Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e203633303233.roa
File: 37372e38332e3235342e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: 5CqwgOjFFuFV2UfvvpLNhCLDO+4UZEU9TIi9LDwBTT8=
Subject key identifier: 45:28:5C:62:F3:8A:EC:05:E7:23:14:28:00:C0:F8:30:5A:EC:68:B7
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 1243D0C03EA26CA12EC64B0E0CECA74F2CDA57A2
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e203633303233.roa
Signing time: Mon 30 Jun 2025 16:29:38 +0000
ROA not before: Mon 30 Jun 2025 16:24:38 +0000
ROA not after: Mon 29 Jun 2026 16:29:38 +0000
asID: 63023
IP address blocks: 77.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:43:d0:c0:3e:a2:6c:a1:2e:c6:4b:0e:0c:ec:a7:4f:2c:da:57:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 30 16:24:38 2025 GMT
Not After : Jun 29 16:29:38 2026 GMT
Subject: CN=45285C62F38AEC05E723142800C0F8305AEC68B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:a0:ce:b8:37:c2:7e:a2:df:9f:8a:d5:e5:
a4:6a:83:05:d3:ec:45:bc:9e:8c:54:4e:8f:17:b2:
36:ee:43:1e:f6:4e:60:03:f5:8b:27:6b:19:6c:ab:
16:9f:bb:0b:d3:7f:5f:3f:ff:7f:67:1d:7f:e9:f0:
f8:2e:ca:25:65:64:10:a7:c2:0a:bc:5d:70:de:0d:
9b:29:c1:a4:15:c3:84:fb:47:e7:47:0e:32:c4:da:
62:9b:75:06:89:d2:41:40:b8:ff:8b:82:ba:60:ef:
d2:49:64:75:67:8e:e7:df:71:20:0a:ae:72:66:a7:
f6:a6:1c:e6:29:2f:60:63:62:06:b3:76:62:d3:4c:
ad:6f:1c:f1:88:3d:b1:69:0c:64:5d:ec:00:73:eb:
4a:57:da:f5:4f:4d:54:25:9c:e0:b4:b6:3f:8e:76:
e1:41:86:df:2a:9a:b7:1b:94:73:44:e4:ad:95:cd:
b8:4a:36:86:24:dd:81:cb:e1:2c:70:16:d0:82:84:
d1:f9:f2:e6:58:11:b1:e2:97:b2:13:88:2e:fd:9d:
67:f3:bb:1f:84:b3:e4:81:58:63:28:c1:0d:4a:c5:
f1:24:9b:63:65:20:11:c3:8c:e4:dd:da:cd:83:4b:
4a:cd:88:66:15:10:00:c0:c9:16:3e:a9:b6:c0:d8:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:5C:62:F3:8A:EC:05:E7:23:14:28:00:C0:F8:30:5A:EC:68:B7
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f5:96:b2:e9:ac:59:de:88:f7:9c:94:ae:ae:0d:b8:a3:aa:
2d:7c:49:40:ac:02:d3:80:81:7d:35:de:96:0b:83:1c:6b:20:
70:2b:d1:50:26:09:60:c7:00:a8:b5:ec:f4:93:97:f0:5c:97:
f7:9b:61:06:f7:e4:4c:51:63:1a:c8:18:74:55:9a:f7:53:26:
5f:a3:84:1a:f4:7a:c3:75:3a:ec:da:85:3b:8c:aa:07:77:2c:
24:e1:2d:39:3d:90:b5:dc:f1:8c:e5:51:9d:e3:2c:f2:0f:b0:
70:37:06:17:1d:60:22:cb:37:45:c9:90:22:40:2b:aa:61:0d:
e1:0d:11:90:f4:d0:04:3c:b2:af:7f:40:7e:42:f2:b2:e6:50:
b0:1d:be:e2:a6:ca:29:71:39:1d:3c:49:73:0c:8e:c4:27:d6:
86:cb:d7:80:2e:1c:e6:8d:5d:19:a2:f9:19:16:9f:f6:22:d7:
10:ff:94:25:ae:5e:ad:f3:fd:8f:8d:6a:c1:b2:bd:47:e5:60:
fe:f5:e7:9b:6d:90:d6:0d:f1:e8:f0:0d:17:0e:68:23:5c:56:
8f:a1:f9:38:3c:a1:9a:3d:cd:18:ba:23:e9:31:b6:c5:95:7f:
cb:f8:3e:47:e7:4a:61:cd:3c:23:14:5b:d4:06:d5:fc:d7:6a:
b5:bd:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:45:25 2025 by rpki-client