Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa
File: 38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: y1SWUDkLPAxR5k3oCyJGgZw/HvOwx0m6604thtu28iQ=
Subject key identifier: 09:18:3A:9A:C0:AC:22:0D:43:DE:BF:1E:AB:57:C2:7B:83:C3:F0:95
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0DB98CB09FD9E023CBBE3216068313DCB52F5C37
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:34 +0000
ROA not before: Fri 23 Oct 2026 16:25:34 +0000
ROA not after: Fri 22 Oct 2027 16:30:34 +0000
asID: 136787
IP address blocks: 83.171.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b9:8c:b0:9f:d9:e0:23:cb:be:32:16:06:83:13:dc:b5:2f:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:34 2026 GMT
Not After : Oct 22 16:30:34 2027 GMT
Subject: CN=09183A9AC0AC220D43DEBF1EAB57C27B83C3F095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:51:89:11:5e:61:17:7a:f4:fc:12:79:0b:d1:
c6:af:ae:c3:d7:65:8f:47:1a:4c:34:de:f9:cb:06:
45:25:02:b6:e2:66:08:b1:de:4c:39:29:8c:de:d4:
58:ab:24:b7:f2:73:9f:40:70:23:91:a3:bd:92:31:
62:25:cb:3c:fe:d0:b7:6d:20:1a:a0:02:94:2d:7b:
0f:2d:59:39:f5:6b:68:51:32:29:ca:b0:54:76:e1:
71:54:23:45:d4:7b:1a:9e:db:f6:5c:20:fc:9d:de:
1b:5d:e2:54:6d:ad:86:d1:68:35:c4:9e:a3:e2:45:
c0:0d:17:60:04:f7:31:d5:13:fa:58:e9:be:67:12:
ed:04:44:71:b5:ff:14:1d:fd:34:3c:52:ce:4b:cf:
19:ac:2b:5e:09:18:63:0c:8e:2c:aa:79:83:18:4c:
96:d9:e6:85:d7:98:28:f4:2f:96:24:bd:e1:43:cf:
65:f1:17:8b:01:9e:bd:cd:56:80:9b:cc:9e:f9:c3:
47:ca:00:02:50:e2:ff:54:f8:2d:0e:a2:3d:18:ee:
e2:18:bd:51:e5:59:73:7d:c7:b9:5d:13:57:1c:3a:
81:01:86:ab:06:3f:9f:bd:4e:d3:84:d5:88:20:f0:
fb:3e:d0:a0:8c:c0:80:56:9b:33:dc:42:ff:2e:13:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:3A:9A:C0:AC:22:0D:43:DE:BF:1E:AB:57:C2:7B:83:C3:F0:95
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.250.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:74:2f:88:4a:0c:13:9c:a1:57:85:e3:02:63:a4:b5:df:e1:
42:13:f9:a7:e4:c7:20:d2:68:0e:bc:4b:8e:ca:b9:93:83:c6:
f6:ae:77:78:91:f6:4f:c8:7d:32:ee:65:11:e7:52:3e:c4:10:
06:7f:f6:e1:ac:c2:19:23:4e:ad:29:65:69:0e:47:0c:89:a1:
c7:a0:ce:ff:23:f9:2c:1c:9d:86:37:e1:52:8e:fc:62:cc:3d:
61:ad:dc:da:1f:f9:5d:66:db:c1:0b:a3:67:d0:a9:bc:66:cc:
b4:08:d6:34:17:45:f6:7c:63:bf:fd:32:b2:ba:9a:14:73:6d:
fb:37:4c:99:30:68:ee:3f:72:0a:10:34:e5:c8:9c:89:d9:cd:
d7:4e:0d:ea:5f:f2:b2:22:c7:9e:a0:cc:9f:fc:3c:09:49:7a:
38:b9:9f:ab:65:23:71:50:67:10:4b:21:b3:d8:54:94:c2:0a:
41:7a:37:af:2e:5b:0b:07:b0:2c:68:34:5d:85:66:fc:fb:a7:
72:0b:81:f4:72:bf:72:53:87:47:a3:d6:62:e3:2d:61:cb:29:
26:26:8a:ab:77:d3:b0:8a:25:47:b0:e5:90:7f:32:4c:c2:6d:
57:7e:1d:74:91:1f:44:29:d9:1a:45:c0:bb:0a:d7:38:d8:f5:
c6:c3:0f:be
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUDbmMsJ/Z4CPLvjIWBoMT3LUvXDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MzRaFw0yNzEwMjIxNjMwMzRaMDMxMTAvBgNV
BAMTKDA5MTgzQTlBQzBBQzIyMEQ0M0RFQkYxRUFCNTdDMjdCODNDM0YwOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUYkRXmEXevT8EnkL0cavrsPX
ZY9HGkw03vnLBkUlArbiZgix3kw5KYze1FirJLfyc59AcCORo72SMWIlyzz+0Ldt
IBqgApQtew8tWTn1a2hRMinKsFR24XFUI0XUexqe2/ZcIPyd3htd4lRtrYbRaDXE
nqPiRcANF2AE9zHVE/pY6b5nEu0ERHG1/xQd/TQ8Us5LzxmsK14JGGMMjiyqeYMY
TJbZ5oXXmCj0L5YkveFDz2XxF4sBnr3NVoCbzJ75w0fKAAJQ4v9U+C0Ooj0Y7uIY
vVHlWXN9x7ldE1ccOoEBhqsGP5+9TtOE1Ygg8Ps+0KCMwIBWmzPcQv8uE8RVAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUCRg6msCsIg1D3r8eq1fCe4PD8JUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTM3MzEy
ZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAVOr+jANBgkqhkiG9w0BAQsFAAOCAQEAG3QviEoME5yhV4XjAmOktd/h
QhP5p+THINJoDrxLjsq5k4PG9q53eJH2T8h9Mu5lEedSPsQQBn/24azCGSNOrSll
aQ5HDImhx6DO/yP5LBydhjfhUo78Ysw9Ya3c2h/5XWbbwQujZ9CpvGbMtAjWNBdF
9nxjv/0ysrqaFHNt+zdMmTBo7j9yChA05cicidnN104N6l/ysiLHnqDMn/w8CUl6
OLmfq2UjcVBnEEshs9hUlMIKQXo3ry5bCwewLGg0XYVm/PuncguB9HK/clOHR6PW
YuMtYcspJiaKq3fTsIolR7DlkH8yTMJtV34ddJEfRCnZGkXAuwrXONj1xsMPvg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:01 2026 by rpki-client