Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
File: 38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: c2UlaFpOJ/CUizbPnZJfvhDq/StHgjNfWglt0amGsqk=
Subject key identifier: F3:79:96:4B:AC:DD:AC:A7:FA:1E:59:29:EE:39:45:7B:E6:B2:A5:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1383C41611411DDFD00AC072C7289BF0D380850A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 24 Jul 2026 15:26:56 +0000
ROA not before: Fri 24 Jul 2026 15:21:56 +0000
ROA not after: Fri 23 Jul 2027 15:26:56 +0000
asID: 204170
IP address blocks: 88.218.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:83:c4:16:11:41:1d:df:d0:0a:c0:72:c7:28:9b:f0:d3:80:85:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 24 15:21:56 2026 GMT
Not After : Jul 23 15:26:56 2027 GMT
Subject: CN=F379964BACDDACA7FA1E5929EE39457BE6B2A57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:ec:2f:52:d8:33:b4:29:f1:4e:ea:74:a8:
dd:4c:bf:10:96:bc:20:d8:f7:9b:5a:87:b3:60:32:
d2:a4:d6:f1:e3:84:cb:9e:6c:10:bd:e1:75:9b:80:
3a:f3:1f:50:3b:c5:18:f6:2f:45:10:f2:a6:54:bd:
b3:47:68:e3:10:94:28:9c:c6:7a:69:c6:9f:ee:57:
42:73:5a:5b:5d:c9:36:6d:c2:5e:9f:f7:d4:83:e2:
da:af:3d:a2:00:00:a8:93:f1:b4:6d:82:15:b6:b7:
e0:0b:e2:96:96:62:81:21:e4:db:bf:4a:74:58:f4:
8e:38:a0:5c:7f:53:57:15:4e:6c:78:3d:56:04:d8:
d3:20:be:69:e8:1f:f3:31:7c:91:92:ee:29:9b:21:
89:2d:98:bb:47:bc:90:4d:f8:2b:e8:ae:22:60:18:
14:74:27:14:5c:da:a2:4e:95:fe:64:c1:f6:c4:88:
d2:bf:43:b0:ea:0d:9d:23:61:e1:1c:9e:ad:a9:8b:
a0:16:9a:6d:f7:db:b5:82:b6:6d:76:bc:ad:87:26:
27:79:ae:8b:34:86:2b:81:6b:b5:4d:d8:3c:c9:da:
81:08:a1:7a:29:91:3f:05:8f:04:76:3e:34:8d:db:
a1:e8:db:e9:d0:8e:a6:1f:15:78:bf:93:07:8f:c5:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:96:4B:AC:DD:AC:A7:FA:1E:59:29:EE:39:45:7B:E6:B2:A5:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38382e3231382e3230312e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.201.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d5:5e:08:0f:b7:41:18:b9:d6:fa:38:25:a3:53:2a:80:9c:
21:4c:03:a5:e9:fa:e1:6e:86:13:a9:2b:7d:23:54:9a:66:ad:
f6:93:ab:bb:9b:74:d4:e2:da:59:10:b4:1b:67:b4:f5:60:e3:
f8:ec:61:25:9d:ec:6b:b7:ea:14:70:92:cb:5b:8f:b8:2c:c3:
11:17:5a:ea:71:dc:c7:dd:1f:8c:18:fc:89:b7:bf:0b:3b:fb:
82:c7:e4:e3:76:66:7f:10:3e:5a:8f:31:b7:cd:54:3d:c5:65:
8e:43:37:bb:d5:b1:9c:3a:8f:6d:bf:b1:9d:f6:61:9c:31:73:
ca:a7:05:d7:f6:99:82:66:62:05:07:e0:f2:7a:8f:57:99:ed:
63:aa:63:9b:ac:9f:e4:f7:bd:40:1e:b3:89:0c:99:54:01:7a:
c0:99:ad:13:90:fe:33:0c:6d:ca:c6:04:a3:98:ea:88:11:ac:
77:08:19:a9:0d:a9:79:77:28:f6:46:37:bd:26:e1:74:71:56:
f1:a8:05:eb:34:e7:a2:3b:80:af:db:b3:9e:17:ec:df:27:50:
c0:df:59:69:10:06:18:11:2d:df:8b:69:46:21:94:5c:3c:29:
a4:44:9c:9b:6e:67:72:68:d6:7f:38:68:95:67:5b:78:b5:a3:
a9:da:cf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:48 2026 by rpki-client