Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa
File: 38312e32322e33372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: d9LOSTgnQm6WRj948T5CaVNxAZ19PAjtkiFjHwZcRpA=
Subject key identifier: CE:7F:3E:14:55:BB:1C:E4:35:FE:D4:28:2B:CF:A6:A0:E0:BF:62:24
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 34244FC5EAD442D80A801368F8A298930F32E877
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:35 +0000
ROA not before: Fri 23 Oct 2026 16:25:35 +0000
ROA not after: Fri 22 Oct 2027 16:30:35 +0000
asID: 136787
IP address blocks: 81.22.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:24:4f:c5:ea:d4:42:d8:0a:80:13:68:f8:a2:98:93:0f:32:e8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:35 2026 GMT
Not After : Oct 22 16:30:35 2027 GMT
Subject: CN=CE7F3E1455BB1CE435FED4282BCFA6A0E0BF6224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:fb:3c:29:33:ad:81:47:4d:f9:5e:68:ff:
84:c5:8f:fc:80:33:5f:da:5c:2c:d4:65:6f:a0:67:
e0:77:12:8a:57:ca:d3:ec:1b:2b:c9:d1:0d:e1:99:
59:7d:b3:50:90:f7:a6:3f:81:96:c4:4e:be:c0:6e:
e0:27:0b:4c:d5:a5:9c:6e:27:a0:ea:e5:74:29:81:
40:e3:99:17:0a:b0:43:c6:e3:20:1d:4d:27:a7:c6:
04:3e:d8:fc:f6:23:fc:b1:63:a9:5c:bf:34:a1:1d:
19:ee:4d:f4:3b:60:8e:55:3e:85:35:37:fc:b3:31:
ae:17:a1:ba:0c:6b:7f:cd:4b:aa:e8:df:3e:f1:71:
21:b1:86:ba:31:99:f8:59:7b:b9:5e:0c:94:58:75:
cd:da:48:b5:a1:8e:7c:4d:dc:c9:3b:90:f6:4c:e7:
61:f3:8f:aa:d6:92:48:af:6d:d6:5e:35:33:74:12:
49:34:ea:be:d4:e5:31:25:95:a8:7d:9b:02:cb:ed:
a0:ae:d2:e8:b5:bd:95:fd:f4:54:38:c2:a4:11:9e:
b7:1a:b6:5c:24:30:47:e2:3e:23:34:fc:81:1b:67:
75:7d:aa:ff:24:70:cf:16:ea:ed:17:3e:37:71:9d:
eb:ee:d8:c6:5f:11:8c:09:da:8d:bb:9c:f4:f0:4e:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:3E:14:55:BB:1C:E4:35:FE:D4:28:2B:CF:A6:A0:E0:BF:62:24
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
81:25:6c:b7:55:05:f5:6a:95:1f:84:ca:45:76:aa:d9:a0:8e:
32:53:1c:0b:46:f0:51:44:b0:8b:25:56:3b:81:03:c7:09:0d:
55:31:f5:11:66:cb:a1:df:72:4e:f7:54:7f:4d:ec:83:fc:3d:
92:74:be:b0:ca:dd:9c:f6:0a:23:d7:58:49:82:fc:b9:7a:2b:
e1:2f:9c:0f:84:22:35:17:da:aa:b7:bd:08:50:a2:4c:96:78:
e4:c2:09:96:59:6e:64:f8:25:4f:02:ed:ca:21:f3:68:f3:b0:
d1:4c:43:93:a6:04:82:33:38:00:c5:23:1e:11:a4:44:0d:35:
e6:3b:26:0d:d5:c7:b0:99:8a:6c:b0:f7:18:0f:96:72:3c:6a:
c1:3f:5c:48:8c:3d:97:ba:b4:5c:3a:80:96:32:6e:4e:52:25:
9d:cd:1a:94:97:11:26:48:02:fd:b2:79:47:92:92:93:cf:2e:
2f:70:15:33:d8:ec:c1:99:a4:fe:45:6d:d2:13:e8:89:75:af:
c9:2e:66:4f:ae:b4:2e:31:63:5b:70:4f:c1:ff:9e:08:73:16:
95:40:9b:70:9e:47:e3:2a:d6:e0:fa:dd:61:8d:76:03:34:16:
01:67:0e:80:47:2e:7e:dc:d7:2d:a8:4d:49:b4:c4:24:e9:97:
ce:26:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:14:56 2026 by rpki-client