Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa
File: 38342e32312e3136392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pcLVjW55uhh1r8WCGAgapCg6VAzGSWY7rRDNOdPJ6JQ=
Subject key identifier: 0B:ED:ED:99:D4:3F:32:24:78:37:C3:F2:39:9F:41:2B:B4:04:6C:F8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6BA850E349BFC067D6C9C39E78C37A096FF7DC1D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:31 +0000
ROA not before: Fri 23 Oct 2026 16:25:31 +0000
ROA not after: Fri 22 Oct 2027 16:30:31 +0000
asID: 136787
IP address blocks: 84.21.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a8:50:e3:49:bf:c0:67:d6:c9:c3:9e:78:c3:7a:09:6f:f7:dc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:31 2026 GMT
Not After : Oct 22 16:30:31 2027 GMT
Subject: CN=0BEDED99D43F32247837C3F2399F412BB4046CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:13:50:61:1c:74:e3:6e:57:a2:7e:20:2f:
1e:f5:bc:3d:e9:d6:84:09:32:fd:01:77:35:39:b1:
3c:e7:26:04:9d:b9:7c:d7:95:87:c3:db:99:32:c0:
c9:5f:3f:46:78:ae:fd:aa:f9:59:9b:8b:13:99:ac:
d4:f7:e2:ec:ea:4f:cb:b7:9d:85:a0:a4:53:e6:64:
f4:15:0a:94:c1:dc:1e:f3:30:63:e5:8a:e2:51:36:
8f:26:a9:5b:1b:c9:e6:85:e9:d9:f8:21:36:21:a5:
bc:b6:a3:24:7a:43:53:30:42:67:05:4d:07:44:a0:
83:35:60:1e:4d:82:c3:93:e8:2a:0a:78:52:b1:d3:
45:63:a6:b3:d2:60:bd:b8:c0:5b:11:cf:8f:98:41:
57:7b:8d:9f:52:be:f4:df:03:17:28:42:ff:f1:50:
ab:ad:73:20:e6:46:19:fa:72:c2:b9:96:9c:fe:d8:
46:f3:9d:1b:48:7b:19:99:dd:ca:af:aa:d0:3d:72:
6e:30:95:82:64:a1:1a:4b:ec:a3:20:38:84:b2:fb:
e0:44:3e:a5:7c:65:c7:07:87:61:a5:86:33:29:80:
4a:b1:4a:f8:e6:96:a9:e9:21:60:9e:89:9e:0b:ab:
ce:6d:9a:0c:ee:f0:c2:59:a0:27:4f:83:fb:8b:71:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:ED:99:D4:3F:32:24:78:37:C3:F2:39:9F:41:2B:B4:04:6C:F8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.169.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5b:0b:69:33:76:00:d3:35:58:1c:90:3c:55:ca:59:f0:21:
5a:8e:2e:c3:24:1a:1c:a9:b4:ea:30:fc:58:de:ca:8c:8d:7d:
be:da:cb:d1:1d:5a:2d:dd:40:1a:ef:1e:98:d4:81:b1:cf:5d:
cf:76:fe:41:fc:9b:41:ef:0d:95:d0:b4:b2:7f:11:fc:5a:f2:
b6:65:2f:10:10:18:5f:37:61:97:ae:0a:30:ad:ef:d3:17:52:
61:7b:cd:f6:82:9d:7c:57:17:b9:77:24:a3:79:fe:9c:90:78:
be:65:92:c9:81:4f:bf:41:ee:51:01:33:09:91:a4:0b:c9:03:
39:50:5f:f3:90:60:cb:95:e9:f6:d2:48:60:25:e5:95:31:38:
ea:f0:54:52:70:72:f0:30:19:43:3b:61:9b:8e:f4:70:90:25:
ed:80:bc:23:9a:a8:7b:ba:70:61:b4:ee:c7:67:2b:1f:13:ff:
0e:30:02:f9:c2:3b:6a:0a:6a:4f:1c:54:67:33:06:1c:cd:3a:
9d:d4:7b:17:23:71:36:fa:9f:a7:9d:c3:c3:3e:78:7d:34:e0:
b4:d9:d4:33:0d:3b:bb:25:65:a4:7a:0d:72:20:93:0d:1e:ae:
2b:04:85:79:a1:4b:58:be:c4:fa:08:20:aa:23:8f:d7:4e:2f:
93:35:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:13:18 2026 by rpki-client