Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e20383334.roa
File: 37382e33312e3234382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xHr4/1Yhr0Zq9Y+zX+4HQagvzdNeEt87wtmKGqltAl4=
Subject key identifier: B3:AD:65:C1:BE:77:37:02:AF:BE:D0:01:F0:E8:52:33:5C:F0:17:B1
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2FE16486B403D1E42DB3CE2C43B490A033AB21DA
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e20383334.roa
Signing time: Tue 13 Oct 2026 11:42:45 +0000
ROA not before: Tue 13 Oct 2026 11:37:45 +0000
ROA not after: Tue 12 Oct 2027 11:42:45 +0000
asID: 834
IP address blocks: 78.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e1:64:86:b4:03:d1:e4:2d:b3:ce:2c:43:b4:90:a0:33:ab:21:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 13 11:37:45 2026 GMT
Not After : Oct 12 11:42:45 2027 GMT
Subject: CN=B3AD65C1BE773702AFBED001F0E852335CF017B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:31:69:fa:9d:d9:b2:fe:83:e7:d6:2d:09:
9c:97:ad:f9:2c:78:6b:86:d4:8d:21:1b:7c:5a:a7:
97:89:3a:50:3a:e8:f2:52:fa:46:80:f5:d4:ca:6d:
38:cc:45:df:a5:eb:f0:02:6f:2e:c2:fc:5a:0e:8d:
7a:c5:24:82:65:77:da:ae:03:b9:ad:2e:18:bb:bf:
c4:18:6e:2d:28:77:b2:62:51:31:20:54:b5:4f:5f:
0d:23:3d:20:5a:58:b1:be:2e:91:69:b7:84:cc:e5:
8e:e1:ae:1f:0a:7a:bf:63:60:14:fd:fe:a5:ab:b7:
87:83:e1:0a:98:ba:9e:b0:5c:ba:75:a1:44:48:f2:
fa:2e:c4:c5:d6:c4:60:d1:8b:52:c2:44:11:24:c4:
b2:93:00:cd:94:4b:f4:3a:2b:21:e2:2b:53:48:9a:
dd:9b:cf:d4:5a:e1:24:c9:18:1a:bb:dc:d7:4a:83:
b3:12:91:f2:4f:e8:e6:fe:98:ab:d5:dd:10:66:5c:
0b:80:34:ad:6f:04:4c:ba:81:31:6d:7c:ae:c9:46:
c2:3d:cd:47:b4:47:23:df:3a:fd:6c:15:d3:f7:08:
06:eb:5e:4e:a0:66:f2:2b:b7:fb:84:90:21:5e:92:
b7:95:b6:aa:c0:50:f2:d1:de:24:2b:d4:89:e2:a7:
59:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AD:65:C1:BE:77:37:02:AF:BE:D0:01:F0:E8:52:33:5C:F0:17:B1
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:07:5d:96:04:6c:a1:55:e8:61:cc:a3:9f:e0:ef:04:29:d0:
3b:3b:97:80:df:ef:1b:43:11:47:8c:f5:eb:34:25:06:e4:17:
ef:18:6c:61:0b:00:3f:2d:66:ad:91:27:f6:90:b6:00:fe:90:
6d:9b:fd:a1:fa:64:86:e7:73:b0:c6:87:b1:d6:40:b9:1c:a2:
2c:3d:cf:77:79:dc:b4:c4:a6:56:59:d9:ae:80:dc:93:34:c5:
f6:6e:92:48:0a:2c:d1:57:b8:34:32:a7:4b:14:1e:b1:72:42:
eb:f8:7c:91:dc:16:da:01:ab:b6:ce:f9:6e:c8:21:a7:db:45:
1c:c1:10:8b:0d:43:dd:27:df:80:c8:f7:04:68:84:ec:4b:12:
be:df:8d:08:53:62:96:93:35:48:e6:5e:21:10:b4:e0:d6:07:
1a:bd:65:be:90:47:ec:95:d5:a8:53:d6:c8:ab:aa:c7:8d:60:
65:79:71:aa:88:77:ce:60:f8:84:c9:f6:44:c1:5f:8b:cb:38:
7a:32:95:ba:3a:ce:e7:5e:59:4e:de:6e:ca:92:ab:97:16:bb:
9b:91:a9:c6:c0:35:7d:bf:a0:ab:14:f6:94:e7:7b:b7:4e:89:
2c:01:bc:6b:ec:ee:f5:94:66:ff:43:b1:ee:16:18:5f:62:cf:
35:f3:1c:64
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUL+FkhrQD0eQts84sQ7SQoDOrIdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTMxMTM3NDVaFw0yNzEwMTIxMTQyNDVaMDMxMTAvBgNV
BAMTKEIzQUQ2NUMxQkU3NzM3MDJBRkJFRDAwMUYwRTg1MjMzNUNGMDE3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uTFp+p3Zsv6D59YtCZyXrfks
eGuG1I0hG3xap5eJOlA66PJS+kaA9dTKbTjMRd+l6/ACby7C/FoOjXrFJIJld9qu
A7mtLhi7v8QYbi0od7JiUTEgVLVPXw0jPSBaWLG+LpFpt4TM5Y7hrh8Ker9jYBT9
/qWrt4eD4QqYup6wXLp1oURI8vouxMXWxGDRi1LCRBEkxLKTAM2US/Q6KyHiK1NI
mt2bz9Ra4STJGBq73NdKg7MSkfJP6Ob+mKvV3RBmXAuANK1vBEy6gTFtfK7JRsI9
zUe0RyPfOv1sFdP3CAbrXk6gZvIrt/uEkCFekreVtqrAUPLR3iQr1Inip1nNAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUs61lwb53NwKvvtAB8OhSM1zwF7EwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATh/4MA0G
CSqGSIb3DQEBCwUAA4IBAQBMB12WBGyhVehhzKOf4O8EKdA7O5eA3+8bQxFHjPXr
NCUG5BfvGGxhCwA/LWatkSf2kLYA/pBtm/2h+mSG53Owxoex1kC5HKIsPc93edy0
xKZWWdmugNyTNMX2bpJICizRV7g0MqdLFB6xckLr+HyR3BbaAau2zvluyCGn20Uc
wRCLDUPdJ9+AyPcEaITsSxK+340IU2KWkzVI5l4hELTg1gcavWW+kEfsldWoU9bI
q6rHjWBleXGqiHfOYPiEyfZEwV+Lyzh6MpW6Os7nXllO3m7KkquXFrubkanGwDV9
v6CrFPaU53u3ToksAbxr7O71lGb/Q7HuFhhfYs818xxk
-----END CERTIFICATE-----
Generated at Tue Oct 20 19:08:23 2026 by rpki-client