Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e36342e302f31392d3234203d3e203138303436.roa
File: 37382e3130352e36342e302f31392d3234203d3e203138303436.roa (raw, json)
Hash identifier: IUZMWKOrQA1VYbK+PS3c/YCVrlu0B4dqAa549H4PyNM=
Subject key identifier: DA:07:27:E4:B1:83:E9:7B:4F:D4:36:EC:CA:0A:E7:EC:A7:F3:63:A9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 038EB44EB917BF18FB0809123212DF695A0B17D9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e36342e302f31392d3234203d3e203138303436.roa
Signing time: Tue 03 Mar 2026 13:05:01 +0000
ROA not before: Tue 03 Mar 2026 13:00:01 +0000
ROA not after: Tue 02 Mar 2027 13:05:01 +0000
asID: 18046
IP address blocks: 78.105.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8e:b4:4e:b9:17:bf:18:fb:08:09:12:32:12:df:69:5a:0b:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 3 13:00:01 2026 GMT
Not After : Mar 2 13:05:01 2027 GMT
Subject: CN=DA0727E4B183E97B4FD436ECCA0AE7ECA7F363A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:7b:ed:d2:a2:36:90:95:93:f0:69:56:fe:
b5:8e:d5:04:60:5a:e3:67:06:0c:8a:59:26:28:33:
7d:49:a4:fa:35:6c:53:b7:5f:fb:a2:7f:65:de:b9:
8e:58:06:06:e3:29:fa:25:da:a1:f8:0a:4e:1a:7c:
51:19:06:9f:18:d9:f2:9b:02:19:20:35:37:15:b6:
7c:59:39:08:0f:8e:55:2d:19:b3:2a:38:5e:f4:35:
15:9e:90:b1:a7:d0:c5:37:f0:37:07:95:ee:75:8a:
ce:0b:72:67:45:47:cd:e2:9b:e9:ff:df:4b:2f:b6:
48:04:da:1d:82:ba:cc:0f:9a:08:d0:e6:9b:aa:7e:
99:44:c4:f3:cc:f6:af:c8:df:fc:3f:6b:4c:aa:c7:
72:1d:4d:cf:16:64:b1:bf:a9:82:87:66:b1:c5:ce:
f3:34:f6:cf:4e:54:cf:dd:38:29:c1:c7:80:f3:07:
b6:df:06:3a:3a:dd:ae:51:f7:d0:4c:e6:d2:53:d0:
6c:ed:76:4f:38:99:4b:7e:eb:e8:63:fd:36:48:42:
34:6a:16:e5:d3:25:a7:6f:71:0d:57:0c:6d:89:a3:
d8:10:dc:fd:3a:32:b2:23:fa:b0:79:2a:1a:be:a1:
15:4e:6c:22:80:ab:1b:83:38:11:99:4b:49:95:aa:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:27:E4:B1:83:E9:7B:4F:D4:36:EC:CA:0A:E7:EC:A7:F3:63:A9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e36342e302f31392d3234203d3e203138303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.64.0/19
Signature Algorithm: sha256WithRSAEncryption
02:24:ea:e7:e7:cc:74:ec:2a:d7:e3:ab:c2:f4:93:ac:11:75:
6a:18:cc:e8:6e:0d:b9:50:1a:86:fc:ee:de:b5:14:34:37:26:
b8:f9:57:2a:7c:92:3e:82:0d:23:39:6f:8f:9d:a7:9a:bf:c6:
28:59:75:85:9b:78:aa:31:13:b9:46:f6:73:d0:67:88:87:5b:
e3:6a:83:13:c9:cf:b2:c5:2d:0b:eb:44:db:64:ab:3b:f5:d9:
b6:42:76:45:e0:1b:7b:88:02:ac:b3:d2:21:5c:15:9d:de:1a:
c6:b3:9c:36:5b:27:b9:fa:6e:53:64:df:ee:1a:3e:42:3a:eb:
55:ab:c8:e6:68:63:2c:aa:d3:08:3e:ad:90:24:f4:50:6e:2d:
ad:93:8c:57:e9:0b:74:21:f8:50:59:55:26:bd:6c:97:20:bb:
d0:13:48:65:2b:40:81:3c:92:57:92:83:df:3c:12:b4:e5:8d:
2f:64:b3:1e:c1:47:1e:9e:cc:25:29:82:64:18:26:61:56:6b:
ec:13:f0:a5:4b:3a:84:89:e3:cc:27:de:9a:1c:d5:70:ea:29:
bd:ff:79:63:9e:ae:31:19:e5:9f:da:8a:af:eb:93:e3:df:8e:
6a:91:8e:ed:8c:d2:e7:e3:36:68:af:83:c6:1f:d0:2a:53:2a:
1a:78:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:16:37 2026 by rpki-client