Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20343032323336.roa
File: 37372e38312e37392e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier: M2dmsDaCkf9RNR7OAA/qGmqHIFBJr7jscLVBUWk8SoM=
Subject key identifier: E3:20:B2:E7:C4:3F:14:11:7D:83:AC:7D:3F:58:4E:E8:27:84:22:A7
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 7810DAD616E34D6882FD276AC79EBB1E1AAB2F2E
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20343032323336.roa
Signing time: Mon 06 Jul 2026 18:22:17 +0000
ROA not before: Mon 06 Jul 2026 18:17:17 +0000
ROA not after: Mon 05 Jul 2027 18:22:17 +0000
asID: 402236
IP address blocks: 77.81.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:10:da:d6:16:e3:4d:68:82:fd:27:6a:c7:9e:bb:1e:1a:ab:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 6 18:17:17 2026 GMT
Not After : Jul 5 18:22:17 2027 GMT
Subject: CN=E320B2E7C43F14117D83AC7D3F584EE8278422A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:c7:13:73:e1:48:58:05:65:b9:22:c1:10:
c1:8e:20:b5:85:d7:51:07:df:14:54:b1:b7:52:fd:
ae:23:ad:e3:e2:24:45:cb:27:ee:cd:91:79:3e:93:
f7:61:b6:89:ae:76:ac:98:4f:c0:d7:6d:5a:3f:77:
77:54:14:e5:55:17:b6:48:f6:d3:54:83:38:4e:04:
cd:a8:ad:40:c8:f4:86:b1:d7:41:29:63:d1:f7:32:
31:22:0b:55:77:f3:62:85:17:7f:85:00:e1:d7:cb:
29:92:e4:0f:e6:a9:a5:ad:d1:0b:8b:07:48:c5:57:
50:13:20:6d:35:b3:d6:69:3a:f8:5d:25:ac:b7:a8:
f8:06:cc:71:e1:79:31:f9:1a:5d:99:dc:62:54:7e:
b6:24:92:73:52:56:54:eb:ec:a9:ac:b5:86:a9:84:
dc:ee:a9:7d:3e:e9:4d:a6:e6:3f:2b:a9:aa:cd:31:
0a:ba:4c:21:d1:f8:e8:09:ce:a0:26:18:0e:0d:03:
f8:69:84:06:c3:93:ab:8c:47:d6:5f:99:e9:ed:f1:
ac:cd:31:59:03:7c:8f:d6:5a:2a:1b:e9:ba:3c:2c:
fb:a6:65:97:2e:d2:14:54:39:e9:c0:fa:97:45:92:
46:17:b5:f5:94:ba:3f:5d:12:48:19:3f:b3:cf:fe:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:B2:E7:C4:3F:14:11:7D:83:AC:7D:3F:58:4E:E8:27:84:22:A7
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20343032323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0/24
Signature Algorithm: sha256WithRSAEncryption
98:72:14:63:9a:5f:3e:6f:51:ec:52:43:d8:06:b9:bb:3d:70:
7c:11:c3:96:fe:87:34:b3:f0:68:93:2f:34:79:b4:54:e3:c6:
7c:64:5b:c9:2a:04:5a:73:99:f0:a8:2e:1f:66:bc:ad:9f:e2:
c7:8e:2b:24:50:d2:45:2d:0f:83:c5:f5:86:f3:29:cf:e3:f6:
b5:94:c4:74:1f:0f:b5:cb:53:e6:73:f7:27:b4:9e:4f:9b:cf:
9e:d0:a0:cd:96:e1:5a:6f:40:6f:f5:2f:49:c1:0e:3f:70:7b:
ca:04:f7:26:6b:a9:e8:dc:c9:4f:62:c5:05:56:a9:b5:1c:b1:
30:b2:f8:1f:1c:f3:42:35:11:f7:ba:c7:45:e9:b3:18:1a:9d:
3e:c8:46:d9:ff:0b:4a:2a:6f:4c:2e:4e:31:d3:d6:47:3c:ef:
fe:46:21:a6:b8:eb:f8:a6:aa:f3:a0:cf:12:bf:5c:f9:c6:94:
42:39:73:b7:4f:c8:27:3a:ff:13:0f:8a:61:29:ca:05:87:ae:
b7:35:09:60:71:d7:42:c7:0e:21:06:37:4c:e5:73:c2:12:71:
93:b6:03:45:be:60:de:ba:50:e0:de:af:3f:8c:fb:97:ea:80:
0f:2b:30:e8:15:42:0a:ea:cf:e7:50:70:b5:aa:0b:43:bf:49:
69:12:e7:77
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeBDa1hbjTWiC/Sdqx567HhqrLy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNjA3MDYxODE3MTdaFw0yNzA3MDUxODIyMTdaMDMxMTAvBgNV
BAMTKEUzMjBCMkU3QzQzRjE0MTE3RDgzQUM3RDNGNTg0RUU4Mjc4NDIyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwP8cTc+FIWAVluSLBEMGOILWF
11EH3xRUsbdS/a4jrePiJEXLJ+7NkXk+k/dhtomudqyYT8DXbVo/d3dUFOVVF7ZI
9tNUgzhOBM2orUDI9Iax10EpY9H3MjEiC1V382KFF3+FAOHXyymS5A/mqaWt0QuL
B0jFV1ATIG01s9ZpOvhdJay3qPgGzHHheTH5Gl2Z3GJUfrYkknNSVlTr7KmstYap
hNzuqX0+6U2m5j8rqarNMQq6TCHR+OgJzqAmGA4NA/hphAbDk6uMR9Zfment8azN
MVkDfI/WWiob6bo8LPumZZcu0hRUOenA+pdFkkYXtfWUuj9dEkgZP7PP/iZHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU4yCy58Q/FBF9g6x9P1hO6CeEIqcwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzczNzJlMzgzMTJlMzczOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1R
TzANBgkqhkiG9w0BAQsFAAOCAQEAmHIUY5pfPm9R7FJD2Aa5uz1wfBHDlv6HNLPw
aJMvNHm0VOPGfGRbySoEWnOZ8KguH2a8rZ/ix44rJFDSRS0Pg8X1hvMpz+P2tZTE
dB8PtctT5nP3J7SeT5vPntCgzZbhWm9Ab/UvScEOP3B7ygT3Jmup6NzJT2LFBVap
tRyxMLL4HxzzQjUR97rHRemzGBqdPshG2f8LSipvTC5OMdPWRzzv/kYhprjr+Kaq
86DPEr9c+caUQjlzt0/IJzr/Ew+KYSnKBYeutzUJYHHXQscOIQY3TOVzwhJxk7YD
Rb5g3rpQ4N6vP4z7l+qADysw6BVCCurP51BwtaoLQ79JaRLndw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:23:14 2026 by rpki-client