Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234392e302f32342d3234203d3e20323134303235.roa
File: 37382e33312e3234392e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: AJVVmdPg4s+9LdBcaYP1nA+NtVR9D0w95elhXk/rCnc=
Subject key identifier: 6A:73:38:42:C4:1F:D8:B6:39:E1:AC:6C:AB:EC:EB:ED:A0:88:3F:BF
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: C68B77B3CA643D07E3FF835D0170D074A1E7
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234392e302f32342d3234203d3e20323134303235.roa
Signing time: Mon 09 Feb 2026 15:20:52 +0000
ROA not before: Mon 09 Feb 2026 15:15:52 +0000
ROA not after: Mon 08 Feb 2027 15:20:52 +0000
asID: 214025
IP address blocks: 78.31.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c6:8b:77:b3:ca:64:3d:07:e3:ff:83:5d:01:70:d0:74:a1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 9 15:15:52 2026 GMT
Not After : Feb 8 15:20:52 2027 GMT
Subject: CN=6A733842C41FD8B639E1AC6CABECEBEDA0883FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:67:7a:d6:b5:6e:60:63:5d:86:56:b3:35:
a1:c1:89:1e:8e:ab:e8:65:86:fe:60:35:ff:6e:31:
90:3f:39:02:a1:70:e0:fd:e5:77:e4:e1:95:d8:62:
25:17:82:14:63:68:2e:5f:16:f7:42:46:20:88:0d:
7b:ad:fd:e7:e8:98:c0:d2:97:b2:bf:9b:5b:75:b8:
76:8b:a7:c9:4f:36:33:6e:4b:4b:37:a9:a2:46:d3:
4d:8f:01:f7:3c:ee:a7:0d:ae:c5:a6:d0:69:80:92:
55:f9:19:e4:59:52:99:f9:37:a5:75:81:ab:fa:77:
5e:87:6f:97:5f:0b:02:dc:77:f4:f8:6c:ee:85:f1:
cb:60:c5:4c:46:ec:b0:b5:27:18:6d:97:d1:53:8e:
65:1b:2c:a6:bf:fa:d9:03:39:6d:fd:b8:a1:92:dc:
ce:ff:fd:51:b0:e2:9b:3a:52:e2:d9:a3:40:72:df:
83:32:a7:73:0e:02:aa:bc:0e:3b:7a:95:76:91:f3:
f9:c9:c8:be:a4:dd:d0:12:ee:44:b7:ff:1b:fb:3e:
a1:56:74:7a:fe:14:c7:95:95:94:f7:f9:5c:56:c0:
53:7c:4d:bc:7a:d6:44:d3:a0:b6:6a:49:83:db:ca:
2c:9f:45:9b:94:77:fd:96:11:6a:73:0e:5f:b2:15:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:38:42:C4:1F:D8:B6:39:E1:AC:6C:AB:EC:EB:ED:A0:88:3F:BF
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234392e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0f:45:de:d1:09:75:0b:94:aa:df:7f:d3:29:ff:05:c8:e8:
dc:10:06:03:2a:b5:59:4a:86:bb:96:97:dc:db:a2:42:79:a7:
55:30:12:00:0e:de:4a:f5:04:87:b3:d1:45:73:f5:eb:70:95:
dc:2e:12:50:2d:aa:ca:67:df:01:58:2e:6b:a3:1e:bf:07:10:
ec:83:c7:96:61:97:ec:44:77:de:5b:68:b9:4a:f6:40:9c:5d:
36:79:0d:60:41:29:20:01:c7:cc:96:2f:f3:e9:78:47:78:08:
83:8f:2c:79:5c:c8:62:18:65:ac:d7:b9:20:b1:aa:af:0e:cf:
59:91:e4:85:72:9d:bf:ac:17:c8:44:8f:3c:8b:af:9f:05:a8:
55:d5:c9:68:b9:d5:74:c1:bd:7c:57:e9:57:d1:de:14:5e:5e:
18:d5:75:7d:18:5f:f6:7d:a6:07:da:d3:84:ba:40:f9:96:34:
c4:7f:0d:32:48:be:0d:61:ba:28:94:6a:8b:eb:13:92:13:01:
83:55:13:28:6f:da:ba:f8:b7:da:ec:c1:df:72:ef:cb:88:26:
86:19:52:0b:13:f3:d2:7f:69:0e:e1:7a:b1:13:61:b5:92:3f:
1a:12:73:31:a1:71:31:dd:81:ac:7e:36:1a:c4:88:3b:a3:7f:
eb:dd:b3:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgITAMaLd7PKZD0H4/+DXQFw0HSh5zANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygwODg0NjlkMWEzMzA4NWZmODhiM2U1OTlkMjIzY2E3NGMy
MzEzYTNhMB4XDTI2MDIwOTE1MTU1MloXDTI3MDIwODE1MjA1MlowMzExMC8GA1UE
AxMoNkE3MzM4NDJDNDFGRDhCNjM5RTFBQzZDQUJFQ0VCRURBMDg4M0ZCRjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMUsZ3rWtW5gY12GVrM1ocGJHo6r
6GWG/mA1/24xkD85AqFw4P3ld+ThldhiJReCFGNoLl8W90JGIIgNe6395+iYwNKX
sr+bW3W4dounyU82M25LSzepokbTTY8B9zzupw2uxabQaYCSVfkZ5FlSmfk3pXWB
q/p3Xodvl18LAtx39Phs7oXxy2DFTEbssLUnGG2X0VOOZRsspr/62QM5bf24oZLc
zv/9UbDimzpS4tmjQHLfgzKncw4CqrwOO3qVdpHz+cnIvqTd0BLuRLf/G/s+oVZ0
ev4Ux5WVlPf5XFbAU3xNvHrWRNOgtmpJg9vKLJ9Fm5R3/ZYRanMOX7IVGfcCAwEA
AaOCAj0wggI5MB0GA1UdDgQWBBRqczhCxB/YtjnhrGyr7OvtoIg/vzAfBgNVHSME
GDAWgBQIhGnRozCF/4iz5ZnSI8p0wjE6OjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5
YWYvNS8wODg0NjlEMUEzMzA4NUZGODhCM0U1OTlEMjIzQ0E3NEMyMzEzQTNBLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ0lScDBhTXdoZi1Jcy1XWjBpUEtkTUl4
T2pvLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZTM3MDhhMC02
N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvNS8zNzM4MmUzMzMxMmUzMjM0Mzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABO
H/kwDQYJKoZIhvcNAQELBQADggEBAFoPRd7RCXULlKrff9Mp/wXI6NwQBgMqtVlK
hruWl9zbokJ5p1UwEgAO3kr1BIez0UVz9etwldwuElAtqspn3wFYLmujHr8HEOyD
x5Zhl+xEd95baLlK9kCcXTZ5DWBBKSABx8yWL/PpeEd4CIOPLHlcyGIYZazXuSCx
qq8Oz1mR5IVynb+sF8hEjzyLr58FqFXVyWi51XTBvXxX6VfR3hReXhjVdX0YX/Z9
pgfa04S6QPmWNMR/DTJIvg1huiiUaovrE5ITAYNVEyhv2rr4t9rswd9y78uIJoYZ
UgsT89J/aQ7herETYbWSPxoSczGhcTHdgax+NhrEiDujf+vds98=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:20 2026 by rpki-client