Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38332e302f32342d3234203d3e203133333335.roa
File: 38352e3230322e38332e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: Ux8Phbg762bdmHZr+xzqgJvup/Cf9VAGWIfjWMpAP2s=
Subject key identifier: AF:D7:90:C2:E3:70:86:35:10:1C:32:2D:C9:62:B5:BD:01:DB:A4:F4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 69FA61379E68F90B05930EF05907C93C5C555C99
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38332e302f32342d3234203d3e203133333335.roa
Signing time: Wed 09 Sep 2026 19:36:26 +0000
ROA not before: Wed 09 Sep 2026 19:31:26 +0000
ROA not after: Wed 08 Sep 2027 19:36:26 +0000
asID: 13335
IP address blocks: 85.202.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:fa:61:37:9e:68:f9:0b:05:93:0e:f0:59:07:c9:3c:5c:55:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 9 19:31:26 2026 GMT
Not After : Sep 8 19:36:26 2027 GMT
Subject: CN=AFD790C2E3708635101C322DC962B5BD01DBA4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:b1:75:ee:f9:75:cf:0a:b6:79:32:dc:76:
b0:8c:f2:57:a1:71:b0:f9:e3:29:0c:79:81:77:62:
23:59:89:cb:c9:16:1b:b7:cf:fc:b7:22:28:fc:3d:
d2:5e:ba:59:f7:ae:78:6b:42:25:c5:48:9d:7c:2b:
bc:28:4b:92:b1:5d:d0:3a:d0:e7:1c:01:5d:24:cc:
5a:e1:97:75:60:fa:87:81:72:2f:aa:5e:eb:57:95:
53:d7:b7:76:74:06:69:d0:8a:12:1f:29:a5:88:27:
33:ff:7e:7e:15:f2:fa:46:73:67:a9:b7:4a:fb:7b:
ae:dd:c0:7d:46:54:ba:8e:5f:7d:6e:29:2b:3a:69:
68:97:a1:b1:a1:f6:2b:73:a6:ad:1b:e0:9e:4c:88:
2e:93:99:89:69:36:f3:e1:21:45:16:eb:56:fb:b9:
4e:ab:f1:db:03:a9:a9:2f:d5:9d:a6:aa:83:9c:d2:
f7:8f:35:8b:7e:29:de:55:cb:09:66:ae:d7:f8:ff:
ef:19:4a:24:5c:a5:51:39:60:6e:db:41:04:77:da:
e6:bf:ad:b5:42:22:4a:c3:63:5a:7b:1c:d4:84:4b:
82:8b:29:4f:55:a3:2e:42:d5:35:ca:79:70:1a:38:
e0:32:2b:0e:92:56:49:44:e6:6c:fc:2c:89:41:58:
37:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:90:C2:E3:70:86:35:10:1C:32:2D:C9:62:B5:BD:01:DB:A4:F4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38332e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:89:ba:6f:5b:ef:e2:82:77:e1:04:3b:1d:40:fc:31:01:46:
d7:20:10:c7:45:e4:b3:14:0e:64:9d:83:ef:c2:17:2b:6e:eb:
92:c8:7a:c2:46:63:d5:82:c2:74:84:0c:e0:df:f8:9e:c6:72:
2b:3a:2c:02:c0:c0:81:7d:bc:f0:1a:05:d9:a7:a4:06:e8:c3:
de:4e:5f:a9:60:6a:90:d8:b5:b0:bf:d7:21:22:d4:1a:c3:2c:
fa:cf:09:b9:57:25:14:74:65:51:8b:c6:af:33:b9:06:14:13:
b8:3d:09:ea:6b:5f:a9:af:c1:a9:6a:23:30:0e:97:41:6c:ee:
df:03:25:d7:c6:f8:74:a5:bf:be:a0:96:6b:3c:92:12:87:02:
0f:48:a2:20:30:1d:8d:46:6e:cf:53:58:17:12:72:37:c8:38:
c2:d7:3e:91:49:d3:70:d6:d6:e5:b0:07:fb:bd:32:18:82:f8:
5d:af:77:ce:a9:47:84:d4:09:a4:58:95:29:64:b8:09:f5:c7:
b9:ad:b1:de:f9:a7:54:a1:97:75:b8:6d:3d:d2:52:6f:2a:c7:
1a:50:b1:7a:34:59:0b:f8:94:eb:03:fd:7c:b3:c2:98:17:ed:
a1:e2:e1:78:6a:16:09:1c:df:fe:a1:d0:b7:62:87:9c:c1:ce:
2b:fc:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:27:30 2026 by rpki-client