Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
File: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: Ad29mjM+q0Mi7nSWGc3yTODEC+tgDiUNRm3szautHQE=
Subject key identifier: 53:13:98:2D:7E:49:A3:11:93:52:A9:B7:8A:72:57:C9:12:95:74:D9
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 4AF82AFEFBA0B07DE04CE7FACAED93115048A065
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
Signing time: Wed 11 Mar 2026 15:46:48 +0000
ROA not before: Wed 11 Mar 2026 15:41:48 +0000
ROA not after: Wed 10 Mar 2027 15:46:48 +0000
asID: 16509
IP address blocks: 77.83.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f8:2a:fe:fb:a0:b0:7d:e0:4c:e7:fa:ca:ed:93:11:50:48:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 11 15:41:48 2026 GMT
Not After : Mar 10 15:46:48 2027 GMT
Subject: CN=5313982D7E49A3119352A9B78A7257C9129574D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:28:a4:20:18:5a:47:31:af:0e:21:43:78:
12:0a:be:87:d0:3e:da:ae:34:29:64:0f:a4:37:61:
82:95:78:25:15:34:ed:7e:23:22:97:f8:23:63:6a:
f3:b7:1b:52:68:23:97:56:80:27:81:1a:89:d7:88:
95:38:26:ec:0f:24:1e:bf:69:ce:83:5e:6f:c9:60:
55:00:62:02:13:16:e1:c3:6b:45:a6:eb:5e:2e:3c:
97:1b:e0:0f:09:61:47:b0:b9:f1:8d:1e:40:62:2b:
7a:29:aa:ac:87:54:0f:bd:61:01:57:a4:03:2b:a6:
f0:59:69:42:ca:b6:02:05:c1:7c:0e:25:94:1b:6b:
7e:60:a7:f0:83:df:f0:d9:a3:dc:aa:67:3e:66:19:
1d:68:1a:0f:be:77:09:1f:14:26:47:4e:84:ba:c9:
53:9d:50:0f:06:d2:16:36:da:82:70:cb:09:a5:46:
7f:3a:45:6d:d1:68:d6:00:59:47:3e:2f:0b:fe:b9:
09:5f:ad:04:17:fe:12:65:5c:55:c0:70:f0:4c:58:
5b:2b:ee:e4:b6:2c:a5:f8:d7:be:e9:b4:07:66:42:
1c:34:ea:5a:a5:ad:6c:dd:9c:28:15:1b:d7:11:84:
da:e0:37:92:0a:c9:48:9c:f4:53:de:45:4c:6c:9f:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:98:2D:7E:49:A3:11:93:52:A9:B7:8A:72:57:C9:12:95:74:D9
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130372e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.107.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f1:be:68:e4:e1:76:42:ff:20:e6:e6:b3:9f:d4:80:e4:17:
c5:6a:69:4f:0c:4c:9c:b7:6e:47:1a:2f:33:bb:59:1e:d1:d2:
b7:58:7a:95:06:c9:07:fd:61:dc:5f:e1:a6:e5:f3:d9:bc:6f:
db:53:4d:b9:03:41:0c:f4:34:1d:a1:3f:a4:64:73:f6:81:43:
2f:3f:56:e6:41:b2:a9:81:81:1c:6c:db:2c:df:8a:76:fe:90:
43:a7:66:da:64:1b:7f:14:a4:43:07:ad:eb:14:a7:97:a7:49:
f3:0c:6b:72:9e:0b:a6:de:42:47:47:62:92:19:09:94:64:fd:
2a:df:a1:be:36:ad:fd:86:9d:5a:99:5a:02:d7:14:f7:56:fe:
f6:f9:a5:c1:c8:26:3f:ca:30:b5:67:84:89:9f:f4:83:97:22:
b8:37:37:de:b7:7a:d3:b1:28:66:34:07:b1:46:cd:00:bc:8b:
5a:c1:1d:a1:74:33:06:76:29:5f:c2:9f:20:cd:a5:3d:2d:84:
da:2d:b6:71:e4:eb:a4:4f:62:da:00:bc:07:e8:25:49:b8:81:
91:a2:0f:5c:ff:0b:17:63:b1:eb:2a:4d:1d:30:3e:26:21:9c:
b3:9b:c8:57:0c:ff:38:20:58:67:bc:9a:cf:3e:e5:b5:1c:c6:
4f:a7:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:34 2026 by rpki-client