Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/37372e3234362e3234302e302f32342d3234203d3e2035363530.roa
File: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: dT0B0NOL6yGzF1BXtX0dsOyGoo8+tdfsmPM25BX1nFo=
Subject key identifier: 5B:04:DA:AF:E2:F2:C8:66:03:F3:C5:07:9A:18:C9:62:6B:59:1C:C4
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 7F664F9FABA2757FD4F6A8DBB496E81CCD564D9A
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/37372e3234362e3234302e302f32342d3234203d3e2035363530.roa
Signing time: Thu 26 Feb 2026 15:46:29 +0000
ROA not before: Thu 26 Feb 2026 15:41:29 +0000
ROA not after: Thu 25 Feb 2027 15:46:29 +0000
asID: 5650
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:66:4f:9f:ab:a2:75:7f:d4:f6:a8:db:b4:96:e8:1c:cd:56:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Feb 26 15:41:29 2026 GMT
Not After : Feb 25 15:46:29 2027 GMT
Subject: CN=5B04DAAFE2F2C86603F3C5079A18C9626B591CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:5e:08:d6:c8:1c:4d:b2:8f:f3:9b:4b:84:
17:bf:2d:18:e5:76:2d:e8:e1:5c:e4:84:f1:d7:c4:
df:16:00:16:d5:8e:24:bb:e8:c4:f0:2a:4d:3d:f2:
d5:be:12:44:e6:d7:42:d6:d4:62:23:fc:57:f0:77:
3c:0a:c1:01:e1:08:0f:bc:6b:d3:88:98:03:93:b4:
43:25:61:65:12:42:b0:4f:b9:3f:0b:d2:bd:7f:72:
c0:9b:a9:69:28:d0:5f:ef:4d:a4:3f:cc:d7:d0:3f:
14:97:5f:a9:b8:10:bf:23:2d:d4:50:f5:2b:12:62:
49:38:61:df:b3:91:1a:3e:79:cc:a2:a6:f1:11:35:
8d:6b:3f:dd:f1:7d:00:df:56:8c:06:fa:15:a7:50:
e2:01:df:75:55:89:f5:59:54:b7:46:fc:da:f2:56:
ce:d1:e3:a7:a1:45:c0:83:c2:1b:11:67:ff:75:a7:
64:15:70:f3:6b:6b:76:4f:3e:e6:2d:a4:53:e1:ed:
7c:75:b8:6e:70:28:ef:68:d0:b1:bd:c7:05:fb:97:
1b:f0:76:0a:97:89:46:9a:e8:6d:9c:3e:a8:e8:6d:
f6:4a:29:43:65:f7:83:0f:4b:b7:fe:72:da:d3:58:
5c:4a:4c:d2:2c:3d:3e:7a:6f:8a:66:9c:6d:77:7a:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:DA:AF:E2:F2:C8:66:03:F3:C5:07:9A:18:C9:62:6B:59:1C:C4
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/37372e3234362e3234302e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f3:ac:00:01:d2:fb:63:83:f1:bd:1b:0a:0c:c5:45:5d:a5:
75:30:ff:9b:68:fc:07:83:b0:05:cd:c1:d2:e8:53:22:4f:0f:
2f:cb:bc:80:8b:b9:c3:db:66:b4:a9:6b:3f:40:56:50:f5:57:
30:9e:cf:a3:ef:ab:39:56:9d:4c:af:78:bd:e1:7c:69:34:b3:
bc:42:4c:c2:dc:45:d0:38:08:79:00:f1:60:35:2b:05:b5:60:
df:e4:70:c0:2c:02:da:20:46:f6:cc:df:15:17:9d:ce:55:c2:
b4:3c:cc:db:b2:c7:2d:df:d8:b9:d5:6c:ba:81:8f:0a:65:34:
8f:e8:69:c6:e0:75:05:44:cf:3c:20:91:b0:f0:e0:b8:bd:35:
81:49:b2:d7:f4:0b:24:ea:20:53:f1:fa:10:4a:2c:8c:ca:20:
a0:7d:cd:75:f4:63:54:a4:52:8b:b4:05:c2:49:18:f7:25:a8:
2b:eb:d9:2d:56:e3:1a:f3:78:40:14:dc:ff:a5:e6:dc:03:1c:
05:76:32:c0:5f:69:61:59:b8:5f:b4:8e:f4:ae:d6:cb:5b:9f:
ae:a6:d1:81:98:97:36:95:54:30:bd:72:84:8c:84:5e:2f:99:
5a:f0:1b:13:31:ac:3b:15:81:1b:28:a7:2c:0e:af:cc:b7:0c:
84:59:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:54 2026 by rpki-client