Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e20383334.roa
File: 37382e33312e3235312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: R/4wmZS+hyi6sTZLKxrKkbi3aYS+ggHP9+U+zW0D05M=
Subject key identifier: DF:AD:C8:89:97:70:FF:9A:80:C5:50:50:27:57:51:E3:DC:21:2B:07
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 520BE633D6845AC43F60C1B455FFB0F034E53CDE
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Sep 2026 06:29:05 +0000
ROA not before: Sat 19 Sep 2026 06:24:05 +0000
ROA not after: Sat 18 Sep 2027 06:29:05 +0000
asID: 834
IP address blocks: 78.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0b:e6:33:d6:84:5a:c4:3f:60:c1:b4:55:ff:b0:f0:34:e5:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 19 06:24:05 2026 GMT
Not After : Sep 18 06:29:05 2027 GMT
Subject: CN=DFADC8899770FF9A80C55050275751E3DC212B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:1f:7e:6f:51:2f:52:30:1a:1d:2c:d5:c7:
ce:90:d8:79:75:f9:5c:8f:a8:14:47:ae:b0:7a:78:
65:f3:68:f3:ea:e6:d3:ea:52:79:ee:53:f9:83:64:
a8:20:1d:11:78:55:b9:26:75:5c:3d:a8:7d:b0:b1:
ea:6f:10:8e:bc:fc:fc:a2:91:be:87:34:7f:66:91:
70:86:da:76:a7:73:6f:f7:ec:ce:36:6c:71:e2:8b:
fd:1f:83:5f:26:fc:0d:4b:5f:69:ba:17:dc:e6:b9:
28:c4:3d:eb:0b:ac:d5:22:8c:83:5a:cb:d6:af:26:
35:59:b2:af:bd:50:7c:a3:00:a1:07:8f:43:9f:8c:
80:8b:11:21:49:df:37:e7:31:e2:6b:4f:db:f8:f2:
4a:7c:d2:87:ab:9d:03:86:f2:54:84:40:ab:85:12:
e8:87:0a:a0:39:98:69:ac:fb:3d:47:3e:89:e4:9a:
ae:95:cd:9b:da:a3:2e:80:83:22:78:2f:19:56:54:
87:86:ef:23:52:4c:d5:37:7b:05:0b:b9:17:1f:02:
5f:37:86:34:d7:63:e2:37:c1:4e:1e:ca:67:3e:3c:
83:0f:f2:85:81:10:fa:2c:ae:97:01:f8:e8:5f:e0:
9b:f9:75:aa:69:1f:9d:d6:36:f7:e1:f0:8a:5f:93:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:C8:89:97:70:FF:9A:80:C5:50:50:27:57:51:E3:DC:21:2B:07
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
08:53:02:d8:f5:5c:c2:49:8e:d5:dd:03:75:d7:e8:0d:38:ad:
f3:d9:2e:40:d1:93:4a:2f:79:cb:9a:72:37:29:06:3a:3d:58:
c3:ec:55:e1:86:7b:ec:88:25:92:cd:99:b7:44:63:08:ff:ee:
60:0f:ef:35:d8:29:bb:bb:3b:be:86:4d:af:7d:8a:46:30:25:
04:f1:c2:19:cf:b4:97:d2:f5:fa:6f:a3:c8:a3:1b:8b:c5:67:
f4:2c:fd:7d:86:aa:55:55:ed:9c:57:db:27:be:bc:e4:65:ce:
c1:43:0c:f9:12:e5:7e:cd:e0:32:19:de:4e:67:57:47:a4:a4:
84:a7:92:4f:91:35:66:e6:2c:85:c0:9a:dd:cd:e9:23:e0:5b:
45:79:47:fe:bb:9f:19:5d:9a:ba:00:01:37:58:3b:36:42:4c:
ed:c7:82:da:97:13:43:9f:9b:f2:e8:76:31:42:fa:16:55:9c:
4b:55:1a:b6:95:8d:62:ae:2c:ab:8c:ae:79:45:8f:c3:fe:69:
50:7d:db:54:58:f1:94:34:77:85:d1:18:67:f5:41:ea:28:08:
ad:82:e7:a8:c8:87:ef:79:d3:78:d1:fa:3f:c2:7f:20:95:9d:
66:a3:dc:a5:c1:ff:e5:c4:6a:fd:2a:0a:6f:8d:19:21:0c:cc:
cd:d6:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:41:45 2026 by rpki-client