Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa
File: 38302e36352e3231312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ChNhJ0R7JjUSrkGd9YLMuZGAjCxaqPx0ClBffd0VGcA=
Subject key identifier: F2:61:C6:99:76:A0:DD:73:98:0C:7D:AD:24:8B:3F:91:F0:47:14:D0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7CCFE16B495EB463C727DE24DD94BA1B14E36F51
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:20 +0000
ROA not before: Fri 23 Oct 2026 16:25:20 +0000
ROA not after: Fri 22 Oct 2027 16:30:20 +0000
asID: 51167
IP address blocks: 80.65.211.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cf:e1:6b:49:5e:b4:63:c7:27:de:24:dd:94:ba:1b:14:e3:6f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:20 2026 GMT
Not After : Oct 22 16:30:20 2027 GMT
Subject: CN=F261C69976A0DD73980C7DAD248B3F91F04714D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:b6:3b:da:79:5a:fb:b6:98:06:42:09:23:
37:5b:bb:b3:62:cf:bb:fd:e4:10:3b:4d:de:19:2a:
ed:bc:40:af:1b:4a:85:f4:ba:2f:b7:b7:38:19:82:
9c:d6:e9:34:a8:1d:3f:10:48:5c:1d:e1:9c:09:9e:
51:8c:3e:8b:04:dd:8b:d4:27:fc:48:76:18:90:9f:
03:98:0b:62:dc:49:90:f2:0e:8e:98:2b:f9:b9:90:
d9:cf:96:c8:2e:69:89:b9:af:07:9c:0a:fc:d5:1d:
00:4c:93:76:e3:5d:17:7a:bf:9b:af:c2:78:0f:00:
95:6f:13:83:a5:f8:a1:e4:45:a9:c0:09:8a:8f:c2:
f6:4e:14:f1:c0:b9:f3:25:ee:63:08:4b:19:4f:08:
34:30:bd:52:00:8f:79:2e:2c:4d:a8:51:f8:46:26:
ad:6c:41:45:26:88:87:04:4f:84:a6:b6:75:7f:7c:
73:12:b1:fd:bd:59:80:bc:a1:ed:77:8a:cf:f3:01:
a8:6f:6a:4d:32:da:6a:7e:f9:2b:87:ba:0d:3c:16:
95:21:d5:4e:60:29:a7:f0:a5:b0:c9:ad:9a:2c:75:
43:70:ee:9b:1d:b2:04:67:ea:cc:47:94:6a:f8:fd:
c3:44:f3:f0:61:e6:ce:12:08:e6:6a:31:ce:a2:59:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:C6:99:76:A0:DD:73:98:0C:7D:AD:24:8B:3F:91:F0:47:14:D0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.211.0/24
Signature Algorithm: sha256WithRSAEncryption
04:9c:41:3e:8d:ad:ed:a1:06:e4:81:37:fd:11:d6:d3:d0:4f:
1c:5c:81:d7:b4:7e:3b:2b:81:cc:ce:76:ed:80:0c:a2:68:cc:
e1:db:db:5b:dd:9a:9d:38:43:21:6e:52:3a:5e:4b:1e:9c:17:
87:16:e1:df:31:65:d7:37:ff:24:6c:2a:35:3b:b4:9e:c4:69:
81:bb:0e:6e:f0:c1:02:16:62:d5:1a:4c:c5:25:ce:95:3b:4e:
9d:50:0d:a4:02:6d:fd:c0:7d:f2:50:9f:81:84:9a:5d:dd:a0:
34:5b:cc:d3:bb:4a:9d:a3:f6:28:66:2f:f1:57:ea:a0:00:2a:
c1:e2:89:c1:74:df:a4:1c:2d:fc:4f:65:bc:32:c6:78:15:e6:
d1:4d:ff:c0:ce:e6:e3:70:e9:69:e1:88:60:bc:f2:23:c1:3a:
24:86:20:05:61:39:5b:a1:a2:8b:bd:3d:88:86:27:c9:7e:aa:
b2:b7:88:ed:35:a4:6c:d5:52:2d:a9:17:b4:2f:06:34:68:40:
de:3e:31:e3:57:dd:24:fb:1e:e0:6e:e5:ae:ed:f2:d3:e8:28:
cf:d9:76:7a:ad:08:ad:ee:a8:08:01:b9:15:c4:3b:76:4e:98:
13:37:d0:f0:e8:5b:89:41:23:2f:e6:54:ee:e9:3d:18:e9:1b:
0b:5f:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 00:08:33 2026 by rpki-client