Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
File: 38352e3230382e35312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: K24eifhJG0rBo6/VQryzlv4KUu8/apRoEmCRe1vJ7hY=
Subject key identifier: 5C:03:98:64:97:F9:2B:CA:8C:D0:DD:AE:54:4E:85:1C:73:06:10:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19EDC7F57B6E4E7B8B3D22F985E6B21BAA3678A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 24 Jul 2026 15:26:51 +0000
ROA not before: Fri 24 Jul 2026 15:21:51 +0000
ROA not after: Fri 23 Jul 2027 15:26:51 +0000
asID: 51167
IP address blocks: 85.208.51.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:ed:c7:f5:7b:6e:4e:7b:8b:3d:22:f9:85:e6:b2:1b:aa:36:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:51 2026 GMT
Not After : Jul 23 15:26:51 2027 GMT
Subject: CN=5C03986497F92BCA8CD0DDAE544E851C7306108F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:68:f0:fb:b4:d5:66:9d:87:f8:a7:2e:51:
83:4f:82:fd:d4:b7:6c:41:26:31:01:3a:fe:8d:c5:
bd:52:01:fb:3a:00:20:8c:95:81:bc:6c:53:a1:08:
22:4d:bd:4b:37:60:a1:0d:cb:3e:c5:6d:d7:f6:66:
6e:d1:87:41:58:77:fd:8a:d9:a4:83:b4:89:1d:db:
6a:78:01:20:d7:d5:9f:dd:e4:de:da:50:e7:b1:3c:
af:8a:9c:df:89:d0:75:66:21:f0:e0:f4:66:d0:d9:
b5:e3:b8:22:7b:b9:fa:49:50:5d:2c:32:f8:0b:4b:
e8:9b:01:e8:59:35:f7:21:e9:4d:54:90:27:96:6a:
1e:8b:9a:43:46:34:f5:a5:30:67:67:a7:8d:19:83:
e1:4b:1e:23:d9:b1:1d:22:29:71:42:fb:93:88:87:
f4:d3:08:b7:75:6a:dd:8e:be:87:a7:c3:9d:49:1c:
a2:84:e4:25:1b:79:69:fa:d8:69:2c:b9:28:6c:05:
b1:61:9d:6b:7d:99:a3:bf:fa:7f:80:1f:25:38:06:
ef:6a:bb:e1:fd:4f:6c:2b:25:8d:d1:d8:93:65:4e:
7d:dd:7e:bb:a1:77:3b:3d:3c:82:6f:8e:89:ea:21:
a6:a3:0f:9f:56:86:96:b5:24:7a:4d:25:96:1c:da:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:98:64:97:F9:2B:CA:8C:D0:DD:AE:54:4E:85:1C:73:06:10:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.51.0/24
Signature Algorithm: sha256WithRSAEncryption
39:91:1f:8e:a7:07:9f:fc:de:ad:26:3e:e9:de:ef:c9:b4:ed:
b3:2e:32:5f:d0:4b:1a:fd:fd:7e:8c:b3:ac:12:4d:cf:e5:94:
5f:51:4a:ee:b5:bb:de:69:75:5d:4e:a9:e4:80:12:f3:78:c2:
45:fb:e4:58:1c:8c:41:c7:a4:9e:9a:84:97:51:2c:83:bd:98:
9e:48:81:92:53:22:a9:9b:21:34:9f:c9:10:af:27:85:7d:34:
50:3c:b6:7c:8c:6c:01:75:1c:b5:b8:7a:2f:1a:47:dc:20:8b:
0a:64:8e:a6:99:91:3e:2e:7e:9a:fc:2b:d6:c2:36:c3:55:cc:
16:30:80:4f:b0:9f:e9:2f:44:1f:3b:f0:2e:ca:28:8e:c4:09:
79:49:e9:9f:70:f1:c4:f3:9f:19:84:0f:61:ad:2a:ff:14:64:
a1:c3:40:43:c5:d7:3d:e0:34:2c:76:12:b5:28:c0:c4:fd:fe:
d3:d1:74:8e:61:28:d0:86:01:9d:53:bb:62:84:71:2c:ea:a0:
d2:0b:87:b8:f5:e1:1d:39:bb:65:7e:f4:c1:c4:94:df:87:d3:
2a:c6:02:f1:3e:6c:03:fb:70:55:a4:e0:a3:93:dc:83:b0:68:
48:c7:ee:7a:a1:79:83:84:c6:ed:d6:ae:67:f2:43:26:24:2a:
ac:81:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:17 2026 by rpki-client