Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/38352e3230322e3230342e302f32342d3234203d3e20313938373533.roa
File: 38352e3230322e3230342e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: 2oUAP2fzR5/wJe0wS6nTYDkR1XKKm8jQAhD6nBhN/0E=
Subject key identifier: B9:A4:B2:A1:E7:A3:59:E2:6E:EC:2D:D1:43:78:39:85:6D:7E:ED:E8
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6D0AD0FEAC8CC64994AB5FCB07D10BC69D3A9495
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/38352e3230322e3230342e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:23 +0000
ROA not before: Fri 16 Oct 2026 18:49:23 +0000
ROA not after: Fri 15 Oct 2027 18:54:23 +0000
asID: 198753
IP address blocks: 85.202.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0a:d0:fe:ac:8c:c6:49:94:ab:5f:cb:07:d1:0b:c6:9d:3a:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:23 2026 GMT
Not After : Oct 15 18:54:23 2027 GMT
Subject: CN=B9A4B2A1E7A359E26EEC2DD1437839856D7EEDE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:57:2c:d0:7a:17:08:1e:96:dd:49:d8:a8:
f2:ed:e1:0c:d1:16:5e:5b:56:fe:59:b8:2b:49:66:
39:a0:c8:cc:09:69:25:2d:e3:39:51:16:99:c8:50:
c9:f6:e4:d1:81:81:1a:31:f4:19:49:75:51:e2:5f:
97:0d:45:17:2d:62:d8:1d:97:cb:5b:89:37:ee:f6:
a7:05:ae:2a:e2:51:06:1d:bd:9b:4f:28:ae:3c:19:
9f:bb:f6:07:23:18:46:53:d4:e5:80:a2:4c:45:64:
50:a2:80:e5:c5:70:99:4d:09:b7:e0:9c:8e:ba:43:
d6:38:e9:e3:83:c6:72:4b:0d:07:9b:9b:f4:d4:68:
fc:c4:14:3b:13:16:7b:3b:80:7a:42:78:05:6e:af:
9a:61:ee:05:33:df:0b:8b:39:ab:b5:44:54:b7:63:
08:56:d3:43:79:37:c6:8a:02:0b:43:f4:12:f9:5f:
15:2f:fd:da:b9:5e:72:14:fa:98:bd:3d:96:6d:0c:
65:f5:1a:8d:ea:8d:1d:1d:11:ad:86:61:dd:7e:58:
c4:1d:b7:d3:f1:e1:2d:6c:2b:f1:35:48:ec:a5:d7:
ac:19:15:24:9a:ad:dd:7c:3e:70:12:6b:a9:77:72:
4f:db:87:fc:4b:28:21:8a:ea:4e:93:7e:c3:ea:2c:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:B2:A1:E7:A3:59:E2:6E:EC:2D:D1:43:78:39:85:6D:7E:ED:E8
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/38352e3230322e3230342e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.204.0/24
Signature Algorithm: sha256WithRSAEncryption
01:05:00:55:de:d4:3b:c1:0e:5e:aa:9f:ca:b9:54:8a:12:f5:
41:c2:c3:7c:dd:9e:7f:1c:64:b1:85:25:cc:f7:de:25:7d:84:
ff:f3:70:8c:c6:62:78:69:9e:d9:e9:68:d4:e0:6e:f9:09:df:
ea:ca:00:22:13:57:18:ea:45:67:3d:ab:d5:6b:ae:8f:db:11:
86:ae:33:ba:5c:e4:52:32:fb:3f:d4:b4:3d:86:0d:11:8d:55:
03:51:03:d2:8e:33:68:1d:ad:d8:83:26:19:92:9d:14:11:24:
70:c4:43:3e:fd:54:0c:4c:41:5a:72:f4:49:5a:44:fa:be:c4:
f8:2b:de:be:db:20:cd:fc:9a:4f:c8:98:73:76:bd:70:d3:84:
9a:fa:d4:38:a3:1d:b0:7e:81:34:bb:f0:e5:2e:f0:f9:ec:b7:
c5:cf:a6:50:f8:b7:67:53:8a:dc:99:e9:9c:71:2b:77:fb:35:
cb:3a:b3:2c:5a:1d:21:2a:dd:9a:ff:27:c0:5f:44:53:36:8f:
2a:b7:2c:99:39:62:da:c7:b5:ab:7a:1b:24:09:1a:8c:2a:d9:
57:26:df:6d:79:3a:d8:b6:e5:7c:68:58:03:5d:15:a4:fe:f8:
76:16:d8:60:8e:b0:6a:e4:3a:4f:87:af:86:a6:f8:42:57:e4:
d6:dd:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:16 2026 by rpki-client