Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033333830.roa
File: 38332e3137312e3230332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: ejzremuJe8gGKC1uQooTnL+u5BEhhM6pWwTPdRD58Cc=
Subject key identifier: 37:14:93:3A:8A:53:42:91:6E:F3:4D:D9:7B:01:82:83:AA:59:34:99
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 24320903C4206BBA4155EA1FA3774DA458197028
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033333830.roa
Signing time: Sat 06 Jun 2026 13:33:29 +0000
ROA not before: Sat 06 Jun 2026 13:28:29 +0000
ROA not after: Sat 05 Jun 2027 13:33:29 +0000
asID: 203380
IP address blocks: 83.171.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:32:09:03:c4:20:6b:ba:41:55:ea:1f:a3:77:4d:a4:58:19:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 6 13:28:29 2026 GMT
Not After : Jun 5 13:33:29 2027 GMT
Subject: CN=3714933A8A5342916EF34DD97B018283AA593499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:7f:51:77:4f:76:c1:69:aa:be:10:7e:fa:
ae:2e:08:fd:dd:d2:ce:a7:c2:4b:77:1e:57:05:06:
03:f1:54:de:97:e0:31:1e:0d:21:56:70:ec:3d:3d:
f6:ec:8b:a2:f5:83:00:29:7d:95:5b:a4:08:3b:ee:
07:c9:99:f6:c4:14:67:28:72:4e:ab:44:5d:4b:ba:
c3:85:27:fe:38:5f:e6:65:fd:31:aa:38:92:c8:2a:
97:7d:b1:a3:c0:0e:91:ef:1f:41:98:b7:e8:ac:de:
84:86:d6:4e:dd:fc:68:5c:64:98:a0:9f:a4:b5:77:
3d:8d:3b:ad:30:7d:c8:bb:5c:48:b6:7c:7e:a6:39:
0d:59:e6:a3:45:3d:8a:58:35:be:d4:2a:cf:75:88:
73:e0:c6:5b:bd:4c:a3:87:96:c6:82:8a:2f:7b:40:
0c:31:3b:e9:38:c8:81:30:ff:f6:b0:47:ef:66:2c:
81:ef:da:60:22:29:cf:d2:20:03:4b:1b:79:21:6f:
6d:6b:5b:3f:74:8d:1f:36:ca:9f:18:e0:67:a9:57:
d3:9d:ea:73:d6:d5:a6:c9:4a:72:58:d9:13:34:c4:
da:60:bc:79:98:76:2d:47:42:14:9d:89:60:d3:1d:
cd:cb:ed:45:e4:bf:ea:73:9e:28:4f:0a:40:12:4a:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:14:93:3A:8A:53:42:91:6E:F3:4D:D9:7B:01:82:83:AA:59:34:99
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.203.0/24
Signature Algorithm: sha256WithRSAEncryption
78:5d:83:77:b0:ea:12:73:44:bd:05:33:63:21:b5:3a:4a:93:
f2:af:ee:d1:0a:dd:1b:de:2d:04:77:ff:ea:69:63:dc:31:e8:
23:2a:7b:04:a3:68:46:02:db:25:4c:4a:09:20:b6:42:c7:e3:
b1:05:c0:8f:f7:30:7f:3e:c3:19:c1:79:a3:fa:0b:d0:92:05:
d9:0c:4f:cc:a2:f1:0b:75:b1:46:eb:1d:17:f9:9b:5c:45:aa:
7d:36:41:a7:bc:ff:ef:7d:4e:ad:62:96:4d:f6:a5:1d:53:47:
73:67:95:a0:bd:17:e3:26:a2:97:3f:37:8b:42:c0:9f:45:95:
0a:38:b8:c5:71:48:b4:09:20:cd:b3:8d:0f:75:b3:ab:a4:03:
cd:6d:b0:76:10:c5:36:47:fc:2c:01:63:8f:70:14:83:dd:1d:
0e:26:c4:80:1e:7a:eb:e0:06:bc:bc:6b:8a:81:90:10:49:df:
df:7d:9a:63:d7:15:8d:39:d8:52:83:e8:ab:86:1b:ce:2e:46:
90:23:55:49:de:85:80:b7:95:8a:f3:06:d7:44:24:8e:ad:84:
25:5f:61:e9:6a:27:3e:6a:6d:fa:4e:74:73:a5:9b:3b:c8:5a:
40:3b:80:4e:59:30:c3:b3:b6:b4:18:b4:af:0d:41:08:d5:9b:
1a:46:5d:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:14 2026 by rpki-client