Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38332e302f32342d3234203d3e20313938373533.roa
File: 38352e3235352e38332e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: bz13P+QH2+BXdxlba9V6MDNxxobdNh/RXPBaTOg39r4=
Subject key identifier: FF:80:67:FB:AF:E3:BD:7D:1D:0A:16:79:6C:B1:C6:87:4E:3A:84:49
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4C11997A16A33DE606C4F1753D213FD963DD0DC9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38332e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:44 +0000
ROA not before: Fri 16 Oct 2026 18:49:44 +0000
ROA not after: Fri 15 Oct 2027 18:54:44 +0000
asID: 198753
IP address blocks: 85.255.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:11:99:7a:16:a3:3d:e6:06:c4:f1:75:3d:21:3f:d9:63:dd:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 16 18:49:44 2026 GMT
Not After : Oct 15 18:54:44 2027 GMT
Subject: CN=FF8067FBAFE3BD7D1D0A16796CB1C6874E3A8449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:d9:97:4c:cf:82:18:e3:34:15:c0:d1:75:
ff:51:9b:66:9d:b3:d5:52:d1:cb:af:95:19:dc:ef:
72:72:0e:42:ce:49:57:fb:64:bf:79:86:8b:fb:bc:
b7:9b:99:69:8c:8a:de:6b:fe:8d:aa:70:ea:d8:fe:
86:37:58:76:e8:13:d0:ab:51:dc:c5:1e:bb:6f:4a:
f4:9f:7b:af:b8:c8:5f:9a:a8:1d:16:67:d0:b9:4c:
f1:b8:b7:d5:04:85:51:31:14:b2:21:dd:df:27:40:
bf:b6:9e:1d:5e:36:62:e2:79:3f:d0:d7:0c:4b:3c:
53:07:89:1a:79:02:65:bb:96:c3:10:56:b4:22:26:
5b:6b:67:26:94:3d:9b:d1:d1:e7:74:65:fc:8f:01:
8b:ec:58:86:76:6d:a5:1a:ce:c7:6b:0b:38:b9:19:
15:00:61:fd:e8:e6:05:9b:cf:c1:93:6f:ae:8c:8a:
0b:eb:ab:03:5f:82:54:0c:ae:24:dd:31:7a:1a:79:
a1:b2:5a:9e:90:e5:10:c0:f7:9c:35:08:f5:9f:c2:
f8:d4:a7:8a:e5:af:4d:c7:fb:99:51:ff:59:d6:63:
86:fa:4c:b2:e2:96:98:9c:e4:df:89:07:6c:2d:a2:
d0:fe:96:69:c5:cd:6c:b6:c1:31:da:a1:44:53:7d:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:67:FB:AF:E3:BD:7D:1D:0A:16:79:6C:B1:C6:87:4E:3A:84:49
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3235352e38332e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.83.0/24
Signature Algorithm: sha256WithRSAEncryption
76:82:53:ee:d6:ce:b3:a4:32:6d:80:db:a2:78:4b:9b:d6:f5:
eb:e9:56:e8:25:65:7a:3b:e4:78:0d:a2:b7:55:f1:c8:2f:b0:
6e:f5:7b:5a:41:b7:29:5f:b6:f6:44:9a:2b:e1:91:3a:ff:a5:
07:01:4e:a2:e6:c8:5e:aa:20:5d:1f:79:62:6f:d7:d5:ec:f5:
b8:4e:4d:7a:f1:9e:a8:6f:63:77:be:e7:05:b3:bd:c2:6b:c4:
e7:35:38:85:39:8c:02:b2:0e:aa:bd:36:04:6f:8c:97:44:8a:
7b:75:d0:2f:51:6b:df:50:65:47:27:ba:89:a7:02:43:8b:19:
c2:83:f1:8e:8f:ad:29:15:43:a0:10:0e:26:38:6a:80:c6:44:
12:0c:ac:64:d6:a3:ce:fe:5f:83:d2:d5:32:dc:d1:29:22:61:
a5:98:a3:52:1b:2e:8f:25:a8:7d:78:3e:8e:e3:33:cf:e5:e7:
d2:d3:32:aa:b0:03:ba:36:4a:8e:01:98:7b:37:f8:a5:07:d8:
3a:77:a2:01:8e:a5:df:77:3f:c8:8a:3c:72:13:3b:50:70:fc:
c3:d0:ae:91:f7:8b:9a:0b:29:81:cb:fc:90:62:8b:fc:81:0e:
09:c6:fe:1b:a3:d2:aa:40:56:6c:61:87:66:61:0b:3f:36:5f:
97:4e:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:07:57 2026 by rpki-client