Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e34302e302f32312d3234203d3e203437353833.roa
File: 3136372e38382e34302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: fvB8zlbDzqbZ/bzg0xhFaqi2eZlPxVd5tMTBFSWX44o=
Subject key identifier: E6:0B:D2:E5:F8:D4:76:49:04:EE:EC:50:9A:BC:7B:FA:19:79:0F:50
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36A4DE7962CEB7A3282FF46116E7B16E123FE157
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e34302e302f32312d3234203d3e203437353833.roa
Signing time: Wed 30 Sep 2026 15:29:33 +0000
ROA not before: Wed 30 Sep 2026 15:24:33 +0000
ROA not after: Wed 29 Sep 2027 15:29:33 +0000
asID: 47583
IP address blocks: 167.88.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a4:de:79:62:ce:b7:a3:28:2f:f4:61:16:e7:b1:6e:12:3f:e1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 30 15:24:33 2026 GMT
Not After : Sep 29 15:29:33 2027 GMT
Subject: CN=E60BD2E5F8D4764904EEEC509ABC7BFA19790F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:7b:d3:d6:51:50:8c:ef:2b:14:7b:72:4d:
96:2f:89:5a:54:7c:49:e3:3f:0a:63:62:af:ba:a8:
ec:b0:35:64:75:9c:4b:b5:83:d1:26:fb:32:cb:1c:
67:a9:1e:00:ea:cb:13:6b:54:97:8a:4f:82:84:72:
36:2c:87:22:35:61:ef:15:60:cf:bf:5a:a2:8a:8e:
ee:72:6e:16:b0:0b:74:d4:ce:79:1d:e2:a2:40:c5:
2c:ff:8c:8e:f5:b8:fa:29:e5:ff:da:65:31:b5:6a:
67:ce:c4:55:87:31:02:a2:c3:8c:df:f2:73:78:c9:
ee:8e:4e:28:74:24:bd:0b:da:5f:ba:20:58:5e:97:
5d:b0:a1:44:8a:87:c9:f1:f8:55:48:17:cf:86:d6:
7d:ad:d0:94:75:c9:07:0a:3e:fe:bf:0b:7b:b1:f4:
b9:cd:53:48:ce:e9:7b:1d:da:a3:60:43:52:a5:21:
16:00:10:b0:1a:13:55:4e:b9:2c:ca:dc:75:69:6a:
c1:00:6a:ae:96:9f:a6:3d:88:72:b0:19:30:e7:6b:
d2:4c:43:45:e8:12:17:62:90:9c:fb:ae:8c:97:72:
c4:db:36:dd:41:67:67:61:31:68:7a:5f:de:5b:61:
08:86:81:07:93:d2:ee:03:66:d8:5b:6b:4f:ad:dc:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:D2:E5:F8:D4:76:49:04:EE:EC:50:9A:BC:7B:FA:19:79:0F:50
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e34302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.40.0/21
Signature Algorithm: sha256WithRSAEncryption
18:42:7b:ed:4f:77:6d:d3:04:00:7f:8c:9f:95:70:0f:97:3d:
c1:52:3c:10:60:8a:9f:8f:66:87:52:b0:b3:35:92:f4:4a:75:
c4:5a:ca:26:27:c8:f4:fb:f5:37:69:7d:ef:b4:31:cb:f1:cf:
cb:f1:1f:64:6d:4c:28:70:cf:9d:a0:46:e7:d7:c4:05:a1:93:
7b:05:de:5c:78:01:df:52:b3:6e:95:05:d0:7c:78:a3:68:a6:
b6:95:4c:d0:90:90:19:5d:74:a8:95:1a:0b:fd:3a:c3:81:af:
20:61:2e:27:29:d5:de:08:a9:36:2c:31:fb:48:d9:f2:b3:39:
d9:2d:5f:84:95:1f:8f:c5:c2:db:a5:db:18:dd:0e:08:dd:25:
26:83:c1:cd:f9:e6:23:a0:98:ec:1d:e2:c5:85:83:24:ce:3f:
fb:16:50:f9:b7:37:dd:15:d1:f9:a1:68:b2:30:f0:a8:38:a9:
97:d8:4c:2c:9e:42:2c:00:50:a6:94:3c:54:8a:2e:43:97:8c:
cc:cd:e3:c2:51:1e:c9:82:c3:b2:94:13:44:c1:c1:f4:10:a2:
cb:4c:76:0d:dc:c0:af:85:dc:6a:d0:c0:a8:ca:7b:9c:b0:e9:
17:30:a5:f1:df:cc:72:9d:73:40:16:87:f1:b0:d2:21:35:56:
d1:b5:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:18:59 2026 by rpki-client