Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131342e302f32342d3234203d3e20323033393139.roa
File: 38332e39372e3131342e302f32342d3234203d3e20323033393139.roa (raw, json)
Hash identifier: 0L8mc4EDMREQkOZCmYVJQpLj8k67bkGkOh9kuYO/KXA=
Subject key identifier: B5:A1:64:BE:3D:3C:6B:2C:3B:F9:54:06:D8:16:E7:BF:33:E8:3C:A0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 74BE07F9B7F6C3129E68948C155DFD3436C63F21
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131342e302f32342d3234203d3e20323033393139.roa
Signing time: Mon 27 Jul 2026 09:43:52 +0000
ROA not before: Mon 27 Jul 2026 09:38:52 +0000
ROA not after: Mon 26 Jul 2027 09:43:52 +0000
asID: 203919
IP address blocks: 83.97.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:be:07:f9:b7:f6:c3:12:9e:68:94:8c:15:5d:fd:34:36:c6:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 27 09:38:52 2026 GMT
Not After : Jul 26 09:43:52 2027 GMT
Subject: CN=B5A164BE3D3C6B2C3BF95406D816E7BF33E83CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:f7:83:91:4b:12:5d:a6:8b:7d:06:98:7c:
bd:74:77:c4:57:31:ee:4d:ba:8f:b1:fd:be:10:bc:
60:c5:02:8b:7a:01:02:cd:9d:ef:48:34:a0:17:b4:
be:3d:fd:df:18:7b:d6:86:3d:39:46:c9:c0:f4:4a:
b1:75:5d:6a:d4:0a:b3:fb:e6:51:89:be:e1:9c:28:
c5:f9:87:d5:79:b4:b5:88:9e:13:8e:d5:fd:09:d7:
80:5b:64:6c:74:c4:81:ca:77:d2:7d:ff:eb:dc:0e:
59:db:8d:f1:91:ce:ba:ec:10:7d:0b:d1:e2:06:5a:
eb:7c:3b:e0:b3:93:35:5c:6c:94:08:b4:8b:d8:41:
8d:55:7c:f1:b9:27:ef:86:54:16:43:99:29:38:af:
57:58:ff:c5:f2:a4:70:f4:9e:8a:a0:80:2f:03:87:
18:b9:9c:87:34:9a:14:c6:c9:37:73:a7:14:0a:06:
77:61:30:b5:40:0b:58:c5:2d:0a:e7:ba:54:1d:71:
ed:b6:d5:31:0a:0e:60:f9:d9:e9:5f:f6:0a:f6:c7:
a1:72:61:2e:b5:67:b0:0d:0d:69:64:ec:c6:da:f2:
64:00:a5:99:a6:0c:d6:86:82:53:d5:d4:08:00:71:
31:ef:4f:c0:a3:05:4e:60:52:35:f9:dc:10:62:ea:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:64:BE:3D:3C:6B:2C:3B:F9:54:06:D8:16:E7:BF:33:E8:3C:A0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131342e302f32342d3234203d3e20323033393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.114.0/24
Signature Algorithm: sha256WithRSAEncryption
55:01:2b:85:c8:cc:6f:9e:80:a3:d0:de:f4:18:24:88:60:9f:
d1:89:c1:3f:0b:bd:0d:e1:09:b9:be:e6:11:66:fc:04:a7:9c:
a5:33:49:7d:be:f4:67:8e:21:83:0d:1b:3d:f9:c8:33:09:9d:
d7:cc:05:27:27:66:09:2f:55:03:7b:ad:c8:bc:7f:78:fe:c0:
98:43:71:1b:5a:ae:68:bd:f1:d3:d0:55:c2:55:88:7a:78:81:
60:63:e9:ea:aa:81:e5:20:17:59:7d:28:3d:94:0a:a9:55:5e:
ab:0f:15:16:75:5e:7b:36:26:4c:a1:2a:64:53:4a:4b:02:36:
86:07:60:d3:ba:60:47:c6:96:b5:f7:a7:85:51:32:97:f2:96:
4c:92:28:aa:7c:2e:0b:28:ce:58:02:7e:0b:bb:8d:23:29:72:
e0:d8:50:dc:47:f6:2c:b7:da:0a:65:fc:86:25:1e:67:64:d3:
6b:0b:c4:4d:ea:f9:03:44:ac:d8:6e:13:b5:c0:ad:47:e3:9d:
77:28:54:a1:72:91:01:bc:4a:0b:94:d4:1f:37:b1:2f:b4:78:
8a:b7:6c:b2:db:ed:15:7d:6b:25:fb:25:84:15:81:9e:ee:b3:
72:65:b9:8f:b7:62:53:65:12:83:c7:6c:a9:68:e3:44:db:a9:
bf:99:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:09 2026 by rpki-client