Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Na7wCUTqSvJhpXSEaA+cKFVDowb4sQy7WRvMj+KpVo8=
Subject key identifier: ED:A4:D1:BA:50:2C:9C:B0:80:9C:83:C8:59:71:D0:1F:E5:C7:1B:B3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 625EDC455D372D455759AE8A0F58019932B01953
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 23 Oct 2026 16:30:24 +0000
ROA not before: Fri 23 Oct 2026 16:25:24 +0000
ROA not after: Fri 22 Oct 2027 16:30:24 +0000
asID: 136787
IP address blocks: 85.208.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5e:dc:45:5d:37:2d:45:57:59:ae:8a:0f:58:01:99:32:b0:19:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:24 2026 GMT
Not After : Oct 22 16:30:24 2027 GMT
Subject: CN=EDA4D1BA502C9CB0809C83C85971D01FE5C71BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:3c:a8:2d:5e:c3:a8:b1:cb:8e:a2:c0:8c:
04:31:80:94:98:07:ce:e0:c1:9f:ab:85:33:d7:29:
c0:bd:4d:06:37:37:08:93:57:93:d5:95:81:ac:a5:
c9:37:07:12:1e:4e:47:c2:6c:61:46:8b:30:ab:67:
ad:cc:a2:da:b4:ac:3c:f8:7c:71:d8:9d:1e:6c:24:
3e:19:77:1d:9d:69:0e:70:08:00:7c:3a:7d:3c:eb:
b3:29:33:aa:01:5f:ce:b8:f4:b3:ca:a1:58:4d:1f:
fd:fd:d7:b8:c3:f2:98:85:f2:6e:44:fd:ab:db:55:
9c:ad:60:1d:9e:84:55:03:8a:dc:a6:93:bb:a9:1d:
9f:15:77:93:23:09:8c:51:c6:de:68:70:75:22:99:
2b:90:83:ad:96:41:1b:78:f9:5c:58:15:ec:54:10:
9a:39:dd:48:0f:58:e8:2b:a5:26:6e:b8:04:2a:a0:
55:42:95:34:85:a4:1c:88:6c:11:69:29:e1:e2:f0:
75:3e:23:1c:4d:c7:3e:65:3f:91:46:ec:f1:7e:f8:
d0:4d:d6:56:bd:8b:cd:5d:4b:ea:b0:91:86:4b:85:
74:67:01:80:13:7d:6c:4d:12:f4:92:66:3f:ad:77:
84:d9:97:5b:30:9c:fa:c2:4f:40:d0:3e:1b:9d:fc:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:D1:BA:50:2C:9C:B0:80:9C:83:C8:59:71:D0:1F:E5:C7:1B:B3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:68:92:0d:d5:6c:54:7e:a6:ab:90:6c:a5:fb:ab:30:d9:41:
da:d9:41:70:c5:9c:33:0b:44:97:cf:64:3e:e6:c8:f5:2b:c9:
ec:1b:79:fa:32:db:79:8d:0e:35:ec:5c:42:fb:16:22:00:8d:
be:93:1a:80:b9:3c:12:52:d7:30:ae:a6:a6:d1:81:23:78:35:
97:44:03:4b:96:5c:f9:6f:d8:be:c7:65:cc:b1:c1:ea:17:20:
cd:69:17:51:8d:9b:bc:f6:36:26:8d:05:f2:64:6f:ed:87:1b:
52:41:ee:ee:63:5d:d8:1f:04:95:8f:5c:67:d6:ab:89:f9:28:
15:44:31:74:9e:c7:9e:36:39:88:bd:52:6a:32:a0:d5:03:80:
b9:d1:71:db:e8:98:61:a0:80:e9:c1:8c:b0:10:b7:1f:1c:25:
36:a7:c9:3d:89:b2:fb:78:8c:01:16:62:7e:2f:dc:65:8a:cb:
8f:62:38:09:f3:70:85:4e:20:a2:09:4d:d3:f7:86:1c:ac:ed:
58:d7:15:aa:b7:57:bf:fe:c8:91:7d:68:38:43:b2:c9:a7:43:
a2:64:2e:cc:ed:b2:aa:28:c2:1f:6c:9c:c3:15:2c:4e:fc:98:
df:4e:ba:a6:10:e3:29:74:71:73:79:d4:ea:7e:aa:85:4e:0f:
98:f4:8c:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:54 2026 by rpki-client