Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38312e302f32342d3234203d3e20313938373533.roa
File: 38352e3235352e38312e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: JtAKQ2q4dv6PAVTk5pViLYSYJuUrS2vZpXEjcSjqTvA=
Subject key identifier: B3:C7:35:6A:C9:7F:5E:C5:BA:AD:A3:56:3E:3E:98:D9:EA:0F:C4:1A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0F9806F589985536A22C603F94658B776CC2B7DB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38312e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:41 +0000
ROA not before: Fri 16 Oct 2026 18:49:41 +0000
ROA not after: Fri 15 Oct 2027 18:54:41 +0000
asID: 198753
IP address blocks: 85.255.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:98:06:f5:89:98:55:36:a2:2c:60:3f:94:65:8b:77:6c:c2:b7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:49:41 2026 GMT
Not After : Oct 15 18:54:41 2027 GMT
Subject: CN=B3C7356AC97F5EC5BAADA3563E3E98D9EA0FC41A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:a6:b7:a3:b2:93:b8:61:58:31:4d:e7:73:
5e:81:9d:da:19:41:fd:ae:14:73:e8:8d:33:c6:ae:
27:a9:5f:e0:93:eb:6c:39:e7:96:43:57:ee:85:fb:
de:52:52:85:ca:17:c1:4f:d9:3e:26:c4:29:d9:62:
97:f2:a2:53:cb:cb:4e:97:65:49:1b:ac:cd:fd:b4:
7e:b5:91:eb:7c:e3:07:4d:3e:0b:cb:c6:3b:a6:fc:
24:a9:76:23:e1:08:43:41:67:8b:f0:a7:fe:0a:01:
4f:42:e5:de:d2:07:ae:b8:29:10:27:3b:07:cc:ff:
90:22:5f:15:23:18:77:92:67:2e:8d:2c:35:fe:79:
d5:82:e9:ce:3f:75:e7:62:18:da:d7:29:39:2d:43:
2d:ad:d1:5d:a3:05:90:fd:5d:a3:44:42:02:d5:b1:
d6:56:9d:c0:48:0c:65:a9:f1:37:e2:d5:43:51:07:
07:da:20:ef:8c:b6:cc:43:9f:a6:63:31:f2:83:3f:
f4:d3:f7:d7:c3:81:1d:47:d2:38:72:b6:e9:70:39:
4a:da:b5:53:68:96:07:95:20:c9:70:1d:fc:f7:84:
d8:01:97:a8:0f:6e:07:c7:8c:4d:18:aa:22:5b:6c:
a3:4f:be:ea:95:14:ea:04:ff:0f:55:df:98:43:0f:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:35:6A:C9:7F:5E:C5:BA:AD:A3:56:3E:3E:98:D9:EA:0F:C4:1A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38312e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.81.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:34:cc:53:97:c7:bb:b1:bb:91:ba:49:75:28:fe:45:cf:
2c:fc:f6:24:c6:50:0b:10:b7:b7:e8:df:8f:42:f0:cc:04:94:
ae:56:ac:21:70:d9:60:1d:b6:71:14:41:27:16:da:0d:ff:b0:
0c:54:d5:5c:04:2c:e2:01:02:0a:5e:da:ef:8a:b7:4f:32:05:
7a:b1:1f:27:fa:bb:fd:c5:0c:6d:e6:6a:26:f5:f1:2b:4f:75:
f7:1b:e7:b2:d5:89:0f:5b:b9:c4:90:c3:99:da:c2:78:af:32:
15:aa:99:d2:64:b3:28:70:5a:e0:6a:3a:67:82:57:2e:c1:f2:
7f:9d:83:83:d6:95:49:b2:95:ae:e7:be:60:27:de:40:23:93:
df:21:0f:5c:db:d4:08:85:ef:31:bf:7d:1b:f3:17:8a:70:c7:
ec:8e:38:51:51:5d:f1:c8:e5:f3:f7:dd:55:8c:7c:4c:e7:51:
13:7c:ff:60:63:8a:30:31:aa:fd:6f:a5:a7:f1:58:6a:8f:10:
a1:48:dd:51:98:23:f8:f8:65:a2:95:42:bd:a4:e6:04:a1:c1:
77:98:5d:73:97:6f:15:24:f9:aa:45:7f:52:d5:0f:49:92:8f:
ba:20:e7:99:74:a0:a2:6e:ce:d1:38:9c:e6:06:e4:21:09:f0:
ab:dd:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:05:33 2026 by rpki-client