Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38302e302f32342d3234203d3e20323138343038.roa
File: 38352e3235352e38302e302f32342d3234203d3e20323138343038.roa (raw, json)
Hash identifier: /6cxA8zcrnrjF7IaG0GDB2p5Y1hnUjKJ8vfeQO9ItDU=
Subject key identifier: 08:16:69:0C:BF:79:C0:F4:48:6F:34:FE:BC:CE:68:F6:DD:D1:AE:F1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2E197F60AC93682C1C807D0B9475FC4AA70A57A6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38302e302f32342d3234203d3e20323138343038.roa
Signing time: Thu 15 Oct 2026 12:16:28 +0000
ROA not before: Thu 15 Oct 2026 12:11:28 +0000
ROA not after: Thu 14 Oct 2027 12:16:28 +0000
asID: 218408
IP address blocks: 85.255.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:19:7f:60:ac:93:68:2c:1c:80:7d:0b:94:75:fc:4a:a7:0a:57:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 15 12:11:28 2026 GMT
Not After : Oct 14 12:16:28 2027 GMT
Subject: CN=0816690CBF79C0F4486F34FEBCCE68F6DDD1AEF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:51:97:ad:a9:a5:5a:c1:88:c8:9d:44:dd:
d1:33:72:00:a2:73:1f:1f:04:73:66:5b:69:a3:aa:
c5:8b:60:c5:6a:dd:b0:50:e3:8b:24:9c:63:a3:a3:
fe:79:59:c8:75:e4:d9:8a:33:23:97:f1:11:db:29:
c0:91:c8:74:27:de:9a:a4:7f:64:1a:1e:ff:70:0e:
7e:af:ef:ef:cf:a0:dd:be:89:90:5d:1d:38:b7:43:
8d:1b:40:0a:c2:71:ed:98:6b:dc:89:cb:dd:32:9b:
63:a4:be:f9:32:1b:d4:b9:ec:68:95:c2:5f:b0:3f:
aa:76:78:22:86:1a:d2:fa:0d:55:38:61:de:0a:74:
3e:7d:9e:06:35:41:39:c7:27:ea:57:a1:e2:fd:de:
cd:96:a6:ba:e2:63:ae:36:00:80:cd:26:22:9c:2f:
a6:1c:d9:8f:89:e2:d8:30:88:dd:c9:83:4f:33:92:
e5:33:6c:6a:68:47:4f:8c:9e:c5:98:61:11:9e:b0:
3a:3c:ea:fa:89:6b:a1:a3:d9:1f:45:85:83:ff:73:
60:ae:96:3e:e5:d4:51:26:20:50:40:4d:83:54:bd:
ad:7c:d6:32:78:9a:26:9d:11:c9:13:a1:7f:dc:34:
a1:3f:e2:80:70:56:84:58:df:a3:a5:f9:64:6a:8c:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:16:69:0C:BF:79:C0:F4:48:6F:34:FE:BC:CE:68:F6:DD:D1:AE:F1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38302e302f32342d3234203d3e20323138343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.80.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:63:0a:87:a4:36:91:a5:c6:d1:8d:21:5b:35:da:3e:c8:98:
be:93:01:ec:2f:19:88:46:03:72:20:67:32:3c:83:3a:9f:e1:
2e:a2:5d:d0:fc:d0:e7:a4:e7:0d:30:e7:f3:fd:1e:29:ab:2a:
b3:5f:13:dc:3e:4c:ce:58:a4:0e:2f:82:a3:1d:b8:4a:25:8d:
56:63:d6:8a:28:9e:e1:4c:fe:5d:9c:0d:50:40:e9:04:f4:08:
ac:01:ca:b5:83:02:bb:72:ae:e8:72:c5:c7:22:98:29:62:a0:
15:16:86:44:a6:3a:d7:e0:f2:a9:56:75:36:a5:89:2c:77:ab:
9f:e6:3e:52:dc:5d:1b:7a:e5:8f:f8:0c:97:8a:b6:05:f2:74:
c2:3c:af:c1:cd:21:a3:55:40:a2:2b:d6:da:37:44:75:1a:42:
9b:c3:ba:41:1c:08:53:11:a7:75:88:cf:8c:1f:57:cd:27:c3:
3d:4f:da:53:ec:d8:b8:15:8d:c8:2b:d2:de:08:93:d0:82:f2:
ec:b2:3e:62:5e:19:77:35:10:23:0c:a8:a5:27:39:15:7d:54:
61:20:8e:7a:76:0b:81:53:90:86:b1:01:de:e7:9e:86:ee:f5:
14:80:5e:ea:92:8b:79:41:a5:1a:f9:ad:4a:df:69:fa:2c:a5:
e4:0e:0e:c0
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIULhl/YKyTaCwcgH0LlHX8SqcKV6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMTUxMjExMjhaFw0yNzEwMTQxMjE2MjhaMDMxMTAvBgNV
BAMTKDA4MTY2OTBDQkY3OUMwRjQ0ODZGMzRGRUJDQ0U2OEY2REREMUFFRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQVGXramlWsGIyJ1E3dEzcgCi
cx8fBHNmW2mjqsWLYMVq3bBQ44sknGOjo/55Wch15NmKMyOX8RHbKcCRyHQn3pqk
f2QaHv9wDn6v7+/PoN2+iZBdHTi3Q40bQArCce2Ya9yJy90ym2OkvvkyG9S57GiV
wl+wP6p2eCKGGtL6DVU4Yd4KdD59ngY1QTnHJ+pXoeL93s2WprriY642AIDNJiKc
L6Yc2Y+J4tgwiN3Jg08zkuUzbGpoR0+MnsWYYRGesDo86vqJa6Gj2R9FhYP/c2Cu
lj7l1FEmIFBATYNUva181jJ4miadEckToX/cNKE/4oBwVoRY36Ol+WRqjMhTAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUCBZpDL95wPRIbzT+vM5o9t3RrvEwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjM1MzUy
ZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNDMwMzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABV/1AwDQYJKoZIhvcNAQELBQADggEBAMxjCoekNpGlxtGNIVs12j7ImL6T
AewvGYhGA3IgZzI8gzqf4S6iXdD80Oek5w0w5/P9HimrKrNfE9w+TM5YpA4vgqMd
uEoljVZj1ooonuFM/l2cDVBA6QT0CKwByrWDArtyruhyxccimClioBUWhkSmOtfg
8qlWdTaliSx3q5/mPlLcXRt65Y/4DJeKtgXydMI8r8HNIaNVQKIr1to3RHUaQpvD
ukEcCFMRp3WIz4wfV80nwz1P2lPs2LgVjcgr0t4Ik9CC8uyyPmJeGXc1ECMMqKUn
ORV9VGEgjnp2C4FTkIaxAd7nnobu9RSAXuqSi3lBpRr5rUrfafospeQODsA=
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:02 2026 by rpki-client