Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
File: 3136372e38382e33322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: x2iFdg29vKicSPKW8+fz62SyTHoEsK8a8HjpwNnECU0=
Subject key identifier: B7:B3:C2:55:EA:02:F0:74:A1:57:B9:C0:8F:54:6C:AE:0C:8A:DB:44
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 20FF9561941EB4075ACA803841E501181DF3184E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 23 Apr 2026 17:23:52 +0000
ROA not before: Thu 23 Apr 2026 17:18:52 +0000
ROA not after: Thu 22 Apr 2027 17:23:52 +0000
asID: 47583
IP address blocks: 167.88.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ff:95:61:94:1e:b4:07:5a:ca:80:38:41:e5:01:18:1d:f3:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 23 17:18:52 2026 GMT
Not After : Apr 22 17:23:52 2027 GMT
Subject: CN=B7B3C255EA02F074A157B9C08F546CAE0C8ADB44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:ab:c6:bb:41:34:6e:bc:a5:7d:e5:a2:1a:
63:71:bb:71:ac:24:17:4e:6d:b5:60:0a:5f:2c:88:
4c:dd:a5:ce:5c:a7:1d:0b:e6:81:42:6d:e1:37:ba:
30:c7:68:9e:89:c9:d9:d7:72:1f:bf:57:76:f8:2c:
86:6b:01:76:db:e5:dd:e5:88:73:98:23:aa:3d:7e:
45:48:4a:66:a0:a8:2e:84:42:58:ac:60:c6:34:b6:
1c:03:8c:8f:75:9c:ea:7b:26:87:be:7d:7a:96:61:
7c:02:e7:92:99:83:c3:cc:fb:69:dc:78:97:d0:2f:
58:e5:07:78:f7:5d:ca:23:e6:31:1a:06:eb:84:46:
92:6c:65:a0:52:fc:e4:3e:d5:96:a4:00:c5:86:98:
85:6d:2c:53:2b:25:e3:1a:56:b0:dd:55:5a:e9:b7:
b3:d3:06:39:62:18:84:9a:1b:42:b9:a5:a5:90:f0:
b8:ca:5a:9e:38:5a:46:cd:ce:ee:42:17:2c:56:2f:
7a:5a:4d:f5:95:6e:6e:4f:e3:88:13:37:b2:e4:13:
2e:8f:b9:29:7e:99:5c:58:75:07:e4:45:85:45:60:
0f:ce:4c:34:8c:39:cb:fe:d6:f4:53:56:9f:bf:11:
df:7d:c9:62:95:d2:d2:08:c1:d2:01:ae:be:5b:3e:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:C2:55:EA:02:F0:74:A1:57:B9:C0:8F:54:6C:AE:0C:8A:DB:44
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
e4:7a:9d:71:18:2d:fa:7b:eb:21:38:ce:2c:0e:68:ea:bc:3e:
71:9e:45:88:39:9b:f5:f1:b3:a1:6c:98:b1:6b:4d:f9:5b:9d:
d1:45:8d:3d:77:b5:86:13:63:f9:42:1a:e3:96:a6:d8:32:98:
31:f3:41:03:ea:da:51:2e:ea:ae:09:45:0d:63:e0:21:ba:54:
2c:ba:7f:25:cb:f6:5b:4b:ef:ba:f8:15:ae:4f:70:8a:25:9b:
94:c8:16:31:2e:a5:bf:c8:b9:62:d6:0f:89:86:ed:b9:3b:33:
e7:f7:1d:9b:b6:01:ea:3b:15:a9:f3:81:9f:f1:ef:a0:f5:a3:
6c:28:f7:36:0b:e6:ee:a9:47:ac:07:3e:a2:78:1f:5a:f2:3b:
32:6c:93:45:91:82:c1:16:0f:fe:ee:ad:dd:38:8f:9e:6a:19:
5a:23:f3:b0:cf:0e:92:15:ca:ed:80:ef:f9:30:d4:b7:33:3c:
db:10:84:28:96:60:cf:1c:22:54:4f:b4:e7:d1:aa:06:ea:78:
70:de:67:ed:d2:67:cf:37:85:88:9a:59:f0:60:ba:e6:db:da:
eb:a2:75:db:56:61:99:75:4f:1b:0a:96:bd:51:c9:80:e9:73:
5d:46:03:8c:42:60:c6:bb:f2:20:7d:29:8e:96:b4:10:1b:6f:
9c:75:24:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:40 2026 by rpki-client