Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35322e302f32342d3234203d3e20313938373533.roa
File: 37372e37352e35322e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: l2bKCOs61uqHr9Iv085yMFJtD7CsyNn4Xpp0Xzh65fA=
Subject key identifier: 3F:2A:0A:E9:F7:6C:D5:87:CE:0F:14:3F:8C:1F:FD:C9:D8:E7:5B:9A
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 38E0DF090DC4319CCED2FBE043A69145ADBE066E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35322e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:18 +0000
ROA not before: Fri 16 Oct 2026 18:49:18 +0000
ROA not after: Fri 15 Oct 2027 18:54:18 +0000
asID: 198753
IP address blocks: 77.75.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e0:df:09:0d:c4:31:9c:ce:d2:fb:e0:43:a6:91:45:ad:be:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:18 2026 GMT
Not After : Oct 15 18:54:18 2027 GMT
Subject: CN=3F2A0AE9F76CD587CE0F143F8C1FFDC9D8E75B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:3e:23:59:31:d6:dc:29:06:13:df:3a:c8:
40:e4:6e:7d:9f:b6:91:bd:bc:1a:ad:ab:e9:4e:2f:
b7:67:92:55:e3:91:db:b4:c2:19:16:b4:d1:3c:49:
a2:6f:54:13:77:d1:48:40:43:39:bc:05:87:ca:7b:
69:77:4d:e8:7a:84:7d:00:83:a7:99:e8:c0:6d:18:
a6:0d:22:33:c9:1a:20:cd:98:8a:f0:4a:17:f3:3d:
0b:37:d7:d4:01:58:6e:a5:8c:d2:66:fa:ed:03:f4:
44:fd:71:ab:15:39:b5:a0:ae:b7:e7:9a:d9:3b:11:
d4:21:d9:ff:b3:79:f7:9b:74:f2:30:c8:ad:08:98:
85:28:c7:f6:e0:0c:bb:df:6b:a6:03:52:4c:e6:38:
0b:ab:9e:9d:01:53:44:3c:4e:12:39:13:3a:07:f2:
fb:cf:44:c1:d0:a5:92:6f:e4:f8:e0:d2:db:b1:4c:
a3:5a:13:ff:3b:14:ee:9b:c3:f2:d5:66:c9:1b:ad:
56:3a:0e:99:38:d8:0d:0c:7d:61:7b:fb:75:bb:5b:
85:4f:40:89:0f:ea:94:79:c3:08:bf:a6:6a:29:af:
11:aa:df:92:1a:00:d0:03:e1:1f:e9:dd:41:d8:e4:
c2:f3:df:78:5e:ef:93:22:d3:09:dd:a0:b6:c0:9c:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2A:0A:E9:F7:6C:D5:87:CE:0F:14:3F:8C:1F:FD:C9:D8:E7:5B:9A
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35322e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0b:e2:c5:38:f4:fa:1c:3a:c7:e2:4d:84:28:e9:75:52:a4:
10:f0:a5:0d:ed:97:82:1a:5d:b7:1b:0c:55:49:d5:b0:68:c8:
bf:b5:f1:91:10:c5:4e:bb:3a:4c:43:36:34:4b:08:1d:01:66:
5c:fe:84:de:eb:2a:5a:4d:14:a2:58:27:1e:04:f4:c6:b8:2f:
61:ad:2f:18:2f:6b:ea:49:2d:d5:0f:4d:4f:59:a4:fb:d5:2b:
07:33:dd:ec:2d:53:e6:d2:ae:f9:54:85:71:90:21:a6:7f:33:
25:54:ef:12:9c:bb:62:45:17:81:58:f7:11:03:3b:f4:78:cc:
6b:3e:d1:98:9b:87:5c:37:8e:c1:a3:c1:fd:5e:d7:b4:20:ea:
09:6c:a3:6c:4e:65:cf:a9:08:d8:6a:d3:cb:7b:5b:82:c5:e0:
c9:59:b5:db:a3:bc:aa:cc:df:e8:7b:81:17:87:c0:c3:12:d9:
0c:b4:0d:8f:be:0e:17:ea:2e:03:37:93:dd:b8:98:79:3b:8c:
22:70:f7:74:1c:85:9b:42:28:81:d9:38:34:c6:5c:e2:f7:89:
8e:94:0b:34:ff:50:cd:00:2f:f7:b4:f0:a5:9e:72:c5:f2:8b:
57:fd:18:bb:55:fe:85:fa:24:e0:d0:3b:0b:aa:f8:35:82:3b:
de:c9:0e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:05 2026 by rpki-client