Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e203533313037.roa
File: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier: AcCeRuWXsZAydYYXd9AyWbET07pTASLPo8gST4E0/Ik=
Subject key identifier: D8:92:A9:16:19:69:F9:7A:47:4A:42:8A:3D:99:1E:02:C0:A8:C3:0D
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 29277047B093584570C25F37D9A6108A58A758DF
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e203533313037.roa
Signing time: Mon 17 Aug 2026 13:49:30 +0000
ROA not before: Mon 17 Aug 2026 13:44:30 +0000
ROA not after: Mon 16 Aug 2027 13:49:30 +0000
asID: 53107
IP address blocks: 77.83.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:27:70:47:b0:93:58:45:70:c2:5f:37:d9:a6:10:8a:58:a7:58:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Aug 17 13:44:30 2026 GMT
Not After : Aug 16 13:49:30 2027 GMT
Subject: CN=D892A9161969F97A474A428A3D991E02C0A8C30D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:50:c7:4a:fa:0c:1a:66:60:d8:52:04:d7:ea:
0b:7b:13:5a:60:9e:ff:ec:e7:df:bf:ec:ca:8f:61:
99:92:a6:e8:e3:de:84:bc:95:b3:10:9e:5b:06:88:
2e:73:c8:d1:24:ac:93:57:86:22:5f:32:fe:67:97:
65:af:ca:9a:70:73:9d:1d:3f:23:e2:8d:fb:c0:83:
2f:4e:7a:86:67:a8:73:b5:c2:79:71:af:54:ca:6f:
a6:cd:61:a6:26:7a:69:96:05:de:cf:0c:2b:95:a1:
04:53:bb:ef:bf:89:0a:66:34:1b:c3:fd:aa:21:fe:
a7:42:39:92:c0:2b:d0:ea:2f:3f:07:8b:b6:7d:a1:
7c:56:3d:a4:d8:bd:30:ce:7f:7a:15:b3:5a:e6:78:
ad:1b:dc:f7:a4:25:44:9b:ef:c3:84:ac:cb:cd:5d:
bf:92:3f:3c:53:f6:b7:a3:1a:bd:4b:6c:75:91:a9:
8f:7d:48:4e:e2:44:fb:fb:02:42:3e:5e:ed:21:5c:
51:a8:1f:c9:ab:c0:2e:21:84:8d:98:f8:5d:52:ac:
2e:a0:92:7d:31:3d:39:ff:87:5b:34:9b:71:4a:13:
54:2b:fa:40:8e:52:dd:12:d2:9e:cd:27:22:ba:15:
cb:fb:c8:57:34:6f:d8:14:28:a8:2e:9f:c7:7d:e9:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:A9:16:19:69:F9:7A:47:4A:42:8A:3D:99:1E:02:C0:A8:C3:0D
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235322e302f32342d3234203d3e203533313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.252.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1f:5d:b7:de:a7:60:43:99:fb:be:ba:23:68:55:ca:fc:ab:
e1:7f:6f:98:76:2c:65:3d:71:57:8e:a6:66:86:3d:f0:f8:7f:
a9:92:0e:73:e3:70:4a:b3:01:7b:1d:85:4b:df:37:32:33:f5:
6c:43:05:e7:bd:eb:89:63:1a:38:1e:c4:7c:bf:7f:95:b0:ec:
46:05:49:84:3b:3f:38:44:5d:d1:56:19:4c:ee:c7:be:23:10:
67:be:c2:1b:3e:87:b2:71:29:6c:92:15:6d:f8:ea:a4:75:87:
d9:de:e7:94:cf:0b:fe:6b:e0:f0:1c:99:3b:e1:31:de:c4:d5:
3e:07:28:e1:50:44:e8:36:62:37:a6:54:a7:0f:e7:41:d8:8b:
e3:7f:bc:16:3d:6a:ea:30:1c:2a:1e:7c:19:d2:5c:e4:06:59:
b2:1b:88:32:ca:3e:28:1c:93:da:3c:96:dc:3c:90:82:e0:3f:
7f:9e:19:8e:e2:1c:db:ff:46:e2:aa:70:16:de:a6:4f:b8:55:
8e:d1:53:e4:3c:47:24:a5:23:f0:bf:84:7e:7a:03:fe:b3:9a:
b1:e8:cd:55:09:dc:b5:32:dd:76:e9:7b:a6:d5:b4:35:5a:3b:
68:d4:0f:2f:e8:a6:90:46:c2:7e:f8:f7:48:2a:73:4a:7b:32:
48:86:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:19 2026 by rpki-client