Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e2032393134.roa
File: 37372e38312e38302e302f32332d3234203d3e2032393134.roa (raw, json)
Hash identifier: Uk2rPFeOxHUpPmDQA270+UBZgX6MkiuroznsTL3MTAQ=
Subject key identifier: D2:13:01:AA:25:D9:C7:B2:43:A0:17:EE:00:6A:A4:C8:33:43:D9:4A
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 7BE6256671AF339FA7D2EE3F734668B442330631
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e2032393134.roa
Signing time: Tue 13 Oct 2026 09:26:23 +0000
ROA not before: Tue 13 Oct 2026 09:21:23 +0000
ROA not after: Tue 12 Oct 2027 09:26:23 +0000
asID: 2914
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 00:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e6:25:66:71:af:33:9f:a7:d2:ee:3f:73:46:68:b4:42:33:06:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 13 09:21:23 2026 GMT
Not After : Oct 12 09:26:23 2027 GMT
Subject: CN=D21301AA25D9C7B243A017EE006AA4C83343D94A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:73:a1:76:db:9f:a6:ee:79:4b:fd:7a:2e:
11:16:ab:21:30:97:ac:73:4d:43:40:05:d1:c1:e6:
38:ad:17:32:fd:fb:d2:d3:41:0b:ac:5d:63:16:80:
e3:ab:1c:76:4e:e1:06:b7:b9:fb:0d:e4:15:54:67:
6d:54:76:1f:c7:f1:a9:2e:b3:a7:64:50:77:a1:df:
61:89:86:00:72:79:32:ed:57:c1:ef:4f:d1:01:b9:
4d:c9:2e:27:5f:af:79:aa:f5:b2:7a:69:82:04:17:
b4:a1:7e:ff:f5:94:d1:87:3d:17:d9:21:66:fe:87:
f2:e9:49:e8:09:24:97:27:03:61:5b:4a:cf:b1:1a:
d7:2e:52:5f:cb:29:87:92:d7:d6:f2:9a:e9:85:22:
e6:39:51:2e:00:42:3d:d3:45:50:47:5e:34:01:70:
a8:52:52:65:88:7f:9a:57:3d:a6:c5:e8:75:77:fc:
5a:b6:9a:c6:df:1f:09:c1:45:09:4b:9c:55:08:76:
57:09:30:b4:93:02:41:0a:0a:e2:02:76:aa:71:43:
8f:a9:14:9c:32:0b:d9:06:eb:71:0b:af:3e:9a:06:
0b:9d:3a:1d:e6:01:5c:f4:37:f6:5c:ca:6b:10:94:
bf:7a:5d:b9:92:50:97:2c:8c:c9:4a:a9:ed:5d:30:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:01:AA:25:D9:C7:B2:43:A0:17:EE:00:6A:A4:C8:33:43:D9:4A
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:f5:ef:55:3a:ce:c5:e4:ba:7d:fe:e6:e5:f2:1e:cb:1e:88:
29:08:68:a6:98:af:57:e1:46:3e:6e:b6:0a:59:e1:fe:18:58:
b2:56:b0:9e:aa:12:4d:bb:75:96:fb:c0:94:66:da:b1:ce:1a:
59:ec:fc:54:ac:6c:68:42:57:e1:e5:3c:91:73:48:7e:9d:c4:
9b:de:ca:67:18:71:6b:6a:b5:c3:8a:f7:c1:aa:05:82:4d:f2:
73:11:30:81:d3:81:8f:0b:24:b1:38:5c:14:b0:9a:dd:f3:8e:
de:fc:2b:6f:8f:2b:5f:2f:6b:7f:27:f1:d7:54:63:7f:5c:b2:
1f:a8:3b:fa:47:5a:17:d2:ec:c7:61:95:a9:84:85:86:28:ab:
65:fa:3b:bb:cb:ea:ae:4c:3d:0a:75:74:dc:fc:59:4c:0d:98:
8d:28:a0:b4:76:b3:81:ac:62:e8:33:d8:ad:a5:04:1e:28:3b:
80:91:59:68:f2:a5:2d:9f:27:67:f4:49:94:23:b7:54:7d:8f:
7d:83:a4:b1:ba:c9:71:f3:75:4e:92:f5:01:98:62:6a:55:58:
f2:b2:e9:a3:95:44:64:99:2d:08:f8:58:d8:95:e6:fa:a1:1b:
1a:f0:9d:7e:2f:08:ee:08:1e:e2:7a:4b:44:c6:fd:bb:22:5f:
28:3e:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:52 2026 by rpki-client