Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e2039333034.roa
File: 37372e38312e38302e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: MIApXDH6YOzAFXzKHqvpSjvtem/bVMwfp5Xe6AuGxDk=
Subject key identifier: F6:44:3C:E9:A0:F1:7B:56:8A:75:A0:E0:18:72:20:17:BC:58:97:87
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 55F61745AA3C8BFB61F75F4A0C43D387D53F15ED
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e2039333034.roa
Signing time: Tue 13 Oct 2026 09:26:23 +0000
ROA not before: Tue 13 Oct 2026 09:21:23 +0000
ROA not after: Tue 12 Oct 2027 09:26:23 +0000
asID: 9304
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f6:17:45:aa:3c:8b:fb:61:f7:5f:4a:0c:43:d3:87:d5:3f:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 13 09:21:23 2026 GMT
Not After : Oct 12 09:26:23 2027 GMT
Subject: CN=F6443CE9A0F17B568A75A0E018722017BC589787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:61:df:f1:ed:b0:16:ad:9c:80:ee:78:e4:
07:64:45:b9:b1:11:8d:7d:94:64:a7:46:88:74:12:
b3:90:25:70:ac:df:eb:3b:16:c4:d4:d3:ec:d7:c0:
15:aa:92:05:e2:c1:f0:e1:83:d9:b0:fb:f4:9c:90:
e1:f2:78:95:76:3e:8f:8e:c5:63:9e:97:4f:7c:80:
cb:91:e8:50:c6:a6:50:3c:dc:24:60:b1:13:9f:51:
1f:62:8d:20:a1:a0:bd:4c:ce:f3:b7:39:11:04:11:
64:01:b8:06:43:75:98:38:f9:38:a7:35:3a:81:3f:
1f:97:46:3d:e0:8f:1e:f8:3b:83:aa:01:3f:1c:b8:
15:b8:e6:d8:57:c2:9c:ae:55:6b:81:a1:f5:7c:eb:
41:61:92:f1:c2:1b:fc:9f:3a:e0:b2:6d:0d:22:a4:
71:64:9f:a3:ea:53:18:80:d4:0a:c3:9a:6f:e7:da:
cb:6d:65:a9:2c:5b:cf:28:c4:60:fb:80:41:fd:f1:
cc:44:fc:40:b2:53:c2:56:68:4b:13:30:dc:5d:49:
aa:14:94:17:56:26:03:a6:89:12:04:5e:e5:67:bb:
ff:fe:c5:e6:83:92:8c:dd:d5:fc:18:4c:c0:eb:a6:
50:cc:b3:16:ce:0a:cd:86:54:32:cf:1c:73:c0:31:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:44:3C:E9:A0:F1:7B:56:8A:75:A0:E0:18:72:20:17:BC:58:97:87
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
70:f8:f3:e6:07:3c:86:3d:c1:dd:5e:e9:4e:f7:06:28:97:82:
3c:06:ee:5c:6d:6c:ba:a8:42:b8:68:7e:d4:3d:41:69:1e:8a:
39:d2:80:b4:95:25:8f:b8:c7:52:ae:03:ba:fe:0c:9f:aa:82:
49:43:be:33:81:37:23:99:eb:75:93:cb:20:69:d5:9c:8c:e5:
3a:0f:2a:9a:04:e7:ad:8d:68:15:0c:75:58:60:a7:b2:87:b5:
b2:1b:29:5b:6e:75:64:77:2a:32:59:d9:64:c4:c4:f5:76:f9:
b5:6b:d7:f6:f1:2f:4a:74:96:e9:d4:80:7e:4e:f3:f4:25:d4:
92:ec:c5:47:e3:9c:6b:74:be:1b:0d:2e:7e:c3:c8:a9:e4:bd:
df:d5:10:f8:f2:92:ca:83:cc:3d:e0:ba:22:cb:e2:d7:0f:fd:
6b:5b:dd:f0:6e:ce:fd:5b:aa:73:33:00:51:a5:36:27:99:9d:
56:d8:41:0f:09:44:e5:6c:a5:91:6e:a9:47:97:c0:83:de:bb:
93:c9:47:ea:69:2e:b7:97:e5:41:8a:31:4d:e2:15:79:46:40:
42:2f:3f:d2:df:e1:e7:09:fa:51:19:c2:4b:91:8e:2b:25:38:
79:0b:1b:83:91:19:be:42:81:84:53:e4:fa:a3:a3:4d:66:7a:
fb:bd:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:28 2026 by rpki-client