Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
File: 38352e3230392e39342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: y3Qo8WE3huNdlIi44pOs2mrxtfK+1TvMeuobgrIeXUk=
Subject key identifier: F2:53:B1:D6:95:93:EF:92:FE:75:B1:23:05:4F:BD:4E:07:1B:02:B8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 750AFD2D4957529FCC292D4C76E53DBFDBDE0398
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:32:20 +0000
ROA not before: Fri 30 Oct 2026 12:27:20 +0000
ROA not after: Fri 29 Oct 2027 12:32:20 +0000
asID: 47583
IP address blocks: 85.209.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:0a:fd:2d:49:57:52:9f:cc:29:2d:4c:76:e5:3d:bf:db:de:03:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:27:20 2026 GMT
Not After : Oct 29 12:32:20 2027 GMT
Subject: CN=F253B1D69593EF92FE75B123054FBD4E071B02B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:6d:79:bf:3b:51:e9:70:fe:06:b3:16:8e:
8c:25:c8:a6:62:78:de:f6:a2:31:1e:1f:a5:99:1f:
33:1d:dc:6b:19:74:68:57:03:29:3c:03:c4:11:d2:
73:fe:b0:3b:31:71:79:a3:35:a4:2b:b9:3e:ec:c4:
25:a2:b2:cc:b9:1f:cb:80:3a:ef:64:e6:ad:06:11:
7c:12:58:e5:25:79:99:fa:15:58:76:d2:ab:ce:28:
bf:ff:12:30:d9:05:b7:03:4a:53:47:77:df:00:07:
6d:40:5c:6f:2e:04:7b:cd:71:03:39:9a:26:94:88:
7d:05:ec:56:b8:d7:10:1e:32:b1:06:a7:6c:7e:a3:
e3:d2:8a:d1:92:37:16:5d:18:3f:6a:e9:2f:7c:fd:
4f:ca:c4:61:63:a0:ea:f9:43:61:ec:bb:c0:6d:e6:
7e:6f:2d:25:fb:42:0e:83:14:bb:c9:dc:d1:c6:cd:
21:6e:2f:ab:d7:b1:5c:ca:ae:d9:d4:bf:46:02:ba:
bd:fe:95:99:1f:f8:2c:03:b0:47:53:3a:07:4c:8b:
1b:26:70:f3:0c:a6:66:41:c2:e5:2b:92:12:d1:51:
5e:df:a9:d8:7f:47:29:23:a4:09:0f:63:c5:32:7b:
36:c4:0c:4a:f7:da:7f:93:b1:50:ea:13:0b:83:ae:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:B1:D6:95:93:EF:92:FE:75:B1:23:05:4F:BD:4E:07:1B:02:B8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.94.0/23
Signature Algorithm: sha256WithRSAEncryption
87:90:86:af:bc:4b:eb:41:22:08:32:2f:e3:19:09:d3:37:06:
38:74:55:f6:8a:36:87:b1:86:a5:81:cf:17:56:3f:d3:2a:30:
83:43:89:eb:6d:a3:e5:08:8c:9a:0d:1a:1d:41:88:ca:4d:a1:
f7:6a:d9:39:f5:36:f7:72:89:6e:06:93:5a:9e:64:16:05:b1:
c9:f3:8c:8e:08:47:8e:3f:26:58:83:92:5e:f8:b0:67:c5:b1:
98:1c:e5:4f:d4:31:72:10:af:b8:90:39:3b:fd:15:c5:21:08:
34:f3:7b:9c:88:28:97:12:61:e9:ce:72:60:bb:0c:e3:89:e1:
29:2e:e7:b1:9f:18:77:c1:16:14:e3:0e:f9:01:7c:b2:b4:3d:
1e:b2:1d:9b:f6:32:35:06:1e:74:d9:b7:b0:f3:46:7d:15:04:
bd:90:14:af:90:cc:3d:55:58:10:74:3b:58:6c:d5:82:4b:d2:
e7:0a:4f:7c:7d:76:e6:05:8e:d7:22:97:e5:c6:d9:75:47:e1:
31:4f:6e:f8:cd:1b:36:35:65:18:4b:9c:53:63:0f:8d:32:15:
40:10:fd:d1:92:dd:13:73:c7:63:78:ee:38:86:4c:c6:3b:11:
c2:f1:85:66:3c:03:eb:1c:af:34:55:54:13:95:d6:ab:79:19:
6e:8f:88:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:41:16 2026 by rpki-client