Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20313334343934.roa
File: 37372e38312e37392e302f32342d3234203d3e20313334343934.roa (raw, json)
Hash identifier: qU6CPFXDKVCng7eqUFr6a/7LI7VlvXbOmSMmzMmB18I=
Subject key identifier: AA:EE:81:81:86:C5:74:BE:8B:8C:80:9C:A6:81:F5:F8:2F:3D:15:B0
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 0F46CBE5E971C6D20252BC10512AC0810B1C650E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20313334343934.roa
Signing time: Wed 28 Oct 2026 13:18:22 +0000
ROA not before: Wed 28 Oct 2026 13:13:22 +0000
ROA not after: Wed 27 Oct 2027 13:18:22 +0000
asID: 134494
IP address blocks: 77.81.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:46:cb:e5:e9:71:c6:d2:02:52:bc:10:51:2a:c0:81:0b:1c:65:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 28 13:13:22 2026 GMT
Not After : Oct 27 13:18:22 2027 GMT
Subject: CN=AAEE818186C574BE8B8C809CA681F5F82F3D15B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:58:66:a2:e2:ff:0f:e4:c2:aa:38:32:59:
64:3c:4c:86:b8:04:6b:df:dd:83:28:d2:20:24:e8:
f2:d6:c1:aa:ae:a7:5f:d2:8c:15:16:4d:8e:d7:59:
69:25:a0:89:26:4c:fc:69:e7:ea:00:16:77:b6:68:
b2:95:89:9c:03:6c:55:08:c3:af:ce:99:02:70:c2:
dc:3a:3e:ae:f8:ac:23:68:dd:e2:b5:57:c5:24:15:
f8:77:0d:14:27:26:54:9b:bd:18:ab:1a:6b:a7:73:
ea:e8:0e:74:94:d8:d1:b7:97:63:8b:12:dd:92:8a:
91:94:a3:8f:56:32:c0:5b:d6:cc:6f:84:39:31:42:
31:3b:9d:8a:d0:02:e2:9e:28:70:2a:08:30:50:1a:
8c:5a:89:cb:ca:63:8d:09:64:8f:af:c6:e2:70:7d:
c9:5e:c6:cc:ea:c7:07:de:de:f3:41:18:16:28:cc:
2a:4e:ff:32:f3:8a:a3:26:67:08:e9:76:5e:5a:db:
98:a9:7d:21:49:79:7b:8a:b8:c4:7c:1a:a2:97:f3:
53:d1:76:78:b2:17:5e:eb:89:8b:0d:9c:2a:94:2c:
72:65:dd:10:0d:5a:19:b3:03:d2:6c:b0:0f:84:5a:
30:21:b7:71:55:2c:24:67:b4:12:52:bf:8e:0f:a4:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:81:81:86:C5:74:BE:8B:8C:80:9C:A6:81:F5:F8:2F:3D:15:B0
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20313334343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0/24
Signature Algorithm: sha256WithRSAEncryption
87:37:1b:6c:d4:15:b1:63:22:40:f8:c0:a9:ec:ee:dc:09:8d:
b1:7e:c5:85:51:61:6b:eb:9a:ee:54:a8:97:92:f1:b2:7b:aa:
2b:25:40:05:8c:6e:13:60:17:82:aa:88:9a:13:cb:68:9b:c0:
7f:dc:8f:da:65:29:34:ae:8c:03:b8:23:70:20:1d:a5:8b:ed:
4e:38:df:25:97:df:f6:03:48:13:38:09:cb:fb:e0:ab:75:dc:
c8:aa:b8:e9:35:fd:14:06:58:61:54:9a:85:55:97:7b:7c:04:
d5:00:84:1b:49:b1:4e:2d:68:da:10:58:c9:2d:2b:e8:a4:b3:
6a:3a:bc:5f:eb:03:97:ea:11:b4:00:91:28:cb:6e:ac:c6:4d:
1b:c8:b2:ba:cb:02:44:7b:66:eb:a4:d9:83:65:64:b2:55:49:
06:ca:8d:48:fe:a3:77:f9:8f:90:f7:95:cd:58:ad:af:e1:8d:
6c:d2:49:8a:06:0d:fa:63:2d:34:80:ed:1a:57:8a:a2:03:12:
83:b3:da:21:1f:38:96:ef:9c:9d:14:56:8e:4f:2c:c2:23:6c:
3b:5a:df:02:d1:15:06:ba:b8:ca:65:4d:4c:26:8b:ee:ba:2b:
e9:f6:fd:35:51:c6:95:51:09:b7:4a:75:15:45:75:5d:6b:55:
61:d7:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:47:52 2026 by rpki-client