Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35332e302f32342d3234203d3e20313938373533.roa
File: 37372e37352e35332e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: VAS6meDjitmb6CKSzosqA48gY4UMWmaDEM4VJ6zWyyc=
Subject key identifier: FC:FC:10:F4:AA:77:DE:2F:52:13:67:CF:02:6E:56:17:C3:15:96:DE
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 470A1F8005BA9281085A56865E1FC058427350AC
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35332e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:19 +0000
ROA not before: Fri 16 Oct 2026 18:49:19 +0000
ROA not after: Fri 15 Oct 2027 18:54:19 +0000
asID: 198753
IP address blocks: 77.75.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0a:1f:80:05:ba:92:81:08:5a:56:86:5e:1f:c0:58:42:73:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:19 2026 GMT
Not After : Oct 15 18:54:19 2027 GMT
Subject: CN=FCFC10F4AA77DE2F521367CF026E5617C31596DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:16:c2:cf:01:95:f9:b7:b7:90:b6:4f:76:
16:c7:99:cb:b3:1d:37:f1:69:e1:d7:f1:90:ea:0e:
18:47:91:11:1d:6e:e9:60:d5:53:2c:af:e7:b4:64:
54:88:f5:1b:97:97:20:e3:91:20:ec:c1:36:9f:6a:
9c:70:cb:bb:11:9a:04:3b:e3:97:43:9f:27:0f:ff:
2e:57:3c:ac:38:5a:f6:9d:47:e2:06:59:fb:9c:11:
bb:d7:60:b5:59:f8:a6:4a:0f:8f:3d:48:98:a6:c4:
a9:b8:61:29:86:86:79:78:2d:f5:60:03:7f:00:5a:
82:ce:b3:a4:35:04:d6:dc:d0:a5:cd:6d:4a:42:3a:
a7:d3:d1:3d:3a:25:2d:4d:ed:ac:13:cf:c7:b7:a2:
a2:ec:85:3c:83:ae:51:31:7a:cc:f3:82:0c:93:e9:
28:77:d3:c9:ea:e4:90:3a:56:4a:37:11:f9:07:bb:
fb:c0:4d:41:28:91:80:96:3b:4c:a8:ac:d2:2e:0e:
71:2a:75:e2:ac:4d:0e:84:a5:f2:4b:5e:bb:e9:b8:
48:f3:45:33:15:f1:85:4c:de:c1:ca:65:f4:27:c0:
54:f9:67:3c:71:be:74:5f:31:7a:ad:de:a4:b7:75:
9f:5a:84:df:78:fe:1a:5f:7f:f2:8b:db:3c:d0:f8:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FC:10:F4:AA:77:DE:2F:52:13:67:CF:02:6E:56:17:C3:15:96:DE
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35332e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
69:19:4b:10:06:c5:f2:c6:10:65:a6:f8:00:83:1f:40:19:35:
3b:4c:3c:f2:e2:3b:22:ec:e6:d2:e6:a8:2f:21:83:00:d8:13:
19:bd:ae:e6:54:42:b1:6a:61:88:96:70:f3:d7:32:da:41:73:
fc:8c:81:74:25:d0:0a:1e:0c:f2:2c:8a:3b:c0:d9:61:a4:c6:
ce:7f:a0:f7:fa:e0:7a:0c:a5:46:b6:76:b1:67:d4:5b:d5:a0:
1f:a5:dc:c9:6b:32:27:8a:ae:c8:3e:a6:8c:35:a4:e1:8c:71:
9a:75:7d:61:b3:d4:13:d1:cc:20:2c:c4:85:ab:df:cc:46:3b:
7f:a1:7f:b5:2a:a5:25:c1:3e:c0:80:e8:40:26:f6:d2:97:d5:
0b:d7:7c:f9:39:61:62:66:bb:a0:02:31:24:79:5c:4e:06:51:
19:b0:b9:76:bc:78:66:ed:3f:fd:6c:7a:27:22:66:66:58:e8:
fd:05:39:8c:9b:b1:10:3c:c1:f8:d0:15:25:df:f8:c5:d1:ce:
6e:48:52:e8:48:5e:e6:49:5c:db:17:b4:52:02:ab:0b:f6:30:
ec:75:de:26:50:33:3c:df:5f:f2:7f:3d:ad:f9:af:47:d9:23:
3b:f5:82:17:7a:5b:52:07:ad:51:b9:0b:b5:f5:99:de:a9:e4:
48:5b:bf:19
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIURwofgAW6koEIWlaGXh/AWEJzUKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNjEwMTYxODQ5MTlaFw0yNzEwMTUxODU0MTlaMDMxMTAvBgNV
BAMTKEZDRkMxMEY0QUE3N0RFMkY1MjEzNjdDRjAyNkU1NjE3QzMxNTk2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGhbCzwGV+be3kLZPdhbHmcuz
HTfxaeHX8ZDqDhhHkREdbulg1VMsr+e0ZFSI9RuXlyDjkSDswTafapxwy7sRmgQ7
45dDnycP/y5XPKw4WvadR+IGWfucEbvXYLVZ+KZKD489SJimxKm4YSmGhnl4LfVg
A38AWoLOs6Q1BNbc0KXNbUpCOqfT0T06JS1N7awTz8e3oqLshTyDrlExeszzggyT
6Sh308nq5JA6Vko3EfkHu/vATUEokYCWO0yorNIuDnEqdeKsTQ6EpfJLXrvpuEjz
RTMV8YVM3sHKZfQnwFT5ZzxxvnRfMXqt3qS3dZ9ahN94/hpff/KL2zzQ+EbfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/PwQ9Kp33i9SE2fPAm5WF8MVlt4wHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczNzJlMzczNTJlMzUzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM3MzUzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1L
NTANBgkqhkiG9w0BAQsFAAOCAQEAaRlLEAbF8sYQZab4AIMfQBk1O0w88uI7Iuzm
0uaoLyGDANgTGb2u5lRCsWphiJZw89cy2kFz/IyBdCXQCh4M8iyKO8DZYaTGzn+g
9/rgegylRrZ2sWfUW9WgH6XcyWsyJ4quyD6mjDWk4YxxmnV9YbPUE9HMICzEhavf
zEY7f6F/tSqlJcE+wIDoQCb20pfVC9d8+TlhYma7oAIxJHlcTgZRGbC5drx4Zu0/
/Wx6JyJmZljo/QU5jJuxEDzB+NAVJd/4xdHObkhS6Ehe5klc2xe0UgKrC/Yw7HXe
JlAzPN9f8n89rfmvR9kjO/WCF3pbUgetUbkLtfWZ3qnkSFu/GQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:04 2026 by rpki-client