Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e37312e3134382e302f32342d3234203d3e20343031333632.roa
File: 38302e37312e3134382e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: yiGZKNf3eisD7rkitERFd7I+PrCyCqKcmW/eZEQVIO4=
Subject key identifier: E9:93:57:CB:AB:CD:4D:D3:BE:21:45:B2:5F:EC:3E:B3:0A:0E:AF:B4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 350B9E5B2285B82A0329485A29E03B0E28DC3965
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e37312e3134382e302f32342d3234203d3e20343031333632.roa
Signing time: Tue 20 Oct 2026 07:51:13 +0000
ROA not before: Tue 20 Oct 2026 07:46:13 +0000
ROA not after: Tue 19 Oct 2027 07:51:13 +0000
asID: 401362
IP address blocks: 80.71.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0b:9e:5b:22:85:b8:2a:03:29:48:5a:29:e0:3b:0e:28:dc:39:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 20 07:46:13 2026 GMT
Not After : Oct 19 07:51:13 2027 GMT
Subject: CN=E99357CBABCD4DD3BE2145B25FEC3EB30A0EAFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b5:a4:13:aa:5e:6e:8c:55:9a:63:8a:45:d1:
94:b0:4b:3d:57:5d:53:bb:09:5e:28:e5:22:5a:67:
f7:23:75:ce:2e:a2:fd:05:00:25:a6:98:ee:39:bf:
da:b8:8a:9a:17:8f:c6:88:6d:bb:51:25:c5:8c:ee:
7b:07:53:8f:61:9c:5d:ed:03:ec:c8:6e:db:ae:38:
a1:98:45:3a:dd:d9:46:08:77:7b:82:e4:f1:a6:5d:
f4:bb:c8:19:a3:e1:6d:b9:4c:91:5e:a6:55:f5:1b:
7c:2f:07:0f:f8:f0:63:68:20:4c:cc:0e:58:18:7e:
74:b3:13:a9:22:41:ba:6a:08:3b:76:28:f1:07:d2:
74:51:1d:07:94:cb:e7:55:db:e7:95:fb:fd:88:33:
ca:17:6d:19:fd:99:b8:11:9e:85:d0:2b:96:a0:67:
9a:0d:f2:3a:6d:ee:f7:53:3b:b0:aa:31:35:66:53:
23:6c:a8:6d:14:45:bf:75:f3:96:e2:03:46:aa:77:
db:79:9f:17:70:d5:9e:35:eb:73:36:4e:f8:5e:59:
3b:0c:fd:1c:b6:fd:2f:98:41:2e:74:16:2e:d3:b1:
39:5b:46:f5:51:d2:98:eb:ec:0f:5e:64:27:e4:9f:
9d:3a:0d:9e:b8:ff:34:61:c2:d2:51:49:e3:df:dc:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:57:CB:AB:CD:4D:D3:BE:21:45:B2:5F:EC:3E:B3:0A:0E:AF:B4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e37312e3134382e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.148.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4b:7d:10:68:77:9f:23:7b:b1:92:ed:f7:f1:d4:48:73:96:
c8:f5:2a:6f:13:52:3a:30:80:c6:5c:59:91:07:dd:12:83:2d:
67:ac:c9:65:76:ff:3b:aa:10:81:8a:09:65:68:03:ff:2b:5c:
f0:44:4b:68:9b:f4:6e:33:f9:0e:3f:86:bc:c9:65:19:8c:70:
1b:33:2c:c1:88:57:32:48:60:4b:f2:2d:32:62:bd:a9:4d:5e:
5a:2d:94:f0:b5:74:3e:a0:e5:36:0d:d3:62:6f:f2:7e:bb:24:
65:6d:0d:19:bf:5a:0f:a9:39:07:a6:0b:a3:59:7b:f4:3a:a6:
28:b5:14:14:f3:4a:65:f3:be:79:01:a6:cb:76:2c:a8:cc:c5:
77:2f:86:2f:bd:a5:f8:3c:a8:a9:04:8d:48:b3:80:3a:0c:66:
f0:27:d3:90:c8:31:5b:ca:6a:be:e7:f3:d5:c6:c2:a6:00:bc:
94:6a:4c:3e:36:c2:6f:4c:89:54:73:06:15:14:b1:12:c0:ad:
62:f7:dd:19:71:5f:d7:23:2a:14:9a:9b:8e:84:b5:10:ff:c5:
7a:50:6a:bf:96:10:d7:91:63:2a:81:b5:27:30:55:b1:15:cf:
e7:30:88:f1:2e:94:3c:df:e2:48:c2:9b:bc:86:b3:18:72:21:
42:93:45:82
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUNQueWyKFuCoDKUhaKeA7DijcOWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjAwNzQ2MTNaFw0yNzEwMTkwNzUxMTNaMDMxMTAvBgNV
BAMTKEU5OTM1N0NCQUJDRDRERDNCRTIxNDVCMjVGRUMzRUIzMEEwRUFGQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvtaQTql5ujFWaY4pF0ZSwSz1X
XVO7CV4o5SJaZ/cjdc4uov0FACWmmO45v9q4ipoXj8aIbbtRJcWM7nsHU49hnF3t
A+zIbtuuOKGYRTrd2UYId3uC5PGmXfS7yBmj4W25TJFeplX1G3wvBw/48GNoIEzM
DlgYfnSzE6kiQbpqCDt2KPEH0nRRHQeUy+dV2+eV+/2IM8oXbRn9mbgRnoXQK5ag
Z5oN8jpt7vdTO7CqMTVmUyNsqG0URb9185biA0aqd9t5nxdw1Z4163M2TvheWTsM
/Ry2/S+YQS50Fi7TsTlbRvVR0pjr7A9eZCfkn506DZ64/zRhwtJRSePf3OlrAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU6ZNXy6vNTdO+IUWyX+w+swoOr7QwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMwMmUzNzMxMmUz
MTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzMzM2MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABQR5QwDQYJKoZIhvcNAQELBQADggEBACRLfRBod58je7GS7ffx1Ehzlsj1
Km8TUjowgMZcWZEH3RKDLWesyWV2/zuqEIGKCWVoA/8rXPBES2ib9G4z+Q4/hrzJ
ZRmMcBszLMGIVzJIYEvyLTJivalNXlotlPC1dD6g5TYN02Jv8n67JGVtDRm/Wg+p
OQemC6NZe/Q6pii1FBTzSmXzvnkBpst2LKjMxXcvhi+9pfg8qKkEjUizgDoMZvAn
05DIMVvKar7n89XGwqYAvJRqTD42wm9MiVRzBhUUsRLArWL33RlxX9cjKhSam46E
tRD/xXpQar+WENeRYyqBtScwVbEVz+cwiPEulDzf4kjCm7yGsxhyIUKTRYI=
-----END CERTIFICATE-----
Generated at Thu Oct 22 03:28:27 2026 by rpki-client