Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20323132323338.roa
File: 37372e3234332e38372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: ZUQ77rDPZ/NFVh1DXumYsdXY9h+Hf6DngrWYMfsj/dE=
Subject key identifier: 91:B8:5F:91:D4:50:A8:20:9F:86:4A:EC:70:99:B8:87:B7:37:66:FD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39FAC1289FF1765E68C551809B97443A67D50494
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:24 +0000
ROA not before: Thu 30 Jul 2026 09:22:24 +0000
ROA not after: Thu 29 Jul 2027 09:27:24 +0000
asID: 212238
IP address blocks: 77.243.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:fa:c1:28:9f:f1:76:5e:68:c5:51:80:9b:97:44:3a:67:d5:04:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 30 09:22:24 2026 GMT
Not After : Jul 29 09:27:24 2027 GMT
Subject: CN=91B85F91D450A8209F864AEC7099B887B73766FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:8e:ec:48:9c:a7:a4:4d:8d:fc:cd:d6:10:
de:80:33:d1:53:fe:20:27:86:6c:f1:b5:db:ef:23:
d1:0e:b7:28:3f:a3:b0:c8:ae:71:59:27:84:25:d7:
57:c7:b0:85:e8:ff:da:0a:20:e5:83:e7:6a:ca:7d:
d2:6b:9e:9d:32:09:0c:97:60:00:e9:38:93:35:31:
e9:39:65:67:6f:ec:f4:35:e4:d2:69:4c:f6:f0:17:
25:cd:9f:5f:e4:af:db:fa:5d:c8:86:a0:3e:98:4a:
93:54:bf:32:19:bc:19:86:4e:68:89:77:a1:5f:bf:
0c:3a:c9:31:90:99:73:70:60:dd:f0:68:03:aa:6f:
f2:3e:3c:de:a2:2f:d1:0e:08:83:08:02:44:fa:ad:
6a:c3:c1:a9:71:a4:76:db:4f:b1:c9:d3:e6:05:84:
92:b7:cb:13:c8:c4:ff:e8:a4:96:d2:46:90:0c:ca:
26:12:1f:eb:8f:1e:1e:0b:8a:e0:04:0a:05:5e:2f:
56:6c:08:e6:cb:64:c3:05:15:e1:3f:da:0c:ae:90:
d7:68:14:d0:e6:da:76:41:33:13:34:df:b8:ff:9a:
b7:8a:16:c8:57:70:71:5f:54:f2:df:6f:3b:e8:80:
72:e9:32:b7:d2:e3:24:07:13:8c:db:c1:84:f9:5d:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:5F:91:D4:50:A8:20:9F:86:4A:EC:70:99:B8:87:B7:37:66:FD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f3:ca:38:3b:cf:37:6d:0c:d4:13:74:1b:29:d5:0c:78:18:
9b:df:7a:99:b5:0c:4b:2a:37:f5:55:bb:aa:c5:68:95:19:f6:
c9:a5:07:31:2f:ab:03:c4:ad:fa:84:69:c7:33:43:bf:2f:5f:
c2:80:00:76:78:b2:80:4e:2c:2a:fc:f6:a5:1e:e8:b9:26:31:
7b:9b:ff:2a:e8:96:a9:49:8a:eb:21:e2:7a:04:08:5a:37:58:
92:66:d9:67:7e:07:fe:0e:e5:88:e4:f6:00:74:42:e9:c4:03:
f8:b1:6f:bf:41:4d:39:b8:4d:5c:94:15:36:92:e7:82:8d:cf:
fd:65:53:21:be:43:be:46:c8:5d:7a:f7:bb:f1:ab:16:2d:65:
02:8c:48:53:3e:d4:67:4e:bf:fa:dc:fc:ec:84:04:88:46:d5:
b6:d0:55:ea:c4:20:b6:14:8d:81:2b:12:bf:57:d9:1e:4f:6f:
f7:6b:7a:d3:8e:f5:0b:cd:36:93:b9:26:de:1b:a3:1e:57:8e:
db:17:98:b8:8a:d0:73:89:ef:b6:4c:f5:e0:0c:4a:4f:f4:54:
47:a5:41:71:14:70:aa:27:c4:97:a2:c6:2c:ec:ea:59:d7:cb:
1f:9d:6d:01:f3:db:fc:f9:31:2e:79:db:1e:1a:59:55:6a:52:
08:07:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:22 2026 by rpki-client