Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/38362e3130362e37372e302f32342d3234203d3e203137353631.roa
File: 38362e3130362e37372e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: tiGxLyiD4oEC91u1YGCBYe1ppRtRB68+LdcQBDphgDY=
Subject key identifier: 93:A8:C7:88:4D:75:FE:17:F4:4E:14:B2:B1:82:3E:0F:77:23:6B:88
Certificate issuer: /CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Certificate serial: 6880B724C1A28A087E277F7D809729D7C8397EB7
Authority key identifier: A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/38362e3130362e37372e302f32342d3234203d3e203137353631.roa
Signing time: Tue 12 May 2026 16:30:40 +0000
ROA not before: Tue 12 May 2026 16:25:40 +0000
ROA not after: Tue 11 May 2027 16:30:40 +0000
asID: 17561
IP address blocks: 86.106.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:80:b7:24:c1:a2:8a:08:7e:27:7f:7d:80:97:29:d7:c8:39:7e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a97e43cfdc15b02a3141f0ad097bcd079c2ed9
Validity
Not Before: May 12 16:25:40 2026 GMT
Not After : May 11 16:30:40 2027 GMT
Subject: CN=93A8C7884D75FE17F44E14B2B1823E0F77236B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:68:8b:b9:d4:d4:3c:07:62:ed:0e:22:0d:
3e:ed:ac:5f:0e:09:33:dc:87:e5:f7:7e:e4:e0:80:
e2:82:22:5b:17:db:de:2c:a8:75:ee:2d:97:71:0c:
29:91:3c:16:1b:6f:7f:36:82:a5:12:0b:53:4b:fb:
cf:62:87:6e:a6:82:1f:17:40:9e:0b:ac:37:99:eb:
70:7e:34:10:ec:ad:9e:1d:f4:ef:c6:81:e6:1a:c6:
e8:ad:6a:e5:d1:ca:6a:17:b9:44:d5:66:6e:e4:e6:
0a:cc:06:56:12:0d:3e:08:20:c3:dc:eb:15:da:f0:
ef:29:1f:6d:20:de:0c:f8:5c:4a:05:fb:61:f3:26:
32:43:9f:2e:17:53:f0:22:35:46:89:36:2e:b5:11:
99:38:34:f4:62:1f:f8:3f:dd:52:f7:80:c8:41:12:
8d:23:6e:b1:34:16:d1:66:f4:59:d8:1b:2a:34:4d:
a5:04:e6:c8:70:77:f1:ec:5c:c8:c4:5e:ff:4b:ff:
80:fe:6f:e1:82:a7:a1:7c:9d:c7:d6:08:15:46:05:
d2:47:15:5f:76:45:b5:4c:52:37:c8:dd:53:2e:2c:
39:14:00:1c:a4:46:11:ac:1d:53:32:5f:7c:59:b2:
60:0c:50:43:62:57:95:e0:8c:14:81:78:a5:35:d9:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:C7:88:4D:75:FE:17:F4:4E:14:B2:B1:82:3E:0F:77:23:6B:88
X509v3 Authority Key Identifier:
keyid:A0:A9:7E:43:CF:DC:15:B0:2A:31:41:F0:AD:09:7B:CD:07:9C:2E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/A0A97E43CFDC15B02A3141F0AD097BCD079C2ED9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKl-Q8_cFbAqMUHwrQl7zQecLtk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/1/38362e3130362e37372e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:0a:d0:5d:38:e1:40:20:30:93:35:12:c8:37:f4:6f:51:5d:
c6:c2:bd:17:b1:ba:00:80:c6:ce:bf:b3:5b:fa:c4:d3:15:26:
be:ca:de:b4:2a:1c:ae:fd:5d:8c:19:0f:24:63:10:4e:2e:0f:
0b:86:4d:a2:59:45:06:20:e2:5a:41:e6:8a:a4:42:54:b9:e3:
f4:a0:be:69:99:e5:0a:ef:8b:21:ab:9f:8e:53:c0:2e:d0:b8:
68:ff:cf:30:5e:e7:33:b7:54:a8:9d:ec:c0:f3:fe:dc:d0:84:
2a:70:77:5e:7a:e0:c9:ff:60:17:15:07:1e:41:e1:67:cf:1d:
7f:1a:6b:a1:f9:b6:a0:81:9b:35:fe:d9:60:82:83:45:a8:a6:
da:8f:d1:d3:f0:9e:f1:70:4a:5e:74:b5:42:03:7e:df:c6:f5:
93:d4:7f:27:2c:30:ae:07:ee:c3:eb:22:89:58:4f:60:95:12:
68:26:52:5b:02:54:cf:97:23:f7:16:44:bc:c1:a6:77:1b:39:
bb:cb:e4:8f:9e:4a:57:02:6c:77:63:88:e2:f3:e5:62:9b:e8:
06:12:64:72:3d:4b:d6:8b:b5:72:2b:78:b9:af:11:28:b0:db:
b2:fe:c3:43:64:9d:f8:bd:f0:e3:86:31:a7:df:8d:9d:9c:84:
33:72:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:46 2026 by rpki-client