Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa
File: 38302e36352e3230392e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 2HS/EDNEjMmsGSc0oRv4zzEiJcZMPvfk0qtghrVQYk8=
Subject key identifier: 6A:11:88:BB:E2:D7:F0:F3:FB:80:95:FC:31:6A:9D:A9:31:D4:88:ED
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7088D551ECA6D2577D7936074F0A6448B12E2342
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 23 Oct 2026 16:30:39 +0000
ROA not before: Fri 23 Oct 2026 16:25:39 +0000
ROA not after: Fri 22 Oct 2027 16:30:39 +0000
asID: 204170
IP address blocks: 80.65.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:88:d5:51:ec:a6:d2:57:7d:79:36:07:4f:0a:64:48:b1:2e:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:39 2026 GMT
Not After : Oct 22 16:30:39 2027 GMT
Subject: CN=6A1188BBE2D7F0F3FB8095FC316A9DA931D488ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:7d:c1:1f:6e:4e:06:20:1d:ef:22:21:43:
e6:71:62:75:46:7f:22:f1:1f:86:f3:a3:33:92:47:
19:79:90:85:3e:1b:55:52:44:02:87:fb:a4:56:0a:
a9:b2:ad:f1:1a:a7:85:d5:02:ff:9f:b3:51:9b:94:
e0:dc:1a:48:15:59:eb:42:5a:55:04:8f:64:69:83:
55:a1:b3:0f:c3:af:04:31:63:4c:7f:7a:d0:7f:1f:
20:d1:34:12:e2:f1:2c:da:2c:1e:3d:7d:00:9d:1e:
5c:f2:fe:f6:28:17:a7:77:93:9c:61:26:56:33:8a:
35:27:85:fa:5c:3f:2f:a5:7f:ce:12:62:5f:e4:12:
e3:22:20:2d:6c:27:a4:a8:af:ac:7f:28:64:ad:22:
86:32:ae:c3:6c:3a:6c:17:19:b6:27:bb:bc:43:7f:
8f:4d:b1:ba:76:c7:22:f2:b5:99:60:a8:2a:6e:30:
24:eb:3e:04:14:d2:3c:c2:ca:a8:5d:ac:ea:c0:7d:
96:f1:0d:2d:c9:fb:80:f9:be:60:cf:d4:0e:20:68:
4b:b3:d3:32:4e:06:a9:b5:dc:60:d9:47:ca:8d:11:
ef:5b:ab:7a:55:41:ec:8f:35:8f:c6:28:0b:de:e9:
35:25:93:37:ab:33:a8:bd:c3:08:06:cf:e8:9c:03:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:11:88:BB:E2:D7:F0:F3:FB:80:95:FC:31:6A:9D:A9:31:D4:88:ED
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ef:42:e7:62:d2:19:38:ce:12:ae:4d:57:12:0e:4c:01:a3:
8c:46:57:c6:50:38:bc:7c:df:53:e3:ba:32:51:51:37:98:2f:
27:02:de:69:69:e5:19:2f:43:9d:a7:bd:bb:c9:2b:e9:72:9a:
df:07:d3:48:08:eb:65:44:7f:03:57:ec:dd:0e:1e:9d:a8:23:
9c:aa:91:e2:93:04:9c:21:2d:63:32:02:41:5f:0e:5b:f9:b2:
12:1a:ff:d3:21:2a:9c:37:03:87:01:65:2d:1e:27:d4:c6:10:
32:f2:91:5b:50:9d:01:db:b2:a6:87:54:d1:1d:51:8c:af:ba:
18:03:93:a6:c3:51:0a:2b:a2:c8:47:5a:d9:3a:9c:e2:f1:e0:
9a:95:cf:9c:ee:ff:78:36:4a:47:30:f8:fc:63:05:e2:66:75:
e0:f8:2d:75:9b:f1:bc:58:dc:91:71:8b:d8:a6:85:39:f7:fb:
f2:30:b4:24:2a:72:ef:c8:86:46:3a:42:e8:cd:ed:0e:ca:5e:
f8:0a:d4:ce:aa:11:f4:4f:32:7d:30:81:3a:78:ff:a4:95:4a:
a5:cb:1d:02:8e:ca:ed:ca:92:86:13:97:bd:79:10:4c:64:13:
8d:82:6e:f4:bf:73:fb:14:77:f1:ce:03:5d:d9:dc:06:0f:45:
c8:cb:dd:c7
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUcIjVUeym0ld9eTYHTwpkSLEuI0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MzlaFw0yNzEwMjIxNjMwMzlaMDMxMTAvBgNV
BAMTKDZBMTE4OEJCRTJEN0YwRjNGQjgwOTVGQzMxNkE5REE5MzFENDg4RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZgH3BH25OBiAd7yIhQ+ZxYnVG
fyLxH4bzozOSRxl5kIU+G1VSRAKH+6RWCqmyrfEap4XVAv+fs1GblODcGkgVWetC
WlUEj2Rpg1Whsw/DrwQxY0x/etB/HyDRNBLi8SzaLB49fQCdHlzy/vYoF6d3k5xh
JlYzijUnhfpcPy+lf84SYl/kEuMiIC1sJ6Sor6x/KGStIoYyrsNsOmwXGbYnu7xD
f49Nsbp2xyLytZlgqCpuMCTrPgQU0jzCyqhdrOrAfZbxDS3J+4D5vmDP1A4gaEuz
0zJOBqm13GDZR8qNEe9bq3pVQeyPNY/GKAve6TUlkzerM6i9wwgGz+icA4yTAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUahGIu+LX8PP7gJX8MWqdqTHUiO0wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzNjM1MmUz
MjMwMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABQQdEwDQYJKoZIhvcNAQELBQADggEBAG/vQudi0hk4zhKuTVcSDkwBo4xG
V8ZQOLx831PjujJRUTeYLycC3mlp5RkvQ52nvbvJK+lymt8H00gI62VEfwNX7N0O
Hp2oI5yqkeKTBJwhLWMyAkFfDlv5shIa/9MhKpw3A4cBZS0eJ9TGEDLykVtQnQHb
sqaHVNEdUYyvuhgDk6bDUQoroshHWtk6nOLx4JqVz5zu/3g2Skcw+PxjBeJmdeD4
LXWb8bxY3JFxi9imhTn3+/IwtCQqcu/IhkY6QujN7Q7KXvgK1M6qEfRPMn0wgTp4
/6SVSqXLHQKOyu3KkoYTl715EExkE42CbvS/c/sUd/HOA13Z3AYPRcjL3cc=
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:52 2026 by rpki-client