Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203136323736.roa
File: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: cSfuwk5t8sYaMQRs6xIWOg8/5JnKDK/SFBVUi2XUWiI=
Subject key identifier: EF:F1:EE:AD:03:50:07:71:A8:3B:C6:5D:95:B5:0E:2C:C8:0C:EF:0D
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 4123E45BEEEE85AE86B60A80DAE1004F5584B9F1
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203136323736.roa
Signing time: Sun 09 Aug 2026 00:49:21 +0000
ROA not before: Sun 09 Aug 2026 00:44:21 +0000
ROA not after: Sun 08 Aug 2027 00:49:21 +0000
asID: 16276
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 05:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:23:e4:5b:ee:ee:85:ae:86:b6:0a:80:da:e1:00:4f:55:84:b9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Aug 9 00:44:21 2026 GMT
Not After : Aug 8 00:49:21 2027 GMT
Subject: CN=EFF1EEAD03500771A83BC65D95B50E2CC80CEF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:e3:0d:10:ce:84:15:97:48:58:91:fe:8b:
82:2a:a5:1d:2d:b7:1b:c3:21:17:b4:83:cd:58:e5:
bf:9b:dd:51:78:0e:ff:1c:eb:74:41:01:13:dd:af:
c7:a9:fd:01:09:a1:7f:8d:1a:e7:fc:a8:79:b6:0f:
63:23:53:89:c1:94:06:f3:2c:a1:e4:51:5d:82:d5:
ab:64:54:7a:b1:fa:d9:cf:7a:32:57:15:c5:ea:7c:
1a:52:9c:06:76:29:88:99:eb:d1:b1:26:45:c1:83:
1f:2c:94:17:94:7a:b2:25:9c:e0:cf:71:d7:d1:4f:
60:b1:75:b8:3f:77:33:81:fc:15:65:82:55:f9:4f:
a6:71:9f:a1:ee:39:24:4c:5b:4a:57:c9:2b:17:2a:
95:e2:16:62:aa:a9:16:c3:5e:e8:53:10:a9:08:88:
9c:92:82:1f:6a:a6:25:c3:d2:f4:bf:28:8a:c9:23:
6d:f4:db:ab:e5:b7:c3:7a:fd:79:b1:d7:fc:1c:97:
ed:41:52:03:eb:9e:64:77:5e:34:c5:54:b7:2b:68:
07:a9:a9:39:0e:82:6d:43:04:9d:ca:83:f2:d0:a4:
9a:9f:c0:df:99:e7:c8:7c:77:f8:67:f9:44:98:b1:
51:fe:4d:5d:07:e0:d3:46:48:c1:49:2e:9a:ae:75:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:EE:AD:03:50:07:71:A8:3B:C6:5D:95:B5:0E:2C:C8:0C:EF:0D
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5d:09:bd:6f:be:cb:9d:b7:d4:55:20:ac:9c:99:11:38:4b:
44:07:d8:ef:27:c9:02:0a:34:43:f1:4b:be:ed:fb:02:94:e0:
fb:46:6b:dc:9e:51:e2:8c:7f:cb:00:9f:7b:63:63:6d:ca:5e:
cd:52:ff:18:56:42:6f:53:b1:17:c1:88:d3:61:2f:38:83:ec:
c1:f5:e9:6e:7a:3b:39:c3:f8:a2:65:a2:f7:cf:e6:a4:47:d6:
3d:61:0e:01:e2:60:e5:58:01:b9:13:1e:2e:aa:05:f3:ad:ac:
de:ec:c8:36:a7:95:f6:a5:8b:79:16:92:b6:fe:e4:6b:8e:1a:
6f:1c:39:63:80:cb:48:7b:84:28:c2:75:e6:8c:d5:37:02:23:
71:02:8d:26:5e:e3:e5:79:95:2a:fb:6d:5e:4c:f3:4f:2a:0f:
dd:97:ff:1d:02:22:1f:0d:ce:77:96:bb:be:2c:1c:66:99:af:
1f:4d:02:81:25:57:5e:d9:10:8f:2e:ab:0e:ff:7d:a2:3c:3c:
6a:63:c0:f8:bc:4b:b3:57:b9:b0:05:fb:16:43:7a:8d:65:0c:
b0:11:c7:69:5e:27:09:1a:be:71:8d:5a:b5:1e:5f:19:3e:34:
e8:9c:ab:4e:af:75:89:32:94:11:da:cf:06:b3:74:4b:72:22:
3a:87:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:02:40 2026 by rpki-client