Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203134363138.roa
File: 37372e38332e3130372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: NyRbAn4btzAUXiMwIDBDH4V5u88bduNDtrYfWjiHYws=
Subject key identifier: E0:39:77:47:54:C8:55:43:F9:CC:DD:83:AC:42:6B:FB:28:A2:A7:3E
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 263A14F1D7390EEC6D9E0A15E1072DFF87D267F1
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203134363138.roa
Signing time: Wed 11 Mar 2026 15:46:48 +0000
ROA not before: Wed 11 Mar 2026 15:41:48 +0000
ROA not after: Wed 10 Mar 2027 15:46:48 +0000
asID: 14618
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3a:14:f1:d7:39:0e:ec:6d:9e:0a:15:e1:07:2d:ff:87:d2:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 11 15:41:48 2026 GMT
Not After : Mar 10 15:46:48 2027 GMT
Subject: CN=E039774754C85543F9CCDD83AC426BFB28A2A73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:c9:10:5c:17:22:6a:7d:1f:d8:48:d4:2f:
72:7f:c1:e7:f0:4a:8b:98:15:b5:25:37:ad:fb:5b:
ab:70:9e:d5:0d:cb:1a:56:c2:9e:4e:b9:16:9f:97:
c7:58:f4:8d:97:ab:d9:ba:43:67:6b:55:f4:85:22:
d7:5d:ae:83:79:00:56:ce:af:e0:e9:f9:14:30:a8:
bf:8f:ec:eb:c3:04:ba:6d:8c:6d:77:6b:9c:8c:fd:
4d:2c:5d:37:df:57:87:e9:7d:0b:33:b7:a9:a9:c3:
be:89:3a:7a:ec:68:ed:a0:2b:6c:4a:d8:f8:33:e1:
52:ae:20:d0:8d:41:7f:8e:c7:23:a4:45:ab:33:91:
5a:20:de:8d:99:25:03:19:5b:dd:e9:34:99:4c:9b:
40:00:12:dd:a1:aa:f5:53:0a:3e:47:c0:fa:1b:cd:
23:63:8c:2b:42:6d:c7:db:e6:02:be:37:37:50:f7:
ef:fd:68:e7:33:1f:f8:26:a2:08:f9:49:1b:77:5e:
cf:d2:7b:08:d0:f9:48:f0:03:dc:3c:6c:d1:10:8d:
44:87:78:f2:10:f0:25:84:fd:24:f1:3b:fc:e8:84:
c4:5a:64:5b:c4:65:33:10:39:e0:ab:f6:7a:eb:98:
71:0f:3f:52:c5:8f:37:39:0a:5c:04:bb:69:1e:8c:
e3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:77:47:54:C8:55:43:F9:CC:DD:83:AC:42:6B:FB:28:A2:A7:3E
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8a:bc:88:a0:dd:ad:61:33:ba:11:95:4d:32:ab:08:d0:74:
25:ad:3c:24:b7:53:93:f3:7f:83:1d:37:30:90:8b:8d:72:1b:
0f:2e:b7:f6:d1:2e:9e:13:7b:35:c9:bc:87:9a:54:3a:b9:81:
65:c0:7d:98:28:e8:e0:73:af:f9:25:4b:82:cd:6c:24:1e:9d:
eb:fb:a3:92:d9:7d:16:9f:a8:1d:fb:83:0c:cd:03:4f:d9:15:
7f:e1:1b:29:e5:fb:e8:c7:24:18:8a:ca:72:c5:0a:c9:ff:36:
a9:09:8c:ab:c9:6e:63:1a:bd:74:c2:b5:32:10:0e:c7:39:65:
85:03:67:0a:4c:cb:d3:b9:59:c8:11:50:ff:e0:9d:42:06:40:
64:61:96:51:8d:91:77:a6:3b:41:10:10:27:2e:3e:ea:81:76:
7d:44:3f:e3:19:11:b1:d1:10:37:41:bd:f8:cb:f8:5f:56:f6:
b7:18:c7:38:11:94:f3:c4:ad:25:c3:12:dc:9c:9a:09:3c:28:
81:16:ec:98:95:ea:16:39:3f:d6:14:79:83:5f:db:72:6c:97:
56:94:72:d9:a9:91:e7:e7:9c:91:bf:6c:94:9b:32:7e:0f:14:
0d:85:0d:8e:95:b6:a9:25:f3:fe:8f:3f:0e:59:44:31:9d:d8:
45:c4:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:05:08 2026 by rpki-client