Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e20313439353133.roa
File: 37372e38312e38302e302f32332d3234203d3e20313439353133.roa (raw, json)
Hash identifier: r4rgRdmHxL6zUIjUUToF3HErC6iHTpIj4UU/NY+IAwk=
Subject key identifier: 30:66:61:24:72:E1:8D:E2:74:31:D5:7E:3C:05:C6:6E:78:AB:03:8E
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 030D7777AC13B6C591B3BD2C24E7F20163AFD6A9
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e20313439353133.roa
Signing time: Wed 21 Oct 2026 07:43:05 +0000
ROA not before: Wed 21 Oct 2026 07:38:05 +0000
ROA not after: Wed 20 Oct 2027 07:43:05 +0000
asID: 149513
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:0d:77:77:ac:13:b6:c5:91:b3:bd:2c:24:e7:f2:01:63:af:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 21 07:38:05 2026 GMT
Not After : Oct 20 07:43:05 2027 GMT
Subject: CN=3066612472E18DE27431D57E3C05C66E78AB038E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:7a:6b:4d:e9:b0:1b:cc:1d:29:79:27:f9:
1c:27:ef:82:c3:68:79:9a:af:e5:86:14:1a:3d:18:
cf:f7:4d:17:08:ab:f0:95:c2:d3:9d:55:c7:32:87:
a5:b5:11:fb:b8:2a:74:72:ee:8c:ed:8a:50:b8:09:
b5:50:d0:da:06:88:b8:12:c5:5c:0d:db:90:cc:0a:
11:e7:bb:a8:67:fe:af:1c:95:c1:69:db:5d:4c:53:
d6:14:f7:97:2b:ff:e2:bf:dd:62:b8:2a:34:b2:d1:
b8:2c:c5:28:90:fa:b8:7e:30:cd:6f:92:7c:cf:6e:
34:ee:4e:24:ae:d6:33:04:34:f2:4a:3a:c1:b6:6e:
d5:fe:7e:92:3b:4e:31:60:a9:6c:94:30:b1:55:62:
aa:7a:4a:2f:c7:60:d8:ac:c3:dc:fa:4d:3e:60:c8:
3f:b3:91:9b:b6:a5:fe:ec:ed:c0:24:5b:f0:0b:47:
2f:b1:80:d0:ee:61:42:ce:d1:9c:b0:04:7f:00:af:
74:c4:a6:5b:9c:43:76:43:af:05:ae:ee:92:ca:58:
27:1d:9b:de:7e:af:30:d0:ee:51:90:dd:fb:20:9b:
d9:78:12:9e:8e:3d:92:ee:b0:1c:72:09:92:a4:30:
0e:15:3d:4a:d8:67:19:75:39:6e:ae:b0:9b:3a:0c:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:61:24:72:E1:8D:E2:74:31:D5:7E:3C:05:C6:6E:78:AB:03:8E
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e20313439353133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
91:56:1b:32:b6:50:b5:03:01:1c:b6:2f:05:97:c4:46:88:0e:
18:d5:78:57:f7:dd:09:9c:68:61:32:2d:45:54:b3:ac:2b:7a:
e3:c7:01:6b:a8:5e:5c:75:c5:7f:94:56:af:a3:71:04:2a:6c:
69:b9:6c:34:ea:94:9b:d6:30:27:f4:73:7f:7b:b3:49:9c:8b:
3c:18:86:99:7e:f0:c6:3a:43:30:61:91:bd:09:8d:e5:28:92:
d5:e5:fe:68:a4:4e:ec:17:db:03:5c:b6:44:5e:46:10:90:24:
fc:72:bf:29:79:9d:43:ae:0e:16:d8:23:8a:eb:f1:02:37:77:
53:3c:aa:5a:8a:bc:55:dd:22:cf:43:b1:a6:cf:2a:36:72:70:
4d:df:ab:1c:92:c1:ef:73:4a:29:04:b1:73:3f:8f:aa:1a:49:
1c:fd:29:0f:bb:23:cd:1d:f9:fa:19:28:31:1f:04:82:df:ca:
19:9d:1e:8b:b3:d7:39:51:12:7a:bd:94:06:41:c9:51:05:6e:
13:00:39:89:cd:e0:ee:ae:e9:24:26:98:a0:35:77:b5:ed:4b:
f8:e8:0e:f7:fe:f9:c4:75:ea:5c:af:57:fd:25:b0:4b:93:47:
4c:41:69:3f:07:4a:1f:e4:5e:10:80:2f:e2:33:da:ea:63:5f:
5a:26:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 15:12:49 2026 by rpki-client