Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e2039333034.roa
File: 37382e33312e3234382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: uBPL02Spjj+/S+xyuM+Hr+asKEMDqdG51JpA2eSMsy4=
Subject key identifier: 29:CD:A8:1C:3F:26:58:7A:64:4A:06:E0:5F:BB:21:ED:96:56:E0:CB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 05DC2307F9F922CB2CD2BD07102D677B27693463
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e2039333034.roa
Signing time: Thu 26 Mar 2026 14:52:33 +0000
ROA not before: Thu 26 Mar 2026 14:47:33 +0000
ROA not after: Thu 25 Mar 2027 14:52:33 +0000
asID: 9304
IP address blocks: 78.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:dc:23:07:f9:f9:22:cb:2c:d2:bd:07:10:2d:67:7b:27:69:34:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Mar 26 14:47:33 2026 GMT
Not After : Mar 25 14:52:33 2027 GMT
Subject: CN=29CDA81C3F26587A644A06E05FBB21ED9656E0CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:2e:f3:95:ba:45:4f:f4:2e:21:8a:ce:13:
cb:d8:ca:c5:62:44:9c:13:2e:70:b0:06:96:73:07:
fe:5a:00:7f:cd:48:41:02:a0:87:30:71:de:8a:e2:
69:3f:2c:63:ba:9a:75:e9:34:db:ec:3b:76:b8:e6:
2f:55:45:4c:db:0a:05:16:48:43:bb:69:7b:17:de:
99:18:20:96:a4:24:a0:61:f5:f3:c9:ca:ca:0b:4d:
1a:b7:5d:f0:e1:11:40:5e:90:de:25:20:b7:62:d5:
c5:04:61:27:6d:0a:51:ff:30:8e:2e:3f:fa:d5:ef:
3a:8e:c8:ca:09:96:11:12:4b:95:23:3f:65:a2:36:
98:2f:00:ad:1b:27:23:f1:18:0f:90:ba:cb:0b:40:
c5:87:11:1d:7f:4c:f5:94:cd:4b:ae:be:45:3d:06:
20:ae:e7:bd:d5:7d:7d:b1:9f:17:01:29:cf:3c:8c:
9f:db:84:bc:b6:ca:b1:e6:28:a6:c9:c4:ac:d2:6e:
c7:c1:1d:0c:4c:07:6e:f6:16:3c:ce:ee:9a:c2:8e:
c0:91:02:dc:56:a3:e0:a0:0c:62:ea:92:91:1e:ac:
70:3e:3a:86:52:35:e0:ec:cf:90:77:0f:ce:e6:a0:
81:a9:9e:ca:68:db:4e:94:12:3c:6d:e7:fa:d8:77:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CD:A8:1C:3F:26:58:7A:64:4A:06:E0:5F:BB:21:ED:96:56:E0:CB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:db:74:91:9e:66:13:36:9d:15:bc:70:15:14:13:32:22:45:
a3:c4:02:02:b6:ea:5c:65:d1:e2:0f:3b:4a:cd:f5:f1:a5:24:
a4:d7:a9:3e:f8:57:dd:d2:38:79:15:93:ef:92:17:6b:fa:3e:
18:58:23:8a:a1:bf:43:ed:00:84:8b:fe:9c:76:79:34:1e:2c:
e7:ed:6c:f1:94:30:aa:a5:78:72:93:b6:47:66:ae:a0:ff:e2:
bb:f1:a0:04:19:ae:b8:c6:ae:71:c6:ef:78:27:bd:d2:c3:54:
f6:20:65:54:f4:f0:c1:90:f2:94:b2:68:dc:61:fa:9c:e0:19:
9d:07:8b:cc:9e:03:99:d6:8c:91:32:fe:0c:2b:c0:d1:14:25:
a0:53:4d:45:c2:8e:f4:a3:5a:b3:33:6c:51:85:8f:7d:ce:f6:
af:ac:df:77:8b:18:8f:1c:6e:3c:6d:73:50:28:4f:81:82:64:
3a:90:e6:44:a1:76:3d:9f:92:6b:e0:69:2c:e7:9a:89:9e:76:
a9:ed:aa:d1:63:42:f6:22:15:5d:c5:1f:08:56:7a:55:95:89:
74:43:ed:f3:cf:da:e3:4b:0f:29:c0:d7:ff:36:cd:6a:3c:19:
ab:77:0c:93:a5:f6:57:d7:49:25:38:e2:29:ea:26:3f:34:fd:
1d:43:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:10:31 2026 by rpki-client