Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa
File: 3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa (raw, json)
Hash identifier: 5CdjtZRYnbutA3BKpPju7cbxaX8M66Lp/8wxC1V973w=
Subject key identifier: F9:DB:7A:02:EB:D0:2E:A3:79:3B:9E:0E:EC:6B:29:59:F0:BE:E9:2B
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 62D58F140900A0984AAA7A6CABED123641ABA40A
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 210000
IP address blocks: 177.177.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d5:8f:14:09:00:a0:98:4a:aa:7a:6c:ab:ed:12:36:41:ab:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=F9DB7A02EBD02EA3793B9E0EEC6B2959F0BEE92B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:92:54:5d:2c:4f:8f:10:12:4e:dc:5e:12:
05:f5:54:8d:70:21:22:ab:06:39:08:2a:03:d0:20:
de:b4:3b:f5:9a:56:7c:ef:a1:95:fd:d3:f2:1b:ec:
f0:6a:19:86:6e:20:53:79:17:79:5b:94:c4:a6:e1:
0e:8e:55:10:19:5b:58:75:fe:fb:c1:8d:1d:aa:f1:
e7:8a:79:14:89:f3:30:31:20:2c:7e:a7:23:16:c6:
bd:39:d8:f4:c9:6e:76:3e:7b:49:de:9b:5c:26:72:
88:4e:34:8f:21:f7:76:ee:25:a8:b6:fa:2e:af:12:
8c:61:0b:02:bf:4f:cd:95:fb:8f:76:d4:2c:89:cd:
cc:9b:71:25:e2:b8:59:ac:18:8a:29:44:c0:8a:87:
05:2e:18:80:b9:6f:fc:4e:69:7b:bf:cd:e8:f1:da:
c1:c8:90:ec:0c:a9:74:95:ea:8c:bc:60:66:ba:b2:
fc:42:32:23:61:31:3e:dd:d7:d3:c0:2e:3e:e4:25:
2b:a5:a7:8c:f0:a9:92:35:9c:15:4c:44:50:78:cb:
b9:13:56:fc:bf:de:7d:e5:30:5b:f6:21:d9:49:ab:
81:73:66:8b:4c:27:b4:f1:c9:d8:6b:4e:ec:34:6e:
4b:b3:ec:3c:74:e4:31:02:d5:b0:15:35:52:26:da:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:7A:02:EB:D0:2E:A3:79:3B:9E:0E:EC:6B:29:59:F0:BE:E9:2B
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e37372e302f32342d3234203d3e20323130303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.77.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f3:82:63:7b:05:5b:26:6a:e4:50:f7:d8:f4:b0:82:da:41:
8a:7f:b6:76:e2:30:5f:de:be:4c:f7:33:47:a7:83:f8:a2:c8:
dd:4e:fc:35:12:0c:ec:e6:5b:05:27:92:02:77:c6:d4:8d:9c:
95:da:e2:f2:09:cc:67:82:12:4c:3e:a1:a7:99:65:0f:4f:37:
52:f5:8b:45:26:75:78:bd:c8:50:f9:2d:05:89:be:e7:a7:fa:
0a:60:39:ba:79:7e:71:5c:29:47:06:15:db:eb:57:c5:02:91:
0d:00:df:4e:52:7b:b9:03:d0:77:bb:a4:17:38:4d:51:fa:7e:
aa:2b:3c:ca:09:b9:43:e9:53:8f:92:e8:22:03:39:56:3f:5c:
ff:9e:e0:dc:fd:ac:df:a7:f6:d1:75:53:ac:d8:6a:c1:3d:c1:
d0:4d:57:d6:de:85:2d:7b:e1:d7:b1:5a:10:8d:26:c8:7a:a7:
2a:21:f9:35:b8:31:b3:45:15:e4:e6:59:3e:b7:5b:eb:63:28:
92:0c:ee:a6:fa:03:9a:30:07:e1:fe:90:f2:65:5e:ad:19:89:
31:c1:75:20:2b:bb:6d:09:87:1b:82:cb:13:2b:62:f1:62:57:
ca:09:66:13:25:1a:f5:f5:11:b5:a3:b3:d6:99:a2:90:91:13:
ff:42:e7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:36 2026 by rpki-client