Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37362e302f32342d3234203d3e203438353932.roa
File: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: xdM7OBZ/9TbpR6di66FXGgK7azfT3ftRTjEe6Yt/SjQ=
Subject key identifier: 49:85:12:6E:A8:3F:46:20:E5:4C:06:F5:76:2C:03:36:C2:7E:2E:32
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 19E6D301E00752060067FE86BD655F9B2FBC750B
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37362e302f32342d3234203d3e203438353932.roa
Signing time: Tue 24 Feb 2026 06:55:40 +0000
ROA not before: Tue 24 Feb 2026 06:50:40 +0000
ROA not after: Tue 23 Feb 2027 06:55:40 +0000
asID: 48592
IP address blocks: 77.81.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e6:d3:01:e0:07:52:06:00:67:fe:86:bd:65:5f:9b:2f:bc:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Feb 24 06:50:40 2026 GMT
Not After : Feb 23 06:55:40 2027 GMT
Subject: CN=4985126EA83F4620E54C06F5762C0336C27E2E32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:40:7f:85:83:b0:76:73:19:38:88:91:5f:
b1:c6:a1:70:b0:15:25:dc:9b:2b:b1:33:d8:3d:b2:
4a:25:38:56:88:bd:5d:54:21:cf:87:c9:85:50:30:
3c:9d:0e:94:cd:f1:2d:ce:c2:10:6e:72:eb:90:bb:
4f:7e:36:18:65:32:16:6e:e8:40:2d:07:e8:d6:3a:
e6:d0:5d:e3:ee:e8:e8:8c:5a:6a:c3:18:64:e1:ac:
f5:2a:58:66:01:23:18:58:99:96:b5:e7:5a:ca:84:
aa:0b:4d:f7:bb:ff:47:1d:b6:9c:73:54:36:a8:26:
d0:41:06:6c:c3:dd:c6:bf:e9:94:f5:97:15:fd:b0:
ec:c8:62:43:cb:36:4f:e1:79:b6:73:fa:27:7c:2b:
c3:a1:57:cb:4a:0a:7f:35:e0:d3:2b:19:fe:9c:13:
9a:88:8a:78:cf:c8:3b:b5:74:45:2d:a7:ef:28:3c:
b4:26:44:1c:5d:1a:c9:fc:cc:b3:53:d0:10:35:ed:
87:b8:20:68:b2:09:51:b7:35:c3:33:e9:ee:4c:b7:
e4:0a:02:59:5c:2e:01:d7:c1:d3:cd:7d:7b:ed:c3:
ec:cf:9a:60:ad:68:3f:46:66:51:c7:4b:d8:f0:66:
59:f4:b4:68:17:86:5e:80:d6:07:1c:f8:c5:57:57:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:12:6E:A8:3F:46:20:E5:4C:06:F5:76:2C:03:36:C2:7E:2E:32
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37362e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:98:29:1f:df:4b:81:a1:1a:56:4b:62:7f:d4:d7:1b:e7:81:
35:8e:6e:ac:f9:d2:c8:d2:eb:af:75:79:d7:9e:c5:6c:9e:1e:
65:0f:a3:49:af:c0:b2:da:d1:6b:d8:9d:95:50:dc:72:74:5c:
14:1c:14:55:cf:f4:85:41:f1:94:f6:28:53:06:10:63:8e:c1:
b3:46:4a:8c:4d:91:db:fa:6f:32:30:da:d3:6a:ab:bf:51:c0:
53:95:f5:9d:64:c8:c1:c2:07:57:c6:fa:00:8b:72:75:09:ba:
53:ad:a7:e5:fa:70:63:17:c2:2d:34:fe:c5:0f:25:a1:5a:ac:
fe:c0:f9:81:c6:1c:62:c5:05:db:af:0c:5c:2b:fb:24:28:f1:
c8:4b:dd:80:6b:fc:92:19:aa:bd:93:96:f2:07:25:f8:36:26:
3c:2d:13:af:51:09:46:41:0b:c7:14:7a:bd:13:b4:ad:c1:77:
86:e7:c3:02:dd:f2:9c:ed:94:2d:c8:9e:6b:52:b8:1c:dc:f8:
85:11:37:5d:bc:e6:96:41:1d:41:46:47:e5:5a:45:d6:2d:c6:
c6:8f:1b:1e:7a:ec:a2:45:3b:ec:4e:3d:fa:7f:dc:ea:42:1e:
c7:51:bc:f5:34:86:1e:e4:14:75:0f:4a:0d:98:0b:4e:7d:7c:
ee:0a:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:03 2026 by rpki-client