Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e20313734.roa
File: 37382e33312e3235312e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: dEJiuWMacSg1GlPxkPHnAlTiIg4CamhV4IFFFIP9vEQ=
Subject key identifier: D8:3B:58:00:74:D5:6D:DD:0B:01:CE:25:9F:60:65:E3:A8:79:86:FA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 18D70603B9466BC29AFA8899D1A1D6F1B1E43CE5
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e20313734.roa
Signing time: Fri 25 Sep 2026 09:29:24 +0000
ROA not before: Fri 25 Sep 2026 09:24:24 +0000
ROA not after: Fri 24 Sep 2027 09:29:24 +0000
asID: 174
IP address blocks: 78.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d7:06:03:b9:46:6b:c2:9a:fa:88:99:d1:a1:d6:f1:b1:e4:3c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Sep 25 09:24:24 2026 GMT
Not After : Sep 24 09:29:24 2027 GMT
Subject: CN=D83B580074D56DDD0B01CE259F6065E3A87986FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:ff:a5:8b:92:1c:ec:b8:64:5b:1b:c4:9a:
17:e8:c8:52:77:8f:36:7b:51:bd:03:44:5c:86:bd:
58:c8:2f:9a:ea:69:ee:1a:14:27:80:04:18:85:53:
78:59:27:b0:a9:60:b1:13:ac:14:b2:32:a9:a3:4e:
39:19:87:e1:6a:f7:b6:34:45:a5:b6:ee:74:f9:29:
c8:86:4c:2b:96:1f:9e:d3:d5:62:d1:66:ac:99:94:
12:39:57:13:c5:fd:c0:28:18:cb:15:c2:98:6d:0c:
ce:6c:55:8a:a8:0d:7f:eb:31:4c:a6:50:f1:bf:22:
12:2d:57:46:47:c2:51:5d:b0:77:1e:3e:3b:cc:8e:
7f:cb:e4:58:9e:8a:2c:08:0e:87:fe:16:30:37:c5:
f1:78:af:b9:bf:bc:ad:c5:8e:28:bc:2f:4e:60:e1:
47:b2:2c:c0:82:f9:ce:c8:43:1d:b8:7a:df:4e:28:
cd:eb:2b:f0:ee:04:63:b0:bb:e7:81:5e:3e:7c:74:
ac:ee:1b:d1:f0:00:e2:08:f2:d9:e4:e7:46:fa:e3:
18:3d:80:42:19:e6:82:e0:41:07:93:fe:e3:37:6a:
13:0e:78:12:71:07:2d:42:b3:ff:e2:58:0a:55:83:
99:07:84:d9:29:83:41:eb:fb:40:02:da:88:49:3d:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:58:00:74:D5:6D:DD:0B:01:CE:25:9F:60:65:E3:A8:79:86:FA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
58:6e:b6:b2:65:48:a4:5c:c3:80:e2:7f:30:68:bb:02:13:2e:
6e:ca:a8:24:a7:43:e7:60:1c:c1:f1:02:ad:69:65:bf:e7:f8:
ba:41:52:3a:ed:86:92:83:a6:5d:85:63:c2:e9:64:77:11:67:
d4:b0:1c:56:26:a7:cb:47:50:14:ef:59:f5:f4:1f:53:da:74:
1c:d1:e8:a7:90:c5:13:5b:d6:93:f2:ef:3e:08:31:00:3f:1a:
01:20:15:6c:6d:21:2d:cf:93:d2:82:34:ca:c7:64:a1:45:69:
0f:59:87:f0:5c:c3:bc:98:6b:35:dc:6c:2f:4f:8f:7f:1c:8a:
3f:71:b4:90:1c:0d:04:f5:6b:03:5e:ab:07:87:52:73:10:5b:
29:f6:1a:88:a9:50:83:41:23:47:a1:16:50:13:86:4f:3c:e1:
e7:0d:70:25:42:84:3c:ee:42:b8:5e:ce:64:f9:48:dd:75:d3:
cd:39:20:52:08:31:be:b6:e1:fe:97:a8:ce:93:9b:df:fa:42:
32:93:f7:70:2e:90:45:2c:9d:16:51:eb:fe:6d:bf:e9:ed:ee:
20:1c:28:de:a9:f6:40:7e:6c:df:47:bb:07:c6:1e:46:b6:11:
64:87:aa:6a:c8:a6:e8:7a:77:ef:3c:79:5b:22:0d:0b:1a:ab:
a2:18:da:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:57 2026 by rpki-client