Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: M/idjHEd6lG27bqZVCsTXfaAa3nYipg+bKW1X+kAdBo=
Subject key identifier: 4B:FD:A7:DB:12:57:98:5F:04:58:63:A1:FA:93:0D:DC:EC:B7:42:AC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1BE62448E24B608B464A16EC9CB3D5860691978F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:08 +0000
ROA not before: Fri 23 Oct 2026 16:25:08 +0000
ROA not after: Fri 22 Oct 2027 16:30:08 +0000
asID: 136787
IP address blocks: 85.208.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e6:24:48:e2:4b:60:8b:46:4a:16:ec:9c:b3:d5:86:06:91:97:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:08 2026 GMT
Not After : Oct 22 16:30:08 2027 GMT
Subject: CN=4BFDA7DB1257985F045863A1FA930DDCECB742AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:a1:c4:8a:2f:5e:d8:ee:c3:60:7d:65:9e:
df:80:00:83:1c:33:57:91:2c:73:51:f0:ef:bd:3c:
50:39:f7:3a:34:4b:38:df:da:6d:51:4b:b3:a8:a7:
d5:24:be:85:12:99:6c:5f:31:4f:10:97:eb:2d:b6:
00:6d:e5:4c:cb:9e:24:10:03:7f:9b:5b:8b:80:ae:
b0:16:73:37:a6:87:2b:8a:b5:03:60:1e:f7:5d:1c:
56:61:d1:1d:0a:ea:f2:a5:73:f7:1d:d4:5a:24:15:
75:c5:1b:fa:51:2d:af:27:95:46:25:98:00:26:64:
d6:59:1e:9b:bf:b3:d6:43:de:70:85:9b:66:dc:ed:
84:88:76:3a:19:83:3e:1d:b4:45:f0:25:f2:e6:ce:
76:a2:9d:96:a3:ba:94:a3:e8:76:3d:15:d3:bd:88:
9e:89:8e:d2:b0:88:e8:a5:4c:b3:98:eb:ff:81:af:
ca:25:ce:bd:f6:06:15:bc:19:ad:0f:7e:77:b1:44:
1f:16:99:81:68:0b:0d:45:30:92:12:8f:73:e1:d2:
49:49:22:b4:f3:13:a5:4e:1c:8c:b5:cb:84:13:0d:
1d:34:11:e2:99:6d:b1:14:b7:97:d1:4a:6d:b9:69:
7d:19:25:16:67:4b:8f:44:23:b5:47:30:62:12:1f:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:A7:DB:12:57:98:5F:04:58:63:A1:FA:93:0D:DC:EC:B7:42:AC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.157.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:45:94:82:aa:e0:8e:9f:bd:3b:cc:de:47:89:0e:7b:2a:6c:
ba:0c:54:7d:7f:a2:77:26:6d:73:d2:76:13:3c:fc:da:3c:38:
68:6b:35:70:4c:e6:a0:85:c2:38:7a:bd:76:0f:3f:0f:08:ee:
90:d6:e6:b9:c5:e4:51:6c:02:99:e1:d7:01:bd:0e:54:e2:58:
a2:06:a8:39:16:f4:4c:98:53:8c:79:33:09:fb:5c:e1:e2:0a:
a8:95:98:ee:31:b2:a4:fa:be:a6:ae:20:8a:72:ea:aa:08:b2:
25:2d:f1:ec:4e:4d:b4:b5:72:67:15:6f:60:30:e0:ea:76:df:
61:47:25:d9:13:b4:c4:84:36:05:b6:8b:54:25:86:8d:10:11:
24:16:3c:3a:35:2c:fe:2b:88:ad:46:9d:0a:d1:54:6b:7f:ea:
24:b6:7a:d4:91:af:a9:71:08:74:7d:3f:c4:f4:ed:be:0c:c5:
24:15:e7:f2:16:bc:8b:bf:0a:2d:e6:6e:7a:e2:89:d2:b3:dd:
0f:18:5c:d6:9b:6d:e5:80:f8:90:09:18:97:75:a7:cc:9f:80:
12:4f:f8:d8:98:8b:d4:f5:d0:85:03:cc:2c:f0:f8:a9:76:27:
34:6d:e3:ee:53:0b:23:1e:95:b0:8e:d2:88:48:68:e6:e4:00:
49:56:d8:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:47 2026 by rpki-client