Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa
File: 38342e32312e3137302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EyE2kM6zozswP+Kfdx4WMZ7TF4hlk/eVheTc6eoZJdc=
Subject key identifier: 6E:72:8B:0D:86:BE:F1:DE:8D:9C:B9:0A:62:0B:2D:CA:06:A4:5B:90
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3B284CAEFFEA033E7BB24A63B08CA8BDF61EFCED
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:08 +0000
ROA not before: Fri 23 Oct 2026 16:25:08 +0000
ROA not after: Fri 22 Oct 2027 16:30:08 +0000
asID: 136787
IP address blocks: 84.21.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:28:4c:ae:ff:ea:03:3e:7b:b2:4a:63:b0:8c:a8:bd:f6:1e:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:08 2026 GMT
Not After : Oct 22 16:30:08 2027 GMT
Subject: CN=6E728B0D86BEF1DE8D9CB90A620B2DCA06A45B90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:37:5f:b4:5e:b8:91:ab:0e:a9:bb:a5:60:
72:4c:2e:12:41:74:27:d9:59:1e:d3:15:34:7a:01:
8a:b6:54:5c:46:a8:07:c3:27:7b:84:b3:e9:d9:b0:
4a:08:e3:fe:9b:52:e5:48:1a:d1:93:ff:d6:eb:0d:
cf:6b:fd:9e:c4:ef:61:c0:8b:d1:73:fc:87:a8:b9:
0b:6d:60:19:82:0e:bc:5e:36:fb:50:48:c1:24:7d:
67:a7:45:8f:81:65:46:aa:ec:49:8c:f9:9a:02:b7:
41:60:54:6a:2c:85:86:54:b1:cd:78:e5:ae:69:9c:
61:54:e2:f8:50:55:a9:c7:7e:4e:ea:df:18:4a:1b:
15:a5:79:b7:84:45:c9:f8:85:27:c8:2a:77:a7:ba:
1a:21:98:60:05:dd:8f:e6:19:96:20:85:30:45:29:
fc:55:94:80:69:a1:3b:09:5f:d3:39:ac:ce:38:66:
ac:f2:2a:27:bd:8f:fe:1b:5f:b7:3e:44:4e:51:04:
5d:45:52:60:64:3e:56:dc:57:e1:14:08:70:ff:70:
d9:37:8f:2c:7c:d7:99:fd:57:4a:9a:f7:08:a6:79:
a4:af:ff:7e:f1:ab:da:d0:b9:54:a8:a6:cf:8e:87:
be:dd:dc:dd:17:ed:14:d2:cb:6b:15:61:50:a9:35:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:8B:0D:86:BE:F1:DE:8D:9C:B9:0A:62:0B:2D:CA:06:A4:5B:90
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7f:42:35:96:b0:99:ae:a1:7f:7f:e0:69:7f:f0:e2:fe:c5:
0e:f3:67:e8:50:a8:c0:5c:6f:b2:52:64:3d:46:34:a9:cf:b3:
ab:06:7f:8b:cf:f6:00:ca:cb:8b:9f:2e:25:72:91:df:af:05:
0e:c1:06:a3:65:bd:3b:e3:14:16:30:72:d6:c9:4a:99:b8:b5:
38:eb:cd:dc:06:a3:c1:5c:96:48:d5:90:35:9d:ad:a0:33:c2:
7c:08:56:47:21:e2:a7:c4:dc:4f:aa:dc:f4:54:18:b5:d3:f7:
4e:01:e2:54:19:b9:0e:31:ae:38:d6:20:49:53:8e:00:49:04:
d0:a4:b8:0e:87:0a:30:f1:c6:f4:93:ef:f3:8d:5e:03:60:f3:
28:3c:05:e8:88:96:9f:ec:07:db:9c:6d:14:ef:f3:26:0e:9a:
b1:9d:00:58:a4:d7:a3:ca:05:7e:b1:2d:ba:12:d9:e8:dc:fd:
30:5f:4b:02:f7:5d:8c:80:f1:b1:f9:da:2a:a6:39:26:ea:6b:
76:b4:fe:94:6f:06:de:a3:6f:7d:c9:cc:3f:17:f2:12:c3:bd:
2f:34:fa:86:8e:30:a9:31:0f:d4:4d:7d:41:36:f6:06:bb:75:
fa:d8:e9:0b:98:ea:cd:b3:4a:05:31:04:9d:c0:8c:5b:67:06:
66:1d:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:13:44 2026 by rpki-client