Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33362e302f32322d3234203d3e203437353833.roa
File: 3136372e38382e33362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 8qQ4cqS1sddZfAFrDdFVC1nndTIURYnB7Ex6SQJVX94=
Subject key identifier: 96:24:16:75:F7:20:2F:03:FF:9C:BD:87:E8:14:02:45:2C:B3:CD:CE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3FADE857591D0270C7C4A8E15D4D7C6F36002B9C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 23 Apr 2026 17:23:52 +0000
ROA not before: Thu 23 Apr 2026 17:18:52 +0000
ROA not after: Thu 22 Apr 2027 17:23:52 +0000
asID: 47583
IP address blocks: 167.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ad:e8:57:59:1d:02:70:c7:c4:a8:e1:5d:4d:7c:6f:36:00:2b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 23 17:18:52 2026 GMT
Not After : Apr 22 17:23:52 2027 GMT
Subject: CN=96241675F7202F03FF9CBD87E81402452CB3CDCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:06:5c:c9:77:f8:7c:61:95:a8:b4:eb:f6:
71:5e:aa:d1:2e:a2:68:dd:f0:3b:ff:f8:dd:c3:06:
e2:43:1a:97:95:28:d9:05:94:46:7b:9f:1e:95:18:
c9:c8:e7:ab:68:28:c1:39:40:44:b1:56:be:ca:ec:
30:90:93:32:e8:c5:bf:49:cc:f2:18:51:b8:45:a0:
9c:cd:6d:7e:b7:68:cc:f8:a2:3f:97:6f:40:a7:3e:
b7:58:b7:48:e1:1d:bc:5d:b2:a8:e9:1f:85:de:2f:
12:39:fb:2b:8b:65:33:21:f4:69:48:fa:8a:80:ec:
4d:61:c0:b9:0b:1c:dd:82:56:6c:1b:67:b1:ad:09:
4a:f8:33:4f:5b:df:1a:ed:2a:43:03:29:01:59:7b:
e4:02:35:35:aa:4b:41:0e:00:92:9e:73:42:2f:10:
b5:28:3b:17:31:ac:b2:35:fd:b4:a2:7b:ba:c8:c4:
9a:7f:9e:9e:39:ba:ec:ac:ac:5a:2d:4a:3f:ad:cd:
2d:da:85:98:ed:fa:75:05:01:4a:ac:d5:95:91:d7:
80:bc:97:38:16:b4:17:37:8f:c0:03:67:c1:9b:ac:
83:64:71:c4:e7:53:d8:65:72:eb:37:d4:a9:ee:a3:
02:f3:3b:45:67:fa:36:6e:71:bd:52:54:09:47:97:
7d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:16:75:F7:20:2F:03:FF:9C:BD:87:E8:14:02:45:2C:B3:CD:CE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:d1:a9:1f:cb:8c:80:60:57:3b:8e:6e:87:b2:5a:2a:51:b8:
47:1a:a9:73:83:be:09:63:e0:fa:c6:2f:b8:88:26:53:90:62:
b5:e1:32:34:5f:ce:89:e6:d6:d4:98:f1:e1:95:55:71:0d:4a:
f5:70:72:91:6a:69:1c:e0:f1:0f:a9:ca:76:5b:79:98:f7:5c:
90:00:6a:56:e9:7b:59:8e:71:8a:f5:22:1e:c9:db:27:6e:15:
93:01:1d:8b:7a:e4:7b:8e:9e:ee:e8:85:4d:b4:f8:1b:7b:f7:
32:20:7d:c0:0f:cf:31:13:2e:92:96:15:9e:8b:6a:a5:3d:1f:
56:e3:a4:fb:12:52:b5:6e:c8:c6:24:7a:52:03:a3:4c:e9:0e:
38:30:78:74:43:51:01:2e:c0:b7:f3:21:d5:a3:cd:2c:c5:17:
4a:9c:85:19:04:df:26:71:c8:1d:70:7e:28:de:47:fb:27:c9:
cf:64:fc:a4:ca:ad:f8:2f:ae:44:08:88:82:e9:67:2b:35:c9:
6a:fb:3f:90:e9:cc:8a:a7:8a:99:28:7b:aa:93:8b:2a:01:06:
b4:1e:2e:74:1c:a0:a7:1d:c1:35:00:2a:b3:8c:cb:72:9c:26:
de:9a:1a:a7:6e:a6:a5:c9:03:55:d8:bf:50:bf:ac:03:f6:70:
e8:91:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:29 2026 by rpki-client