Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38322e302f32342d3234203d3e20313938373533.roa
File: 38352e3235352e38322e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: MD4uYORwaBd2MJ/wP+QNlCyjsDpWZ5g1IDDcGtnbY7I=
Subject key identifier: 2D:EF:97:4B:F6:89:DC:62:80:C2:8F:BD:66:0B:7D:50:D1:DB:F8:5C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 10B631A0C023E87038C25D3A2E6654C0D05DD829
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38322e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:42 +0000
ROA not before: Fri 16 Oct 2026 18:49:42 +0000
ROA not after: Fri 15 Oct 2027 18:54:42 +0000
asID: 198753
IP address blocks: 85.255.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b6:31:a0:c0:23:e8:70:38:c2:5d:3a:2e:66:54:c0:d0:5d:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:49:42 2026 GMT
Not After : Oct 15 18:54:42 2027 GMT
Subject: CN=2DEF974BF689DC6280C28FBD660B7D50D1DBF85C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:39:dd:96:a2:21:23:49:97:52:82:ea:5f:9a:
7d:bf:e7:e7:a8:55:89:4c:14:9c:1e:f8:9d:c5:d7:
3d:a2:03:47:af:a6:7a:74:92:a0:3e:75:fd:90:10:
ba:0b:e6:b7:87:ce:e0:d5:d7:23:ff:29:3f:83:ba:
98:d6:9c:56:2b:50:6a:f5:bc:9a:34:13:51:42:a0:
ee:45:74:9c:44:cf:81:5d:d3:ad:c4:78:14:ea:56:
0f:0d:26:1a:37:44:ac:dc:13:fe:a4:f9:d7:f7:21:
ce:4e:f7:5a:51:ed:9e:9a:86:4e:93:da:27:ed:4a:
0b:56:0d:04:dd:a8:c6:23:40:82:fe:b9:12:f3:75:
32:43:ad:4d:e6:0a:0b:86:15:86:2c:93:a8:98:67:
5e:35:5f:02:1d:75:50:e6:a8:f5:ba:fd:38:c2:44:
83:a8:f4:2e:33:b0:5d:3f:fc:67:7b:98:3e:d9:1f:
cc:33:2c:94:3d:cb:12:c2:68:7b:96:ed:31:55:65:
84:71:dd:77:68:02:b9:b9:b5:d5:03:49:63:4f:ba:
55:ae:6f:c3:16:f7:64:b1:31:3d:24:9c:ab:a3:76:
88:83:bb:6e:a4:4d:9d:69:1a:cb:30:f9:64:b7:07:
be:16:9e:83:ce:6b:e6:ae:4d:01:41:6d:93:4f:f8:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EF:97:4B:F6:89:DC:62:80:C2:8F:BD:66:0B:7D:50:D1:DB:F8:5C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38322e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.82.0/24
Signature Algorithm: sha256WithRSAEncryption
50:46:bc:cf:77:b2:99:6a:c8:ab:01:a7:3d:eb:0c:01:1b:41:
27:93:45:cc:c9:4a:22:dc:67:ec:e9:54:7c:ec:7d:3d:10:f6:
e3:2d:cf:8b:57:53:cc:49:be:91:01:06:2f:2d:51:77:d1:e9:
a0:a0:46:4d:b3:80:0c:61:4a:16:05:c5:42:6d:50:73:31:1a:
11:3e:61:c6:7e:09:b1:da:26:5d:3d:8d:07:59:de:77:5d:51:
74:a2:6d:97:81:94:82:d6:75:88:36:a1:e1:d1:87:03:e9:14:
4b:c3:49:97:2d:7e:c9:82:a1:49:d3:bb:d6:ea:3c:d1:31:be:
56:01:ab:aa:60:87:18:ef:fd:d4:d9:3b:d7:a1:72:c1:a9:13:
d7:09:1d:84:22:c1:49:57:4b:d0:22:be:c1:3a:40:73:68:84:
19:80:4e:a9:7d:ad:a5:c6:8d:1e:1a:14:35:8a:14:e6:2d:2b:
de:94:fe:ef:98:79:86:bb:8f:83:70:f8:01:02:31:d5:a6:08:
f2:a5:f0:1f:54:fe:b4:7b:03:e9:53:b9:63:2e:21:75:95:f0:
0d:ab:16:05:e8:df:e2:18:db:89:dc:37:ba:02:39:25:3d:47:
50:0d:f7:1d:b7:cc:f7:ab:a9:69:13:57:48:a7:d0:cb:f5:13:
ff:a9:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:23:18 2026 by rpki-client