Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xA7B5Crps9ViJuRSNyXzlkWV2LVS6MkKYDR+khTtJtI=
Subject key identifier: 15:E9:F3:3D:4E:3B:F3:38:CB:02:1B:BC:E9:EC:92:3C:D0:A8:CD:84
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 038DF2AFDFA61F40C0FEEF259106D2E7CFA42C90
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:37 +0000
ROA not before: Fri 23 Oct 2026 16:25:37 +0000
ROA not after: Fri 22 Oct 2027 16:30:37 +0000
asID: 136787
IP address blocks: 85.208.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8d:f2:af:df:a6:1f:40:c0:fe:ef:25:91:06:d2:e7:cf:a4:2c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:37 2026 GMT
Not After : Oct 22 16:30:37 2027 GMT
Subject: CN=15E9F33D4E3BF338CB021BBCE9EC923CD0A8CD84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:70:02:e9:66:6f:33:54:7a:46:6a:f8:81:84:
f2:b9:ec:b1:9f:42:17:e5:fd:de:68:3a:9f:e9:73:
ab:9a:47:5c:83:35:26:b9:42:c2:ee:d8:72:01:4e:
f3:cb:9a:f3:95:8b:1c:9a:af:ce:64:95:61:94:1a:
1d:ba:f6:90:f4:21:0b:4f:31:88:19:76:90:f6:c8:
15:bf:cc:15:4b:d7:05:7b:da:a1:44:9f:de:a6:d9:
43:f6:b8:5c:7e:bf:03:d6:51:d7:fa:05:83:a9:1d:
7d:3d:8f:1a:6a:15:5e:cb:0a:e0:e1:82:a6:2b:58:
3a:bf:29:17:8a:29:3e:4c:51:d2:83:94:d6:cb:90:
cd:c8:23:18:04:6f:1e:75:56:65:54:3d:0f:ac:b9:
0e:f1:07:d1:e2:5a:b3:e6:f0:2e:ff:c3:6d:2b:bb:
10:cd:0b:8e:90:33:04:61:20:cf:fe:fd:eb:5f:99:
4b:5e:56:70:f2:8d:b3:19:e3:b7:db:f8:e8:79:35:
44:fa:a6:71:21:85:57:4d:30:be:6a:3b:52:93:bd:
b4:c5:b7:9b:97:ad:a0:56:a6:b9:8a:58:42:ee:19:
ac:a0:ab:23:51:55:d4:aa:4c:5b:77:5f:72:6c:ef:
14:12:82:39:65:7b:10:64:11:54:dc:fc:b5:15:f8:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:F3:3D:4E:3B:F3:38:CB:02:1B:BC:E9:EC:92:3C:D0:A8:CD:84
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.156.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e6:4b:db:1f:3f:0f:fd:77:ad:95:63:c1:1e:eb:74:e4:7b:
c3:c2:56:5f:9d:87:f3:4b:75:9d:ad:32:d7:e6:cc:e2:60:32:
15:f0:16:63:87:94:70:0d:e4:70:94:e0:bb:e3:b0:6b:53:5c:
27:83:f4:0d:90:d0:41:83:2a:bc:42:39:4b:fd:d4:ec:82:ce:
72:fd:55:99:55:ea:29:b2:bc:5b:c4:e5:e0:e3:7f:d4:4b:94:
b2:5a:fc:78:96:bc:30:b2:34:60:17:5f:e7:bd:87:1d:cb:aa:
bd:a4:10:f2:ac:2d:86:f9:49:14:7e:22:8e:98:b6:7c:c4:7c:
90:d5:00:9c:54:a9:d1:e2:c1:5b:b2:7e:45:0a:33:4e:85:d5:
32:01:02:1f:3b:0a:d0:f6:c9:bd:54:63:2e:84:25:13:4a:db:
10:bf:7e:e4:41:9f:30:30:be:a2:a6:b4:03:d9:ff:e7:49:a1:
d0:ea:6f:5c:a2:8a:91:fc:e1:35:d9:1a:42:20:d5:70:82:95:
59:5f:a8:24:95:77:22:cf:a6:6b:56:14:19:5f:fd:54:0f:f5:
b4:14:94:e3:f6:1e:04:16:07:c4:47:9f:e6:ea:57:d5:b9:0b:
37:4b:df:a4:e5:f3:e9:9c:a8:7a:3b:86:1d:52:02:b7:2a:85:
d7:72:a8:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:28:53 2026 by rpki-client