Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131342e302f32342d3234203d3e20323039383534.roa
File: 38332e39372e3131342e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: kSvutoquToMsmB477F5JbZMCNeG0Azk75pKZ8k9OsdI=
Subject key identifier: 5F:25:A1:EE:66:87:05:4A:A5:2F:A9:56:AD:56:06:E1:62:F0:4A:57
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3CE54C7E3EE3CE5C7AD63DDC5F427CDD031F4A22
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131342e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 30 Oct 2026 12:31:09 +0000
ROA not before: Fri 30 Oct 2026 12:26:09 +0000
ROA not after: Fri 29 Oct 2027 12:31:09 +0000
asID: 209854
IP address blocks: 83.97.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e5:4c:7e:3e:e3:ce:5c:7a:d6:3d:dc:5f:42:7c:dd:03:1f:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:09 2026 GMT
Not After : Oct 29 12:31:09 2027 GMT
Subject: CN=5F25A1EE6687054AA52FA956AD5606E162F04A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:b7:0f:aa:68:8d:18:7a:7e:a5:42:75:28:
99:8d:2c:cb:12:83:59:05:be:c1:28:20:af:f5:ab:
05:3a:06:99:f5:30:1c:2d:7d:23:25:14:95:81:e7:
c5:3b:f9:2c:fc:5d:b3:1f:fe:5e:2d:61:43:4e:b3:
c5:44:51:74:78:fc:87:a1:65:7f:c0:ba:d0:85:7a:
2e:b4:f2:34:42:fb:7c:9e:fd:01:fb:16:3e:75:1a:
db:96:f9:99:9f:11:69:a9:de:e0:40:03:cf:bc:13:
d1:4c:1d:3b:8e:27:79:d9:05:45:24:09:0a:17:8b:
fb:05:ab:c4:53:15:8d:6a:ee:66:6f:18:a2:81:17:
d2:8a:22:65:fd:72:70:88:ac:8f:fb:16:34:cd:7e:
a0:12:db:29:64:8b:61:65:e4:d4:a9:b3:da:f1:ce:
cf:1e:50:cb:58:3e:21:f7:fb:12:92:7b:be:b5:8c:
4a:cc:c1:b9:f1:1a:59:94:f0:6a:b1:4a:92:e6:9b:
a2:b6:ce:f8:fd:3a:33:66:ec:6a:33:92:b6:27:16:
2a:56:b5:12:c9:f3:f9:87:c5:4e:39:a8:48:65:15:
c2:ab:bc:36:43:2d:b4:20:f4:56:a0:e3:02:62:94:
cd:b5:6f:27:5c:49:87:56:f5:02:b0:3b:80:15:4b:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:A1:EE:66:87:05:4A:A5:2F:A9:56:AD:56:06:E1:62:F0:4A:57
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131342e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.114.0/24
Signature Algorithm: sha256WithRSAEncryption
51:98:26:a5:ad:be:d5:5a:c3:34:ca:3e:7b:c4:8d:66:2f:44:
46:cf:e6:15:78:82:9d:5b:07:8e:5d:ef:b8:49:89:28:2c:0d:
d6:04:f2:1c:49:93:b6:f5:4e:bc:c6:be:59:47:db:a3:cf:f5:
6e:b2:fe:01:20:99:51:ac:53:f3:62:73:7e:d2:fc:13:18:56:
db:0d:db:de:1e:58:60:ef:47:52:c9:31:ef:6b:a4:c7:6d:ad:
87:52:4c:80:83:05:8e:b2:39:f5:78:ea:30:95:fd:fa:dc:cb:
bb:37:36:09:fe:3c:2f:c9:05:ac:4d:9e:fc:f3:5d:14:2a:de:
68:10:bd:de:e3:46:f9:f3:2c:6b:21:f8:8b:4e:7f:85:15:56:
b0:db:0e:e3:d3:1b:48:c8:20:29:c1:06:ab:7b:59:8c:92:95:
fa:16:c1:99:2e:58:72:d6:46:bb:32:15:b8:1f:d7:2d:5c:23:
c5:ff:d7:3b:eb:e8:6c:6d:1d:9a:f7:8c:29:fe:10:c8:c9:f0:
18:c5:0c:ef:3f:2d:d3:4e:cf:e2:cc:41:46:5b:7a:ab:13:b6:
03:c8:5a:ba:09:1e:08:aa:08:0a:96:1b:74:ac:d5:e8:f8:20:
af:c1:f1:29:88:c7:33:85:4d:9e:40:4f:17:24:6c:d0:83:36:
e6:20:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:27:20 2026 by rpki-client