Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa
File: 38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa (raw, json)
Hash identifier: 7Y1drehh+wXw/e87vLEJR0VrAmey70/MFLNYJKPHJ+I=
Subject key identifier: 4E:1E:75:96:3B:E9:C9:8B:8E:23:7D:00:62:D7:3E:9C:FD:2D:53:6D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 022003A208BF75E307427D9701F0A5FCA16EEF9C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa
Signing time: Fri 23 Oct 2026 16:30:30 +0000
ROA not before: Fri 23 Oct 2026 16:25:30 +0000
ROA not after: Fri 22 Oct 2027 16:30:30 +0000
asID: 203061
IP address blocks: 88.218.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:20:03:a2:08:bf:75:e3:07:42:7d:97:01:f0:a5:fc:a1:6e:ef:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:30 2026 GMT
Not After : Oct 22 16:30:30 2027 GMT
Subject: CN=4E1E75963BE9C98B8E237D0062D73E9CFD2D536D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:cb:03:db:40:0e:86:44:6b:82:02:7e:d8:
a4:f8:d5:ba:6d:92:dc:38:fa:2b:46:51:01:3d:a6:
99:35:87:b5:21:14:4d:76:9b:cc:88:bb:4f:47:89:
b5:d9:15:ac:10:45:b1:89:38:2c:fb:2c:b4:48:cc:
15:29:43:c3:df:a8:05:60:82:22:f4:5b:34:79:45:
d0:26:74:3f:c5:58:a1:57:b2:c8:52:fd:04:06:4d:
f7:be:91:44:02:b3:40:62:20:f9:9d:2a:c2:1f:92:
e7:e0:bd:1a:d7:0f:3f:0a:38:2e:84:33:3e:6b:98:
81:7a:d9:03:1c:2b:0b:bf:9c:2b:c8:a9:bd:f7:7b:
c0:da:fb:78:63:80:6c:b4:e6:a5:79:c0:22:ae:70:
41:81:6e:fe:db:27:0b:bc:f1:15:4b:c9:ef:9a:06:
64:36:25:e6:f2:71:d9:80:34:2f:7c:d2:2b:d3:08:
33:95:fe:a6:d1:be:e7:70:fd:63:7d:8e:ca:54:ae:
95:bd:b7:fb:ff:3f:d7:78:61:9f:4c:da:8a:a8:cc:
a7:15:b3:1e:e9:ec:a1:b4:de:80:dc:a6:88:ae:db:
49:c3:7e:ef:68:4b:76:dd:98:f0:56:0b:e9:7c:22:
8d:56:0d:84:30:71:6b:4e:e7:e2:94:cb:f2:7c:cd:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1E:75:96:3B:E9:C9:8B:8E:23:7D:00:62:D7:3E:9C:FD:2D:53:6D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.166.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:f9:3a:41:b6:0a:85:6c:85:cd:59:c9:2a:a7:12:9a:52:91:
ba:2f:b4:ce:4f:73:f0:dc:5a:fc:0b:b4:69:7d:af:01:ca:13:
61:99:b8:91:65:32:f5:ed:47:2d:0b:14:34:23:a6:ea:59:ac:
e0:a2:b0:6c:37:7e:e7:e3:0a:d0:9b:83:2c:93:a9:99:ad:1f:
96:fa:39:84:b5:ad:2f:f2:fc:6b:93:71:c6:22:13:b5:ff:c9:
60:1d:35:9d:18:c6:93:b5:2f:a7:f5:71:25:9c:43:22:5e:61:
01:ad:22:db:87:72:92:41:f0:95:43:5a:8e:8f:6f:5e:ff:9b:
21:93:dd:e2:df:26:d6:d6:1f:17:56:98:a5:da:98:e3:94:19:
27:16:c9:de:6d:ac:8f:29:15:27:88:01:aa:c5:00:d7:76:39:
0f:b8:98:42:7f:a4:e4:c0:6d:c7:02:a7:66:ff:4d:44:e9:2e:
3c:96:72:53:79:6e:11:ed:22:f0:51:25:19:f7:dd:9b:df:f2:
cb:3d:51:8c:67:22:d0:14:11:68:b2:9d:70:37:ee:8d:e7:8d:
53:ad:68:e6:d7:c0:d0:31:a9:9e:73:89:a4:d6:c1:87:f2:b4:
03:6b:ba:a5:ff:95:a2:8d:2f:52:66:b6:1f:5b:26:8d:60:2c:
a6:99:d3:3f
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUAiADogi/deMHQn2XAfCl/KFu75wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MzBaFw0yNzEwMjIxNjMwMzBaMDMxMTAvBgNV
BAMTKDRFMUU3NTk2M0JFOUM5OEI4RTIzN0QwMDYyRDczRTlDRkQyRDUzNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1MsD20AOhkRrggJ+2KT41bpt
ktw4+itGUQE9ppk1h7UhFE12m8yIu09HibXZFawQRbGJOCz7LLRIzBUpQ8PfqAVg
giL0WzR5RdAmdD/FWKFXsshS/QQGTfe+kUQCs0BiIPmdKsIfkufgvRrXDz8KOC6E
Mz5rmIF62QMcKwu/nCvIqb33e8Da+3hjgGy05qV5wCKucEGBbv7bJwu88RVLye+a
BmQ2JebycdmANC980ivTCDOV/qbRvudw/WN9jspUrpW9t/v/P9d4YZ9M2oqozKcV
sx7p7KG03oDcpoiu20nDfu9oS3bdmPBWC+l8Io1WDYQwcWtO5+KUy/J8zeUpAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUTh51ljvpyYuOI30AYtc+nP0tU20wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM4MmUzMjMxMzgy
ZTMxMzYzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAVjapjANBgkqhkiG9w0BAQsFAAOCAQEAvPk6QbYKhWyFzVnJKqcSmlKR
ui+0zk9z8Nxa/Au0aX2vAcoTYZm4kWUy9e1HLQsUNCOm6lms4KKwbDd+5+MK0JuD
LJOpma0flvo5hLWtL/L8a5NxxiITtf/JYB01nRjGk7Uvp/VxJZxDIl5hAa0i24dy
kkHwlUNajo9vXv+bIZPd4t8m1tYfF1aYpdqY45QZJxbJ3m2sjykVJ4gBqsUA13Y5
D7iYQn+k5MBtxwKnZv9NROkuPJZyU3luEe0i8FElGffdm9/yyz1RjGci0BQRaLKd
cDfujeeNU61o5tfA0DGpnnOJpNbBh/K0A2u6pf+Voo0vUma2H1smjWAsppnTPw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:49 2026 by rpki-client