Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33362e302f32342d3234203d3e203437353833.roa
File: 3136302e3233382e33362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: sr0yvbygAJUZ1GnMqmcB7+0uxIKFEEOpct/5Hx/ZlS0=
Subject key identifier: D5:DF:2A:C2:AD:52:47:EB:AD:F8:D1:B5:44:17:5F:2C:BF:B6:3B:A6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 50A3F3123598BCEEF0BDC94C94B31F8D80A51FE4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33362e302f32342d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:31:04 +0000
ROA not before: Fri 30 Oct 2026 12:26:04 +0000
ROA not after: Fri 29 Oct 2027 12:31:04 +0000
asID: 47583
IP address blocks: 160.238.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a3:f3:12:35:98:bc:ee:f0:bd:c9:4c:94:b3:1f:8d:80:a5:1f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:04 2026 GMT
Not After : Oct 29 12:31:04 2027 GMT
Subject: CN=D5DF2AC2AD5247EBADF8D1B544175F2CBFB63BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:a2:b5:33:d9:1c:31:28:4e:b0:ad:9d:f8:
e5:85:f5:e8:74:26:b9:49:ca:32:4c:9a:31:6b:d1:
f2:f9:c4:8b:fe:2e:d7:8e:34:c6:ce:e9:5e:ea:a2:
d8:0e:86:ec:ad:b2:a7:d6:33:3e:24:ab:27:55:8e:
2b:e9:38:41:2d:71:09:9c:ac:70:6e:03:7c:5d:51:
43:a4:85:29:b4:52:57:20:6c:62:d8:9d:63:0c:33:
84:96:eb:6e:dd:17:6f:ff:01:e3:6e:13:26:fe:5b:
38:af:26:82:65:1b:52:e4:a2:2f:d5:a5:94:d1:09:
0d:df:38:01:28:01:44:46:a1:ba:45:97:66:27:0d:
8c:56:bf:bc:44:32:59:3d:90:9f:85:1e:8f:2c:4d:
06:e1:dc:8c:d7:ad:89:f0:d2:b7:5b:d6:41:74:c6:
dc:a8:46:97:f9:5a:28:9f:47:1a:af:0a:01:e4:26:
62:bb:8a:8b:8f:94:6b:58:ca:9a:d8:8c:1a:2b:87:
f9:0d:05:f9:e8:d1:eb:eb:5f:e4:d0:b8:25:af:71:
11:9d:03:62:f9:b0:00:85:8a:32:d4:16:0e:6f:9a:
81:e9:49:ee:59:6a:79:a7:17:e1:40:ea:41:f2:f1:
cd:fc:c2:9b:c0:05:d6:51:69:6c:b1:c1:a0:b0:9f:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:2A:C2:AD:52:47:EB:AD:F8:D1:B5:44:17:5F:2C:BF:B6:3B:A6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.36.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6f:48:ee:72:3f:5b:83:6e:5f:20:e3:43:92:b1:b9:9a:3d:
28:5b:0b:5b:65:10:3c:ae:10:f9:90:17:8c:5b:93:f6:e7:b4:
5b:36:5b:2c:52:cf:31:d6:78:16:81:b1:85:85:c0:a9:13:a2:
72:5e:21:4e:2b:13:33:e6:bf:3b:79:f8:b0:68:c6:b2:a8:c8:
b2:37:69:3c:f0:b6:3c:16:39:44:41:c9:e9:7f:ac:31:7d:1b:
be:bd:36:75:11:bd:70:22:3a:9a:4a:cd:c9:1c:8f:49:94:64:
eb:e5:c7:6e:e9:c5:12:d0:42:84:ba:0d:bc:72:31:94:c1:bd:
61:7f:bd:ff:4f:19:bc:0b:19:15:87:79:d9:bc:69:05:52:23:
54:af:b7:0b:44:93:e0:92:a6:e4:a2:0f:9f:f7:76:23:c2:cd:
1c:e0:08:dd:4f:74:2b:d3:0d:e6:13:04:90:46:7c:4d:f1:e3:
82:27:f1:14:fb:4e:ab:66:d4:35:6a:0c:96:9f:94:d8:c6:28:
54:f9:60:c7:51:47:54:ec:d1:20:4c:75:78:39:05:2f:b6:1c:
30:31:d7:e8:bd:12:a6:c7:46:f3:0d:3c:6a:c1:98:3b:6c:fe:
61:19:38:c9:ec:d2:b4:76:1b:04:8c:33:d7:95:b5:09:49:ec:
e9:83:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:31 2026 by rpki-client