Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32342d3234203d3e20323134393631.roa
File: 37372e37332e32302e302f32342d3234203d3e20323134393631.roa (raw, json)
Hash identifier: kh+BnJ/AlbL766vDmT4IM+ogZ52fCRWl2NW9wLxRXjw=
Subject key identifier: 0E:B8:0C:20:A9:5C:03:49:7C:35:26:AC:40:F5:15:A7:48:56:44:38
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D5FC8836728783C75CC4FB895DB8140E6031265
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32342d3234203d3e20323134393631.roa
Signing time: Tue 06 Oct 2026 18:56:22 +0000
ROA not before: Tue 06 Oct 2026 18:51:22 +0000
ROA not after: Tue 05 Oct 2027 18:56:22 +0000
asID: 214961
IP address blocks: 77.73.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 15:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5f:c8:83:67:28:78:3c:75:cc:4f:b8:95:db:81:40:e6:03:12:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 6 18:51:22 2026 GMT
Not After : Oct 5 18:56:22 2027 GMT
Subject: CN=0EB80C20A95C03497C3526AC40F515A748564438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:99:6f:24:79:03:b6:07:a5:82:12:40:66:
d1:55:b4:c7:84:56:42:e2:3a:97:47:ad:6f:fd:e1:
7b:89:97:1a:63:64:ea:48:c0:48:ec:64:2c:05:b9:
0f:30:37:34:1c:27:37:0b:f3:3c:b8:14:72:17:8e:
85:8e:3e:ee:ee:f1:f8:96:5e:35:8f:c8:96:d9:0c:
5c:f3:08:1b:09:11:a6:ca:c0:59:6f:9c:e3:95:5c:
9b:28:87:fc:14:a4:13:d4:29:43:0e:8f:6f:83:c1:
51:49:6c:cc:c3:d6:23:81:a1:df:e9:94:03:1a:3a:
35:6a:db:bc:d2:63:f8:5f:8b:bf:22:ab:9a:79:86:
94:65:fd:d6:b2:bd:7c:8b:30:16:91:86:22:c2:e9:
20:a5:11:2b:73:7a:e0:9f:95:34:b9:5a:d0:5d:e1:
94:1b:76:22:9e:e3:aa:23:a2:fd:35:36:e8:36:4a:
05:e6:e6:f9:86:6a:2f:6a:19:f5:08:94:1a:46:46:
de:17:16:b1:9d:1a:ee:de:a1:6c:bc:dc:46:99:f3:
85:36:52:3e:26:94:94:97:f5:3b:08:39:92:e5:ee:
5b:0c:68:fc:4b:38:d9:12:bc:da:ac:3a:73:3c:d5:
ce:25:7a:fc:6e:da:e2:fe:3e:ba:3a:bd:d4:f6:e5:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:0C:20:A9:5C:03:49:7C:35:26:AC:40:F5:15:A7:48:56:44:38
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32342d3234203d3e20323134393631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.20.0/24
Signature Algorithm: sha256WithRSAEncryption
54:50:15:5c:f4:68:d6:d8:f6:fa:ae:ff:0e:01:3b:f4:7a:be:
28:91:07:b3:8e:ed:d8:98:db:4d:f5:f1:b0:f8:eb:96:3b:94:
b1:d8:da:dc:a9:be:2b:f3:c2:6f:0f:7c:82:5d:6e:6d:f5:58:
a7:e7:73:9a:fe:a6:92:08:f1:e9:00:87:8a:11:46:5d:e1:ab:
bf:ca:75:4a:11:fe:89:f8:19:b5:9b:95:5a:c6:d3:5f:0a:19:
0f:36:d3:23:17:9a:a7:fb:4f:47:e6:96:bc:31:75:fb:d5:21:
bf:c8:b8:fd:d7:bc:42:da:af:4a:59:74:b2:f3:b2:18:34:9f:
51:1d:8f:71:07:24:7b:59:bd:9b:bf:b8:36:b5:44:22:85:b4:
d8:78:94:21:51:cb:4a:8f:2f:62:60:69:19:81:55:31:79:b0:
eb:53:af:00:f9:30:f0:1f:eb:b9:33:fa:74:69:4c:ae:bc:85:
eb:0d:f8:d1:05:56:0b:88:85:25:5e:de:da:b1:0e:82:0a:ff:
cc:cd:36:46:83:bf:c7:26:65:0d:8f:d8:03:9d:7f:92:ed:bc:
b5:b7:9b:65:f5:4d:b6:cf:b6:22:c1:11:aa:ca:10:58:e2:46:
74:cb:e3:41:c1:67:40:4c:26:d8:61:51:8b:41:aa:22:6f:4f:
3f:43:c5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:24 2026 by rpki-client