Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e20333939363431.roa
File: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (raw, json)
Hash identifier: 12VqqOdLZaAJa3aHa+Cq0IgL9Ra+dgjtL5I1Sa/ga7w=
Subject key identifier: 4D:96:9F:76:D4:8E:8E:22:5F:D7:DA:BB:82:B6:46:2C:AB:1D:96:C0
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 01FAB99D593CEEE390FABE48924664513FABA475
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e20333939363431.roa
Signing time: Fri 07 Aug 2026 21:49:21 +0000
ROA not before: Fri 07 Aug 2026 21:44:21 +0000
ROA not after: Fri 06 Aug 2027 21:49:21 +0000
asID: 399641
IP address blocks: 77.81.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 05:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fa:b9:9d:59:3c:ee:e3:90:fa:be:48:92:46:64:51:3f:ab:a4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 7 21:44:21 2026 GMT
Not After : Aug 6 21:49:21 2027 GMT
Subject: CN=4D969F76D48E8E225FD7DABB82B6462CAB1D96C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:3c:ed:bd:a3:91:ab:ff:6e:c2:a4:88:09:
28:86:41:04:b6:84:9a:74:62:e4:98:8d:b0:22:b1:
c3:9a:28:9c:20:98:58:be:04:b2:42:31:9b:f2:c4:
3b:7f:31:bb:13:4b:24:d8:7a:58:12:e3:b2:43:65:
e8:a4:59:18:9d:f4:56:a5:90:24:3d:a3:fe:3a:94:
7a:bc:43:4e:b3:da:7c:8c:5e:fd:c2:73:8d:f6:f0:
4f:cb:4c:37:a8:f4:ec:fb:2e:4a:dc:d9:39:6b:98:
bf:b6:87:fb:72:1c:ba:6d:39:b8:66:73:bc:76:0c:
68:c7:4d:0b:e2:b6:8d:7e:86:75:14:0e:04:14:ed:
0e:4f:37:39:b8:c5:f3:69:e9:66:66:0c:b1:2a:08:
5e:6b:1f:37:33:77:a1:2e:f2:64:68:30:41:17:5b:
05:2e:81:0e:7f:11:49:94:73:01:b3:9d:c1:bc:a8:
70:f3:5a:28:6c:33:68:c8:f0:49:d5:17:2c:37:2b:
2a:40:79:77:7b:1a:ac:4a:3f:08:4e:a6:0d:03:2c:
85:e4:3c:9c:fe:cd:c8:72:74:0b:37:65:af:19:96:
97:ab:34:2b:9b:e3:5c:fe:95:54:16:22:9c:1f:84:
4e:7c:65:e4:36:9f:c4:6d:6a:22:1e:1e:ce:1a:6d:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:96:9F:76:D4:8E:8E:22:5F:D7:DA:BB:82:B6:46:2C:AB:1D:96:C0
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133372e302f32342d3234203d3e20333939363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4a:fa:c2:59:c4:6b:5f:de:fb:45:bd:90:1e:d4:b3:95:a0:
d2:0e:65:d1:03:db:f9:90:82:60:3b:60:af:45:89:25:86:69:
ca:3b:36:fb:21:7a:7a:f4:96:bc:27:25:51:13:a9:43:60:14:
72:03:25:bc:f0:8c:6c:9c:3a:57:2b:b7:53:e3:10:52:94:94:
6c:27:84:7a:d0:dd:dd:4c:06:e4:83:b6:00:61:6e:97:3b:0b:
0f:e5:cc:32:11:36:26:c3:9a:2b:76:fe:a8:ff:b6:dd:67:9b:
d6:c1:72:cb:73:7b:3b:eb:93:be:c9:b3:e8:9b:79:49:91:b2:
d6:b2:8f:3c:90:0c:40:48:bd:bc:62:1a:e2:15:ca:74:67:f6:
d5:f9:28:e2:2c:b6:b3:d3:2a:8d:23:f6:36:59:65:17:e5:a0:
de:36:2f:b2:76:9f:c1:3e:f5:70:e0:c8:b3:5b:8c:98:d7:02:
71:8e:0f:c5:f9:6d:21:c5:dc:99:28:62:69:43:b8:6b:4d:87:
55:ed:61:87:24:90:a7:88:0a:d0:4b:3d:af:70:18:61:46:9b:
30:08:7e:15:67:cd:d2:04:0b:cc:a1:b5:06:24:f5:44:d6:98:
21:4f:52:e7:50:8a:07:5e:16:8e:c1:a1:5c:2d:a1:9e:5a:5c:
14:ab:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:08:17 2026 by rpki-client