Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e203539383935.roa
File: 37372e38332e3130362e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: FkbF0Y15oRgK5pu+DXqkVqYyHgym0D4WHO4iiKOmh8E=
Subject key identifier: 07:6E:B8:EF:91:B4:D9:14:DB:20:AE:D6:2D:FE:E3:F7:F4:43:42:BF
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7DCD05ECBF3CBCE4715EC51F5673976E8D464BE3
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e203539383935.roa
Signing time: Tue 01 Sep 2026 14:49:31 +0000
ROA not before: Tue 01 Sep 2026 14:44:31 +0000
ROA not after: Tue 31 Aug 2027 14:49:31 +0000
asID: 59895
IP address blocks: 77.83.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:cd:05:ec:bf:3c:bc:e4:71:5e:c5:1f:56:73:97:6e:8d:46:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 1 14:44:31 2026 GMT
Not After : Aug 31 14:49:31 2027 GMT
Subject: CN=076EB8EF91B4D914DB20AED62DFEE3F7F44342BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:c2:4d:89:1c:b3:0c:3e:8e:62:93:27:e4:
da:a9:af:99:1c:0b:ca:b5:33:f4:35:51:01:0b:c1:
27:20:8e:4e:a9:ec:19:fb:e4:0e:b7:18:98:27:2e:
ee:c2:7d:2e:74:03:b4:91:07:60:e3:78:b5:d0:95:
32:d9:ac:85:1b:d7:02:6c:a9:2e:bd:fb:e0:1b:b1:
f1:bc:b6:34:82:68:70:c2:5a:71:74:3f:62:bd:71:
62:32:77:fc:4e:58:17:81:21:ef:d1:f0:46:42:50:
98:7c:54:9c:6e:a2:27:b5:ca:62:1b:af:56:27:0d:
e2:3b:3a:36:a7:dc:97:ec:c1:07:50:fe:39:59:af:
ec:17:f8:01:d6:e2:19:50:05:46:31:1a:9f:1e:03:
10:7c:fb:56:90:ed:8e:30:c6:27:01:23:fd:f4:8f:
0a:cb:cf:8f:42:e3:3b:25:f3:f8:3e:c3:4a:0f:1f:
f8:43:d3:d7:10:b5:3f:c6:e8:dd:78:a4:25:8c:47:
12:77:96:06:96:de:e5:92:27:7e:0f:84:b7:5b:57:
54:12:76:55:e0:5b:ff:70:e2:a2:b5:fd:15:2b:9b:
90:25:c8:6e:56:d6:07:93:a0:58:98:6d:6c:ab:40:
d3:71:2a:ec:09:4e:34:a3:9b:79:48:a4:54:4d:2d:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6E:B8:EF:91:B4:D9:14:DB:20:AE:D6:2D:FE:E3:F7:F4:43:42:BF
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4f:77:5b:54:b0:a9:32:29:ce:60:ca:98:cd:40:82:7d:eb:
4e:a5:4f:5a:0b:b1:1e:49:d3:7d:44:da:2d:fb:ae:fb:d7:26:
43:10:d8:53:71:0a:dd:d3:d8:06:71:08:b8:ea:ac:bc:15:a8:
73:ba:fa:2d:c6:a1:30:c0:f4:1e:d7:2f:ec:a3:a1:58:94:15:
2c:e9:fd:10:33:6b:97:49:6d:9a:8e:07:f0:a3:f9:86:d3:dd:
ea:2b:41:6f:3d:4a:6e:e0:91:8d:70:eb:75:69:35:84:05:95:
07:55:dd:07:2f:57:31:99:07:d6:2a:29:ad:b7:a8:5c:a4:bd:
db:98:a4:10:0c:d6:fa:cb:47:dc:44:25:03:fd:99:d3:ea:86:
46:29:64:e5:0f:b4:29:8b:bd:34:d4:d6:24:b0:43:a8:47:5d:
cc:a3:ec:5a:3c:25:0b:7c:a7:6c:47:5f:f5:0b:8b:27:db:35:
31:e4:0d:8d:90:2a:57:c8:64:7a:8b:69:b2:02:0f:96:ea:24:
1c:2f:73:89:48:26:f4:80:00:4f:5f:d3:33:5e:5a:85:00:f3:
74:f4:a1:16:09:d5:99:73:67:03:33:d5:a9:c2:4a:71:3d:03:
33:e6:c6:aa:e6:98:03:f8:f6:b1:ac:f3:77:65:4c:1a:eb:65:
cb:f4:f8:73
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfc0F7L88vORxXsUfVnOXbo1GS+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA5MDExNDQ0MzFaFw0yNzA4MzExNDQ5MzFaMDMxMTAvBgNV
BAMTKDA3NkVCOEVGOTFCNEQ5MTREQjIwQUVENjJERkVFM0Y3RjQ0MzQyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+8JNiRyzDD6OYpMn5Nqpr5kc
C8q1M/Q1UQELwScgjk6p7Bn75A63GJgnLu7CfS50A7SRB2DjeLXQlTLZrIUb1wJs
qS69++AbsfG8tjSCaHDCWnF0P2K9cWIyd/xOWBeBIe/R8EZCUJh8VJxuoie1ymIb
r1YnDeI7Ojan3JfswQdQ/jlZr+wX+AHW4hlQBUYxGp8eAxB8+1aQ7Y4wxicBI/30
jwrLz49C4zsl8/g+w0oPH/hD09cQtT/G6N14pCWMRxJ3lgaW3uWSJ34PhLdbV1QS
dlXgW/9w4qK1/RUrm5AlyG5W1geToFiYbWyrQNNxKuwJTjSjm3lIpFRNLZB/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUB26475G02RTbIK7WLf7j9/RDQr8wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTM4MzkzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1T
ajANBgkqhkiG9w0BAQsFAAOCAQEAbk93W1SwqTIpzmDKmM1Agn3rTqVPWguxHknT
fUTaLfuu+9cmQxDYU3EK3dPYBnEIuOqsvBWoc7r6LcahMMD0Htcv7KOhWJQVLOn9
EDNrl0ltmo4H8KP5htPd6itBbz1KbuCRjXDrdWk1hAWVB1XdBy9XMZkH1ioprbeo
XKS925ikEAzW+stH3EQlA/2Z0+qGRilk5Q+0KYu9NNTWJLBDqEddzKPsWjwlC3yn
bEdf9QuLJ9s1MeQNjZAqV8hkeotpsgIPluokHC9ziUgm9IAAT1/TM15ahQDzdPSh
FgnVmXNnAzPVqcJKcT0DM+bGquaYA/j2sazzd2VMGutly/T4cw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:07 2026 by rpki-client