Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323132323338.roa
File: 38312e32322e33362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: CGMaOXFvduxCaddYv7bCya83FeQ1rGNYLWcKP8NlHj4=
Subject key identifier: 53:D4:BF:E2:19:B6:60:11:F3:FE:82:63:9F:B1:6B:7A:4F:55:70:5C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 687CF867AE97D55A1AF6CCACF7FC9F69CB03C4F6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Jul 2026 10:58:44 +0000
ROA not before: Thu 09 Jul 2026 10:53:44 +0000
ROA not after: Thu 08 Jul 2027 10:58:44 +0000
asID: 212238
IP address blocks: 81.22.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7c:f8:67:ae:97:d5:5a:1a:f6:cc:ac:f7:fc:9f:69:cb:03:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 9 10:53:44 2026 GMT
Not After : Jul 8 10:58:44 2027 GMT
Subject: CN=53D4BFE219B66011F3FE82639FB16B7A4F55705C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:5c:6c:47:d9:0c:89:06:76:0d:b1:47:5a:
82:dd:fa:ed:82:08:bf:73:e1:16:c2:90:27:91:00:
14:24:ce:3e:1d:8d:51:26:ba:bd:06:fa:af:5f:58:
bb:1b:1e:57:f5:b6:b3:41:5d:ad:e1:32:8d:fa:69:
60:b9:7c:da:43:c0:28:6b:32:05:b6:e4:2c:38:3f:
ac:d5:7d:2e:08:dd:84:5a:65:83:25:d2:df:c8:02:
a4:a4:2d:37:36:93:43:41:66:d2:63:ba:12:52:39:
40:6b:8d:f5:81:47:4a:64:ec:70:67:fb:c5:2d:c3:
5b:7e:3e:dd:fa:72:d2:58:f9:bd:1f:c4:67:9f:c6:
37:54:52:d0:96:2a:6b:74:51:03:3c:b2:3a:c6:0d:
31:49:4e:7c:1e:1a:ff:51:07:52:3a:c8:06:8c:43:
3a:36:ba:e6:e5:c5:db:86:03:42:fe:d7:ff:7e:6f:
23:55:53:22:8a:cd:c4:8f:96:95:45:75:c4:05:4a:
61:ed:71:9a:6f:a6:f4:67:ae:d2:48:86:58:37:0b:
c6:ad:f0:ab:f0:00:ca:17:47:8e:94:56:17:7f:c1:
26:a5:39:88:e2:2c:ff:49:95:f2:3a:0c:2f:e5:a8:
75:48:4a:08:bc:16:4c:08:a4:8c:2c:1b:42:bc:7f:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D4:BF:E2:19:B6:60:11:F3:FE:82:63:9F:B1:6B:7A:4F:55:70:5C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3c:30:37:42:cb:cb:68:68:46:2a:7e:f6:67:09:53:d0:1a:
e6:12:c1:98:39:33:ce:f8:66:22:57:4d:85:30:d9:59:5f:7a:
13:3f:0b:fb:9e:d4:30:be:6e:4a:02:9e:34:d6:16:26:cd:22:
01:f3:62:ee:68:a1:54:64:9a:0a:f2:86:17:61:92:fe:b3:85:
3d:dc:a8:4f:26:4e:3a:fe:b9:b8:17:4e:bf:3b:17:72:ef:77:
8d:93:90:9b:46:0d:f4:df:1b:d8:32:bc:f9:40:cc:cc:2b:ad:
f4:f8:5d:b1:52:0b:50:28:86:49:06:53:c7:04:ee:d5:8f:a9:
c2:13:a6:a7:f1:93:03:33:80:34:f6:9c:b5:de:4d:ec:06:b5:
7b:a0:a5:5b:28:d6:16:c0:a7:f0:a9:1d:45:4e:56:63:18:c5:
4c:17:72:02:8d:41:3b:dc:8a:3a:e8:c4:1d:92:62:e0:b0:d0:
eb:b1:b0:eb:99:9c:2f:88:38:89:4f:78:9c:44:cd:89:b7:5b:
29:b5:c7:db:12:e0:94:0c:e6:7c:5f:4a:b4:99:04:08:a5:21:
8a:70:16:1b:83:93:4f:6d:dd:a9:8c:21:44:ea:c4:b4:75:92:
a2:64:f9:db:f6:ad:8a:b2:8e:87:ca:2d:ec:cb:7b:a0:ac:4c:
c9:16:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:47:01 2026 by rpki-client