Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203531313637.roa
File: 38312e32322e33382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: DP3K01COYYFY0DIvBCaoq0/Gy51+4vPXSVbcI+a7kiM=
Subject key identifier: D7:1F:D3:86:47:A2:59:15:6B:CC:B4:4E:46:B0:AB:D4:71:9C:C0:01
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 777047D949532447468BCBB7E254B91D0067D8C4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203531313637.roa
Signing time: Fri 23 Oct 2026 16:30:38 +0000
ROA not before: Fri 23 Oct 2026 16:25:38 +0000
ROA not after: Fri 22 Oct 2027 16:30:38 +0000
asID: 51167
IP address blocks: 81.22.38.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 07:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:70:47:d9:49:53:24:47:46:8b:cb:b7:e2:54:b9:1d:00:67:d8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:38 2026 GMT
Not After : Oct 22 16:30:38 2027 GMT
Subject: CN=D71FD38647A259156BCCB44E46B0ABD4719CC001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:a7:8d:9b:3b:1d:ab:82:ad:9b:7f:00:8c:
e3:a8:32:0f:45:a6:41:d6:56:1a:10:8b:10:9b:8c:
05:78:8a:dc:5e:b1:5d:f1:36:b7:68:c7:03:28:ab:
a1:05:e6:fd:71:88:2b:29:25:18:01:a6:72:93:35:
23:d1:5e:44:39:0e:97:b6:dd:c6:a9:ac:9a:47:d1:
d6:d4:41:c4:70:65:0a:ab:b7:78:9b:61:d6:09:c0:
c7:ca:f7:df:3c:4a:11:a4:5e:0f:3b:24:76:d4:51:
b4:1e:81:38:df:f5:ed:a1:17:13:a2:f8:95:eb:01:
77:db:7a:7e:66:df:70:9a:45:2d:5e:3f:ba:95:b5:
ff:f4:fa:07:50:73:d0:59:9c:40:50:46:2a:f3:7f:
ef:77:48:d4:6e:ee:69:df:13:7d:5b:41:d1:16:3c:
59:3d:f8:a9:0b:53:a5:cb:bf:3e:be:f1:ab:25:73:
f7:2c:aa:94:a8:16:a6:ed:cf:e2:f5:9f:67:d2:23:
28:7b:84:99:a4:ef:d5:15:6c:ed:a3:94:c4:86:2e:
0b:19:e0:62:6c:41:23:06:ce:e9:51:97:fa:c2:dc:
e8:eb:37:ab:ff:8a:d1:04:da:7e:cc:e0:c6:ed:f4:
1f:e6:e5:c7:2c:37:99:a3:aa:2c:44:a0:04:d1:9c:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:D3:86:47:A2:59:15:6B:CC:B4:4E:46:B0:AB:D4:71:9C:C0:01
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:32:d2:09:42:67:23:f0:6a:a0:53:5b:30:35:e6:eb:e6:4d:
1d:e2:a9:ca:ed:84:85:fa:83:5e:02:53:10:c6:03:ad:18:9e:
5b:4c:ca:cd:ba:d1:b0:af:52:1b:5b:66:1b:af:c3:c4:19:30:
af:e1:db:65:e2:f4:cb:4d:99:7f:6d:5b:1a:ba:26:2d:5c:78:
e1:4c:fa:07:68:15:88:94:46:02:96:7d:a8:fd:3b:cf:ea:8b:
00:a5:a8:c9:0d:cf:2f:6b:0b:2a:59:30:67:e7:f7:3f:ee:72:
c3:a6:59:89:17:4b:b0:8d:33:57:0b:32:5b:c5:de:60:84:d2:
0a:c4:61:d7:53:20:2a:78:2c:87:70:71:63:4f:27:10:df:f3:
74:c5:41:22:b8:a8:c8:24:c6:f3:0a:31:32:3e:7d:51:94:15:
23:9d:74:7f:77:e5:f9:7d:b9:18:d2:43:05:b8:3b:7a:2b:ae:
96:92:36:03:ac:87:60:26:4a:61:5a:ff:ed:03:ba:07:d8:c5:
3a:bb:83:01:ea:ac:2b:0a:bf:89:b1:a2:27:2d:26:31:b4:0d:
da:26:06:88:7f:a8:d1:82:5f:46:24:15:af:90:31:e7:99:81:
52:b6:66:c1:da:45:93:db:70:58:54:87:1f:5a:c8:72:37:7a:
55:3a:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:31 2026 by rpki-client