Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e2036303739.roa
File: 37372e38312e37392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: CJIevw70hXk1ZbxNXn1s8ukayMRMzgKM7Ytd97RL5pI=
Subject key identifier: 52:47:75:B6:01:C8:A4:90:55:98:FE:85:AB:A9:90:C2:D7:99:7A:C3
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 79BEBD6CF3BB3C0B1251F12D318D0B8E4A33CEC0
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e2036303739.roa
Signing time: Mon 06 Jul 2026 18:22:17 +0000
ROA not before: Mon 06 Jul 2026 18:17:17 +0000
ROA not after: Mon 05 Jul 2027 18:22:17 +0000
asID: 6079
IP address blocks: 77.81.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:be:bd:6c:f3:bb:3c:0b:12:51:f1:2d:31:8d:0b:8e:4a:33:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jul 6 18:17:17 2026 GMT
Not After : Jul 5 18:22:17 2027 GMT
Subject: CN=524775B601C8A4905598FE85ABA990C2D7997AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:07:99:db:e6:35:16:a9:8e:59:dc:f0:bf:
31:59:bd:27:93:b8:bf:33:e8:e5:f0:b1:98:87:b5:
7d:c7:3a:0c:3c:09:fb:39:4f:26:4c:a9:36:9a:46:
e5:7a:7b:83:9e:d9:c2:d8:35:82:fd:5c:81:bc:d0:
2b:9b:d2:09:41:22:c9:d7:ea:a4:20:b6:d4:95:78:
1d:c7:0f:2d:98:f9:17:40:99:14:f2:2b:f0:8a:97:
71:af:16:c7:b2:50:95:09:0c:cb:6c:76:09:a7:05:
c6:8f:91:d3:64:8d:30:e9:76:0f:62:98:17:1a:44:
fc:ac:17:91:64:03:7c:8f:73:43:88:1a:bf:43:b9:
de:ca:60:1d:3c:64:ad:df:ca:d1:d4:6e:cb:6d:3f:
72:ce:c5:b8:aa:77:89:5c:a0:65:7d:37:67:93:a3:
60:89:66:4b:ee:c3:b2:5d:13:7c:89:a2:d0:b4:85:
9b:1b:30:a8:e3:ab:76:10:25:e0:f7:87:83:15:ac:
6d:f8:4c:5b:97:4c:e0:84:e6:91:5f:1d:a2:54:60:
60:8b:31:d5:d6:79:80:4c:c0:3e:2e:ba:f7:c1:15:
20:fe:4c:3f:63:de:28:e4:3a:9d:3b:14:f9:2d:81:
3d:da:dc:a6:31:23:2d:1c:bf:c3:f1:e6:21:26:b7:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:47:75:B6:01:C8:A4:90:55:98:FE:85:AB:A9:90:C2:D7:99:7A:C3
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c8:e0:d1:3f:42:0d:86:2f:d6:89:fe:89:88:6d:c6:06:7d:
d2:c8:ea:76:dd:0e:1d:7b:e2:d8:db:e4:5f:b0:a9:65:7a:a0:
e9:a0:2b:5d:62:62:a5:53:bf:ac:1a:31:32:30:f7:3a:46:62:
d0:c6:b7:15:63:f3:41:b2:61:a7:fd:0d:54:d6:19:51:28:e4:
1e:2d:72:f0:22:de:bb:a2:2a:aa:74:90:48:64:b1:03:6a:33:
1a:61:fb:f2:0b:32:a7:fc:3a:0b:93:22:c3:d3:2d:ea:8e:0e:
cf:50:39:c9:9d:82:d7:59:18:b5:b4:e5:e5:86:63:08:3e:17:
95:4b:c1:cd:28:8b:30:18:86:f1:d0:9c:2a:a0:ab:81:e6:9b:
fa:10:17:50:95:f9:23:e0:38:1d:6a:45:ff:c2:e8:4b:f9:bb:
25:5a:d8:58:fa:5c:d6:8c:76:99:11:2d:b3:bd:a8:b0:b5:cc:
02:0b:a6:05:be:cc:98:b8:95:db:6e:3a:84:f8:a2:4a:e8:33:
6a:c9:be:fd:eb:e6:4f:0a:12:ec:87:84:4e:0a:55:b9:f5:64:
78:7a:01:e8:ff:fa:df:55:7b:d9:ef:8b:4b:f8:e1:b1:f8:2a:
0c:51:41:54:f9:63:4a:07:1e:2d:d3:a2:7b:41:f2:43:6c:0c:
a2:9a:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:36:27 2026 by rpki-client