Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203235333639.roa
File: 37382e33312e3234382e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier: 0Tqspb6HQDBBh4In30dS3gj2l23hMfObVzSUZulkUFY=
Subject key identifier: 9C:FC:0C:F8:BD:4D:D3:04:0D:DE:16:BD:3B:8C:9F:BC:38:C0:5B:05
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 08DB21BDAE3B6ECDEF115D52CFD8A054734453A0
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203235333639.roa
Signing time: Thu 13 Aug 2026 19:27:46 +0000
ROA not before: Thu 13 Aug 2026 19:22:46 +0000
ROA not after: Thu 12 Aug 2027 19:27:46 +0000
asID: 25369
IP address blocks: 78.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 20:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:db:21:bd:ae:3b:6e:cd:ef:11:5d:52:cf:d8:a0:54:73:44:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 13 19:22:46 2026 GMT
Not After : Aug 12 19:27:46 2027 GMT
Subject: CN=9CFC0CF8BD4DD3040DDE16BD3B8C9FBC38C05B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:f1:bf:c3:07:bf:b5:e6:5f:a2:a1:9d:5b:
f2:5a:c6:bc:48:72:c9:9b:66:97:8c:f2:b7:4e:57:
6c:28:7a:8d:06:2f:5b:a1:84:82:dd:08:15:ae:7e:
65:9a:2b:5f:17:c7:94:1c:76:ff:0e:83:ea:c4:a4:
8e:6c:d9:01:80:3d:0f:44:66:93:7f:72:64:90:8b:
72:e5:47:d7:da:8d:a3:f8:55:79:28:d0:d0:d0:01:
a2:c4:26:7d:f8:b6:9f:f6:c6:ad:38:0a:f3:25:ea:
8b:60:c5:ab:9c:c3:13:bb:12:91:e7:62:7a:3f:a9:
1e:a5:90:cc:a6:7b:f5:06:73:26:a6:4a:54:d8:f7:
33:e6:22:95:62:a9:d1:c1:9d:65:d1:65:14:c5:16:
4e:51:c5:43:b0:7d:3f:4e:03:e2:1f:b2:dd:ae:ef:
26:6c:2c:f7:a2:38:b7:e8:10:0f:48:2e:a1:95:a9:
95:2e:1b:76:44:ae:c6:8c:c4:3e:5d:e6:15:0b:88:
42:8b:64:64:ee:5b:3e:7c:3e:af:bd:aa:ec:c4:58:
00:42:20:68:4f:85:4e:89:f8:41:21:5f:f6:34:fa:
5f:c5:73:7d:9a:0d:ce:96:09:62:13:2c:a4:3a:37:
35:5f:49:2b:64:0e:9a:29:58:95:60:b8:ec:56:e7:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FC:0C:F8:BD:4D:D3:04:0D:DE:16:BD:3B:8C:9F:BC:38:C0:5B:05
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203235333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
24:7a:c7:c6:5c:c4:55:ef:f5:8d:d8:51:4e:89:ec:7e:6c:58:
bd:62:d5:dd:25:4f:04:98:0c:46:3e:11:3a:86:34:21:81:a8:
59:d9:79:63:4b:03:fe:95:c5:03:00:81:e0:b6:22:5d:4e:9e:
e4:d8:47:d4:87:ea:94:c2:0a:cb:2c:da:8d:c0:b4:f8:b3:89:
98:40:44:32:fb:99:69:90:30:fe:11:2b:cf:a2:9f:db:c2:a4:
a9:86:56:b1:ea:a6:26:1c:98:02:c7:8a:c8:ce:7e:17:83:b9:
99:47:cd:97:e5:3e:4c:38:df:e3:de:cf:83:cf:d6:84:2e:14:
e4:d3:78:39:b1:f4:a0:72:16:99:14:ec:b5:42:06:3b:ce:8d:
d7:0c:63:71:a9:57:cd:02:8d:2a:c2:a8:9b:9b:29:99:22:b7:
1a:21:3c:cf:b7:92:4b:be:0a:29:2c:7f:97:7c:07:ee:91:ce:
24:9b:58:8b:18:c8:25:50:42:d7:79:06:3e:3c:25:9f:b0:4e:
84:34:5f:42:06:ac:21:da:6f:51:0d:a5:34:23:8c:3c:19:7e:
8f:4c:df:68:5f:00:4a:4b:6d:42:27:33:36:66:0f:f0:1e:cc:
ea:9c:90:58:85:62:69:6f:08:24:ea:45:f9:96:21:03:66:a6:
27:9b:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:30:01 2026 by rpki-client