Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
File: 38332e3133362e3231382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: Qyy+ZB5JTKpMWMa1B1BicODPsvQiJmgYc2kuHOgwNmo=
Subject key identifier: EC:9C:11:AE:9E:CA:8D:70:A8:88:7E:B2:BA:FB:3E:79:E3:17:1D:F4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4755204CE64AB02C69D6A083C0F285F44753CA45
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
Signing time: Fri 23 Oct 2026 16:30:21 +0000
ROA not before: Fri 23 Oct 2026 16:25:21 +0000
ROA not after: Fri 22 Oct 2027 16:30:21 +0000
asID: 47583
IP address blocks: 83.136.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:55:20:4c:e6:4a:b0:2c:69:d6:a0:83:c0:f2:85:f4:47:53:ca:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 23 16:25:21 2026 GMT
Not After : Oct 22 16:30:21 2027 GMT
Subject: CN=EC9C11AE9ECA8D70A8887EB2BAFB3E79E3171DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:6d:50:a5:c9:e2:04:23:1f:06:74:f6:4b:
43:a8:bb:70:28:c1:ee:8d:71:56:57:98:98:fb:7f:
f9:68:63:3e:d8:66:9a:16:48:60:bd:f3:98:d2:79:
60:6d:67:1f:85:57:00:13:a8:37:c4:26:68:fd:9c:
e3:30:d6:ca:7f:3f:a6:7b:7f:a5:c1:a3:cb:24:5f:
33:00:81:fc:44:68:fc:96:4f:d2:49:6e:ac:ba:ef:
99:95:31:f8:bc:2c:63:4b:2a:81:88:a4:cd:24:b6:
a3:5c:19:48:1e:41:d2:21:e5:9e:9f:56:6d:97:10:
7a:13:cd:c0:f1:a0:08:44:08:26:64:cd:3f:f9:cc:
a5:47:5e:b4:c0:7e:d5:fc:97:02:39:18:7a:77:68:
02:d0:59:8c:d6:2d:d3:9a:65:f0:14:88:bf:4a:b1:
2d:c5:21:15:22:20:7f:ee:f8:d0:fb:27:ca:03:78:
13:e8:43:fc:30:71:41:0e:71:74:4c:76:ba:6c:4b:
48:2b:33:13:9a:17:a2:ba:ec:bb:ce:f2:dc:87:1a:
3c:90:e3:45:d4:cc:cb:f7:2c:4c:da:ed:47:46:e1:
d2:01:f1:a9:b7:1a:b7:51:c3:1a:59:80:0e:47:cf:
2c:9c:ae:29:05:29:9e:89:5d:46:7a:13:6d:68:44:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:11:AE:9E:CA:8D:70:A8:88:7E:B2:BA:FB:3E:79:E3:17:1D:F4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:03:7b:72:df:70:b9:78:0f:e6:1b:d6:a7:e6:e3:6a:d8:ae:
ba:52:12:d2:27:a4:45:aa:29:b4:c2:d5:bf:f3:20:a1:fc:26:
db:33:9f:ee:f9:22:f5:11:94:eb:dc:d0:c9:33:cf:d9:47:ba:
40:af:25:d5:7e:ee:97:62:44:46:5d:ac:eb:24:4a:f3:c1:a8:
74:c8:19:87:5e:93:f7:80:b6:c3:3a:55:7c:0d:b9:fe:3f:dd:
5a:e9:e5:03:66:e9:46:35:39:b5:de:d3:a8:2b:ee:d9:99:33:
26:3a:6a:72:e6:5e:ff:1e:da:ff:5c:63:8e:e6:d5:c9:8c:8d:
52:7b:4f:75:4c:e1:e0:1e:3b:e1:2e:ce:53:80:3e:88:44:a2:
3c:2d:39:ee:7d:a2:4d:cd:a6:5d:05:d4:6d:a5:d6:d9:9f:d0:
38:8d:72:83:7d:13:e7:54:45:1a:bd:27:8b:0d:99:36:6a:39:
8f:02:49:ca:9c:62:74:b2:3e:7a:44:40:9a:e3:7f:c5:5b:72:
64:9b:21:05:c3:66:e2:4d:14:04:99:27:fe:27:36:36:16:d6:
9e:44:54:71:f0:50:cc:41:70:ff:99:e2:9e:3f:43:1f:80:c8:
6d:84:b9:1e:9d:bc:40:76:75:47:13:c7:a9:05:5e:e8:8e:23:
46:05:d7:3d
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUR1UgTOZKsCxp1qCDwPKF9EdTykUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMjMxNjI1MjFaFw0yNzEwMjIxNjMwMjFaMDMxMTAvBgNV
BAMTKEVDOUMxMUFFOUVDQThENzBBODg4N0VCMkJBRkIzRTc5RTMxNzFERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUGW1QpcniBCMfBnT2S0Oou3Ao
we6NcVZXmJj7f/loYz7YZpoWSGC985jSeWBtZx+FVwATqDfEJmj9nOMw1sp/P6Z7
f6XBo8skXzMAgfxEaPyWT9JJbqy675mVMfi8LGNLKoGIpM0ktqNcGUgeQdIh5Z6f
Vm2XEHoTzcDxoAhECCZkzT/5zKVHXrTAftX8lwI5GHp3aALQWYzWLdOaZfAUiL9K
sS3FIRUiIH/u+ND7J8oDeBPoQ/wwcUEOcXRMdrpsS0grMxOaF6K67LvO8tyHGjyQ
40XUzMv3LEza7UdG4dIB8am3GrdRwxpZgA5HzyycrikFKZ6JXUZ6E21oRG61AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU7JwRrp7KjXCoiH6yuvs+eeMXHfQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTMzMzYy
ZTMyMzEzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFTiNowDQYJKoZIhvcNAQELBQADggEBABoDe3LfcLl4D+Yb1qfm42rYrrpS
EtInpEWqKbTC1b/zIKH8Jtszn+75IvURlOvc0Mkzz9lHukCvJdV+7pdiREZdrOsk
SvPBqHTIGYdek/eAtsM6VXwNuf4/3Vrp5QNm6UY1ObXe06gr7tmZMyY6anLmXv8e
2v9cY47m1cmMjVJ7T3VM4eAeO+EuzlOAPohEojwtOe59ok3Npl0F1G2l1tmf0DiN
coN9E+dURRq9J4sNmTZqOY8CScqcYnSyPnpEQJrjf8VbcmSbIQXDZuJNFASZJ/4n
NjYW1p5EVHHwUMxBcP+Z4p4/Qx+AyG2EuR6dvEB2dUcTx6kFXuiOI0YF1z0=
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:06:25 2026 by rpki-client