Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35342e302f32342d3234203d3e20313938373533.roa
File: 37372e37352e35342e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: gXYIhTb260NJfqoV49Et9RMF+/hd1MXwJmnlFQh+Y0Y=
Subject key identifier: 18:0E:04:D5:73:0E:7A:4D:90:EE:33:3D:5C:2C:74:DB:A7:CB:06:AA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0B744B0DC07F15A95C1C4CE16FCE713304A8DB6F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35342e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:20 +0000
ROA not before: Fri 16 Oct 2026 18:49:20 +0000
ROA not after: Fri 15 Oct 2027 18:54:20 +0000
asID: 198753
IP address blocks: 77.75.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:74:4b:0d:c0:7f:15:a9:5c:1c:4c:e1:6f:ce:71:33:04:a8:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:20 2026 GMT
Not After : Oct 15 18:54:20 2027 GMT
Subject: CN=180E04D5730E7A4D90EE333D5C2C74DBA7CB06AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:97:61:d9:bc:d1:44:ad:25:d1:bb:ef:8b:
56:aa:e2:01:18:70:17:be:36:6c:89:58:e7:a8:d3:
15:38:4c:14:dc:7d:ae:88:29:e6:9e:45:46:5e:52:
99:6a:5c:83:51:75:c0:74:f3:85:4e:f4:b6:72:6d:
46:36:a2:66:1e:c2:9f:56:9b:e4:56:f9:42:ef:52:
44:0e:72:93:6e:33:2a:18:30:3a:99:43:8a:7d:0b:
27:65:76:63:b0:d4:5f:6c:50:c3:ad:3a:ac:f0:57:
ef:63:80:bd:43:ff:31:e8:d2:83:00:01:5f:5e:50:
35:c4:17:7f:62:a7:37:b7:69:7e:5c:b3:04:49:d8:
fe:e9:c5:85:a4:6a:48:74:d3:57:86:e9:f1:f6:f4:
dd:a4:d2:fd:28:50:1c:f8:86:32:dc:c5:67:8e:33:
c6:2a:54:45:6a:52:30:4c:8f:7a:70:7c:a5:03:51:
e6:23:ba:81:7e:94:cf:ff:dc:43:c6:49:ee:16:80:
07:a2:8f:fd:f1:74:16:0b:4d:e2:25:cf:d6:e8:30:
5c:79:2c:25:bd:b7:72:32:e5:19:3e:be:ad:06:82:
96:ad:06:f5:b1:fb:60:8b:46:fb:0c:b2:22:11:94:
e2:ac:e4:8f:ae:33:96:a7:2e:41:ea:fd:84:e7:e4:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:04:D5:73:0E:7A:4D:90:EE:33:3D:5C:2C:74:DB:A7:CB:06:AA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35342e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.54.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f6:59:b4:40:95:ff:4f:28:70:7d:6d:cc:90:e3:e4:4d:9a:
ca:6c:6f:e4:e2:f2:f2:f1:95:42:04:c3:6f:4a:09:5d:ac:56:
00:53:ac:7f:5f:5a:55:2b:75:95:cc:54:d3:38:82:d7:1b:96:
ba:bf:1e:c4:35:d2:40:64:ca:37:c5:03:a4:a3:66:34:d5:43:
b2:96:18:84:f3:51:22:e7:54:eb:3d:55:07:42:eb:92:5e:c3:
54:8c:cd:b3:db:3f:f0:17:cc:4a:96:03:d9:25:74:93:35:cd:
ed:b3:cd:b5:56:d5:bb:4a:53:57:27:9c:54:dc:8e:ec:1c:fd:
af:53:7a:f1:4e:d0:ec:5b:26:08:f2:a2:e2:4f:a6:58:1a:01:
78:16:c1:c7:82:58:ee:cd:f1:ce:9a:46:9e:da:4e:0f:c4:87:
e0:0a:00:c8:fe:44:5c:77:47:d7:be:2b:d3:7b:4b:3c:59:b8:
39:f1:c2:78:47:aa:04:5c:11:06:55:2b:a2:6f:be:e0:e9:05:
63:b4:9e:e4:c5:32:c1:db:34:1f:c6:18:92:b8:37:0b:f3:f8:
6a:87:51:88:2c:66:08:f5:40:a5:bf:7b:cd:8e:08:5f:d9:8e:
a7:2a:6c:95:ca:32:64:7a:bb:04:45:ef:af:8d:c1:82:61:af:
67:54:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:21 2026 by rpki-client