Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e203437363930.roa
File: 37382e33312e3235312e302f32342d3234203d3e203437363930.roa (raw, json)
Hash identifier: psL93QPe/nZimoglwQnsnWoOt8NF99BFzYAh8bjtSgU=
Subject key identifier: 34:4A:21:B7:34:E7:F4:8D:D5:54:1D:FF:B5:C7:B5:0E:13:EB:F4:D4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5A7F5866A6E350C912C8F44B93E8B44E19D089BF
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e203437363930.roa
Signing time: Thu 29 Oct 2026 15:05:48 +0000
ROA not before: Thu 29 Oct 2026 15:00:48 +0000
ROA not after: Thu 28 Oct 2027 15:05:48 +0000
asID: 47690
IP address blocks: 78.31.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:7f:58:66:a6:e3:50:c9:12:c8:f4:4b:93:e8:b4:4e:19:d0:89:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 29 15:00:48 2026 GMT
Not After : Oct 28 15:05:48 2027 GMT
Subject: CN=344A21B734E7F48DD5541DFFB5C7B50E13EBF4D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:4f:0a:48:d6:8f:c4:8a:73:90:ac:06:ed:
01:84:f3:2f:82:bf:5a:e1:cc:33:ee:1a:88:28:89:
f4:43:26:53:ba:63:7c:88:9a:33:26:7f:fa:b3:80:
ba:82:ca:86:dd:61:fd:fe:3b:e0:f8:82:e7:30:5a:
7a:be:53:6b:f6:49:69:7f:dd:ac:46:83:33:9e:32:
0c:a5:d8:58:22:4e:83:be:be:34:c3:f5:2d:cb:01:
7e:e1:fa:38:f6:fb:40:a6:3a:6f:3f:50:c3:06:54:
d7:79:25:16:a8:2c:81:a6:ed:97:ea:45:9f:af:fa:
3b:82:94:be:0d:e8:8e:8c:8c:be:94:a4:8a:d9:c6:
66:6e:48:8c:28:d7:64:34:50:ec:25:ea:7e:8b:52:
67:bb:e6:3c:57:6d:82:0b:a0:2d:fe:49:95:e6:5f:
85:f3:9c:f6:6c:10:ae:ca:75:c9:1e:90:06:17:d5:
37:5d:fa:48:0b:e5:3b:4e:23:79:55:2c:ad:5c:50:
b9:33:fb:df:18:9e:15:3f:e0:cb:da:ae:d5:c1:ae:
f4:97:d1:97:65:d5:a8:f4:1e:d4:fb:97:a6:08:30:
03:6f:b2:26:e6:ea:48:7c:91:a2:5d:39:37:52:33:
0d:cb:1e:d2:1a:55:58:bd:18:71:29:76:05:05:11:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4A:21:B7:34:E7:F4:8D:D5:54:1D:FF:B5:C7:B5:0E:13:EB:F4:D4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3235312e302f32342d3234203d3e203437363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.251.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d2:db:2b:f5:82:e7:fe:8b:47:8a:42:13:78:f7:5b:12:32:
75:ee:1c:f9:31:9a:5b:89:4a:08:4d:1f:6a:f4:3c:60:bc:94:
10:fd:41:9f:b6:ec:1a:b7:ab:d5:0c:23:b1:79:34:90:e7:69:
ba:56:d7:1f:94:2a:83:44:00:25:62:fa:fb:b2:ac:28:4d:af:
a3:cd:83:95:7c:fe:d3:1e:36:1e:a5:40:9d:be:51:30:db:bd:
15:94:d0:9b:c3:07:22:88:ce:4d:ec:59:0e:81:c7:ff:34:0c:
a8:7f:cf:b9:6d:5b:78:22:30:a3:33:c7:97:63:7d:96:bc:d2:
5c:ca:f3:7a:78:ea:45:03:36:1b:3f:87:3d:03:32:db:b2:a4:
44:ed:1b:8a:32:d7:07:c0:0e:83:af:8d:79:00:a5:6f:04:fe:
30:cd:cd:a5:76:74:fe:65:6d:8a:c8:1c:c4:56:49:12:95:30:
be:a7:a8:f3:4d:4e:0d:e8:cd:c6:9b:fb:b1:f2:60:bd:40:be:
97:1c:8b:cf:0e:d4:bd:ab:d3:46:f3:a3:a6:36:9a:7d:d9:54:
3a:60:cc:c4:52:38:cf:20:f2:86:c0:8a:56:ec:91:db:c6:20:
75:9d:34:f2:87:22:21:46:68:f0:2e:b6:c6:17:ac:8e:86:80:
59:36:54:f9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUWn9YZqbjUMkSyPRLk+i0ThnQib8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMjkxNTAwNDhaFw0yNzEwMjgxNTA1NDhaMDMxMTAvBgNV
BAMTKDM0NEEyMUI3MzRFN0Y0OERENTU0MURGRkI1QzdCNTBFMTNFQkY0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhU8KSNaPxIpzkKwG7QGE8y+C
v1rhzDPuGogoifRDJlO6Y3yImjMmf/qzgLqCyobdYf3+O+D4gucwWnq+U2v2SWl/
3axGgzOeMgyl2FgiToO+vjTD9S3LAX7h+jj2+0CmOm8/UMMGVNd5JRaoLIGm7Zfq
RZ+v+juClL4N6I6MjL6UpIrZxmZuSIwo12Q0UOwl6n6LUme75jxXbYILoC3+SZXm
X4XznPZsEK7KdckekAYX1Tdd+kgL5TtOI3lVLK1cULkz+98YnhU/4MvartXBrvSX
0Zdl1aj0HtT7l6YIMANvsibm6kh8kaJdOTdSMw3LHtIaVVi9GHEpdgUFEbUrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUNEohtzTn9I3VVB3/tce1DhPr9NQwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM2MzkzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE4f
+zANBgkqhkiG9w0BAQsFAAOCAQEAIdLbK/WC5/6LR4pCE3j3WxIyde4c+TGaW4lK
CE0favQ8YLyUEP1Bn7bsGrer1QwjsXk0kOdpulbXH5Qqg0QAJWL6+7KsKE2vo82D
lXz+0x42HqVAnb5RMNu9FZTQm8MHIojOTexZDoHH/zQMqH/PuW1beCIwozPHl2N9
lrzSXMrzenjqRQM2Gz+HPQMy27KkRO0bijLXB8AOg6+NeQClbwT+MM3NpXZ0/mVt
isgcxFZJEpUwvqeo801ODejNxpv7sfJgvUC+lxyLzw7UvavTRvOjpjaafdlUOmDM
xFI4zyDyhsCKVuyR28YgdZ008ociIUZo8C62xhesjoaAWTZU+Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:52:16 2026 by rpki-client