Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35352e302f32342d3234203d3e20313938373533.roa
File: 37372e37352e35352e302f32342d3234203d3e20313938373533.roa (raw, json)
Hash identifier: /xQwHTCzDL8+8CWlHWdG+GggkqSwtXktCTGUPe8igsg=
Subject key identifier: 13:CA:C5:0F:71:2F:B4:40:13:34:E3:5F:62:91:24:21:A5:49:FC:22
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1B57BAC73119E1ACAC9593C554959CE515E5A79D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35352e302f32342d3234203d3e20313938373533.roa
Signing time: Fri 16 Oct 2026 18:54:21 +0000
ROA not before: Fri 16 Oct 2026 18:49:21 +0000
ROA not after: Fri 15 Oct 2027 18:54:21 +0000
asID: 198753
IP address blocks: 77.75.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:57:ba:c7:31:19:e1:ac:ac:95:93:c5:54:95:9c:e5:15:e5:a7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 16 18:49:21 2026 GMT
Not After : Oct 15 18:54:21 2027 GMT
Subject: CN=13CAC50F712FB4401334E35F62912421A549FC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:29:75:c4:ba:00:b3:01:57:ca:69:75:a5:
1c:49:ac:05:20:fb:a6:c1:67:99:88:61:1f:af:87:
c6:1f:b3:1e:72:20:e1:44:cd:a6:3b:57:f1:3f:d2:
ec:18:7d:f1:94:cd:49:41:e0:68:cc:5b:45:5a:e8:
a1:67:fe:a6:c5:dc:b7:42:a3:52:f7:b7:31:e8:bc:
a6:f4:30:49:4b:a8:38:27:84:81:01:0c:5e:6a:d5:
17:b5:d3:30:04:a6:e3:82:ba:27:79:92:3c:44:0d:
5d:b6:06:69:0f:a5:86:4f:83:e2:42:70:2d:a5:58:
43:ad:13:28:bf:af:eb:03:c9:8f:77:b5:e1:db:18:
a0:7a:19:1f:98:8a:0b:c1:0c:dc:1f:e5:4d:70:b1:
43:4b:9e:dc:5d:28:a7:51:62:bc:fc:41:ea:b3:5f:
69:57:20:34:85:db:21:44:f3:d7:56:5b:a4:41:e2:
c0:e4:87:44:2d:dd:9a:a1:25:d9:c9:9b:5f:28:23:
2a:dc:91:71:ea:18:70:9d:26:21:da:3b:f1:eb:35:
5b:02:09:82:56:b9:13:ed:83:0d:c8:1c:1e:c5:1b:
81:05:49:21:d4:20:bb:fb:83:8b:fa:5a:f0:db:ef:
50:27:b6:2a:c8:a5:07:9e:e2:f8:3d:dd:ff:c3:94:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:C5:0F:71:2F:B4:40:13:34:E3:5F:62:91:24:21:A5:49:FC:22
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37372e37352e35352e302f32342d3234203d3e20313938373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.55.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9a:d3:14:fa:0e:a8:c7:24:61:9c:03:ff:a5:72:e8:20:7a:
89:4b:e5:7e:45:1d:3b:f6:af:97:c1:78:51:ee:22:70:0c:9e:
32:a8:6e:57:b6:07:a8:37:4a:f8:c2:b8:32:aa:22:29:cf:fc:
c7:e8:fb:18:7f:36:66:c0:2f:61:ee:10:fc:04:60:73:46:22:
53:d8:9e:c4:fd:b4:09:52:14:66:ce:64:90:de:58:f6:2f:4f:
ce:9d:39:5a:9a:b3:d3:d3:32:04:4b:8b:1e:28:1d:29:bb:e3:
fe:a2:cf:b7:3b:b0:85:64:ab:bd:d8:e7:49:fa:48:1d:cf:89:
3d:37:6f:cc:eb:dd:78:14:f1:fd:3c:f4:2b:5a:c6:32:ac:14:
a8:35:07:3f:b2:34:d1:2e:b3:21:5f:87:e4:c0:03:dc:9b:7c:
62:2c:d9:4d:f4:61:e7:63:a5:56:5e:bc:4f:2c:92:37:b3:00:
b2:05:aa:ae:ee:21:be:d9:62:63:62:2d:02:4a:56:88:db:8e:
1e:41:10:f5:56:d5:6b:da:e3:10:0a:51:9e:b2:51:19:fa:2c:
cd:37:82:51:ce:c2:9d:2c:88:f0:34:40:c7:55:6a:cc:ce:c0:
cb:65:61:36:27:30:67:da:5f:06:79:ac:ae:90:36:86:03:c2:
7d:9e:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:06 2026 by rpki-client