec:46:57:95:1f:c2:07:f4:87:81:49:71:
f4:93:34:06:5a:b0:43:30:01:9c:7d:d6:c7:cc:5e:
ad:4c:7c:d8:c5:d6:6e:67:a0:d1:c7:40:15:78:e8:
24:2d:03:75:d6:8d:e6:37:bc:9a:d9:1e:f1:6a:d3:
dc:58:89:61:ce:39:88:87:42:e8:f3:bf:4f:70:ec:
49:68:c5:e0:be:b3:fe:c2:d8:17:e5:68:79:4c:78:
d8:4c:04:aa:5a:dc:af:c4:35:ad:59:a4:7f:90:36:
d2:d1:99:be:e1:44:e3:84:ce:e3:1f:f5:a7:ab:5e:
4e:7d:9b:07:86:cc:3f:e8:9c:85:73:0a:11:42:e6:
68:07:fd:d0:82:cc:85:89:29:5d:e5:02:ca:2c:4a:
30:5a:77:01:d9:70:dd:63:be:30:82:e5:1e:a4:15:
58:fe:30:95:30:2c:c2:67:01:d9:0a:a9:b9:ea:66:
1a:30:d2:c2:ed:df:6d:49:fd:4e:3c:f7:5f:5a:e6:
af:a2:72:0f:3c:68:dc:0d:b4:cc:68:57:5f:7e:bf:
aa:be:e2:ae:e4:16:6f:92:82:74:c5:db:1f:52:2b:
54:41:68:d9:a6:5c:d6:e2:fe:e2:49:3a:1c:a2:6a:
69:4f:37:e2:32:f2:99:42:e5:ee:8a:d7:7a:aa:33:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8F:5F:AB:9D:50:3C:29:92:26:FC:A8:12:5E:A5:D6:C0:70:05:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
80:db:80:8d:20:64:81:50:21:2a:ac:72:6b:40:9c:ed:e3:2e:
f2:ef:6f:34:e8:f6:6c:1a:1d:5b:6e:d1:19:28:63:a4:ea:eb:
06:ed:17:70:d0:97:6a:00:43:ef:a4:14:2d:e4:65:5d:14:98:
09:ab:cb:79:d2:03:4f:a4:91:ef:2c:27:71:87:eb:16:3a:b2:
50:96:e7:2a:b3:20:73:c7:72:b8:cb:d9:3f:86:ff:02:5c:4e:
ba:f7:0f:f3:84:fe:5c:07:ee:f0:cd:a8:98:34:d5:3b:8e:47:
8b:a5:84:d6:8f:20:b7:7a:33:c7:e3:05:4e:7c:a9:e5:d9:10:
d8:70:2c:4b:f4:3d:93:6a:db:f6:8c:2d:4b:7a:b2:ad:da:94:
9c:d1:0e:eb:8e:ca:a8:98:ea:06:72:88:99:e9:17:46:4c:ff:
86:e1:53:25:54:8a:3f:bf:e0:81:08:0f:c2:29:10:ec:ab:60:
b3:53:a2:40:35:dc:da:c3:65:38:5b:07:39:31:fd:f6:6f:f0:
60:04:ef:1d:80:3c:96:ce:4a:6e:ee:c0:07:3d:85:e2:1c:59:
f1:44:f4:57:89:34:87:3c:55:71:60:a9:a3:c1:09:2a:22:4c:
72:0e:ec:16:55:cb:28:d5:4e:df:4e:60:0c:0c:49:74:e2:7b:
0a:be:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:12:15 2026 by rpki-client