Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa
File: 38342e32312e3136382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: RHyKMMPkskvtVcV1C2O0yY3hMBKOGoHDTGN/gti7Zeg=
Subject key identifier: BB:09:81:DC:42:4C:04:59:55:9E:09:60:14:51:60:43:22:8A:AB:8B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 207DC4C67DE864A3E7B48CF73C16ADBC9CEEC601
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:08 +0000
ROA not before: Fri 23 Oct 2026 16:25:08 +0000
ROA not after: Fri 22 Oct 2027 16:30:08 +0000
asID: 136787
IP address blocks: 84.21.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7d:c4:c6:7d:e8:64:a3:e7:b4:8c:f7:3c:16:ad:bc:9c:ee:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:08 2026 GMT
Not After : Oct 22 16:30:08 2027 GMT
Subject: CN=BB0981DC424C0459559E096014516043228AAB8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:fa:30:a2:e8:98:a7:5a:20:c8:1b:57:38:
66:eb:32:81:25:b7:85:06:1b:f8:9d:b9:c8:cb:ee:
17:c4:72:e0:43:8d:ce:d7:3c:53:bc:18:da:72:32:
d2:07:40:40:86:91:aa:b5:0b:72:08:90:b5:a9:2a:
17:fd:4c:be:ba:35:cf:82:a0:85:7b:c0:e7:c1:d3:
2e:9d:e0:77:2d:2f:da:5d:50:1f:81:cf:a1:47:56:
f2:cf:4f:37:bb:90:37:c3:d3:09:c8:67:2b:8e:41:
9a:11:41:75:1e:33:ed:76:01:64:9c:90:e4:9e:24:
5d:c8:a1:ea:da:7a:e6:6a:7c:51:f5:fa:2b:55:a4:
ea:20:bf:27:fe:3e:7b:7d:a4:c1:e7:5e:42:a1:69:
4e:4d:b6:b1:eb:55:b2:6d:02:68:b1:0e:c5:57:7d:
b2:25:35:1b:77:7f:b2:e6:1f:c3:81:72:08:e1:aa:
19:ab:4a:05:29:4b:7c:83:7a:3a:b0:c3:f0:39:0b:
f5:e6:ca:0b:0c:c8:0f:49:4b:db:05:0b:c6:ef:17:
c8:d4:79:6a:e4:6e:2f:01:38:e8:54:98:90:02:64:
0f:57:cb:51:f2:4d:ce:c8:fa:48:d9:54:4b:bc:44:
e0:bc:a6:88:77:4a:df:c1:7d:47:96:da:e7:b3:76:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:81:DC:42:4C:04:59:55:9E:09:60:14:51:60:43:22:8A:AB:8B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:db:4b:51:68:a3:d2:7c:7f:bb:67:a7:0c:3a:0b:5c:3f:81:
ba:4f:72:e5:81:c3:48:46:6a:1b:0a:d7:c0:a7:2c:96:b0:cb:
e1:5d:3a:8b:d9:dc:e4:3c:6e:54:73:70:4a:11:21:7e:54:14:
71:64:80:bd:c5:00:cd:8e:80:bf:0e:65:83:f3:f8:87:14:33:
d5:04:be:e5:e1:a5:e7:94:3b:96:28:d7:ad:d1:7f:3c:cc:5f:
a5:b5:b8:09:2e:38:93:3d:27:c1:2a:19:c6:a3:77:21:e3:a4:
90:4b:2a:2a:9f:32:dc:36:f5:da:71:a3:ed:53:64:a3:35:7a:
ab:c4:1d:2c:ec:76:b5:33:d3:38:0f:05:2e:f1:72:92:71:5a:
e1:20:4a:ed:c0:28:1d:e1:44:be:a8:07:ae:5c:22:97:2a:43:
d7:25:31:71:98:f8:9f:d1:32:30:e6:0f:22:c0:be:c3:5a:de:
8b:95:5d:ae:3c:33:c5:b8:3c:9f:22:b2:34:6f:35:f8:68:3d:
93:fc:9c:36:2d:03:37:f3:8c:33:7b:50:2d:68:97:ca:34:74:
2b:fb:6c:b9:d4:b9:8f:a9:77:a4:63:85:ea:ac:5c:2b:f8:27:
dc:aa:fa:78:26:66:37:52:ca:3e:fc:17:80:33:88:9f:c0:fa:
5c:d4:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:51:41 2026 by rpki-client