Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38322e302f32342d3234203d3e203438353932.roa
File: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: d5TxhwAkeXwrF6uRbXxfjKGJfxHDWIa7sLTALcjfvN4=
Subject key identifier: CD:5B:D9:41:F6:15:6B:5D:17:54:50:CE:D3:C3:B4:F4:B3:B8:CE:2C
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 63663797D77D501F14D8D080AEA7A51AC28183A0
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38322e302f32342d3234203d3e203438353932.roa
Signing time: Tue 24 Feb 2026 06:55:39 +0000
ROA not before: Tue 24 Feb 2026 06:50:39 +0000
ROA not after: Tue 23 Feb 2027 06:55:39 +0000
asID: 48592
IP address blocks: 77.81.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:66:37:97:d7:7d:50:1f:14:d8:d0:80:ae:a7:a5:1a:c2:81:83:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Feb 24 06:50:39 2026 GMT
Not After : Feb 23 06:55:39 2027 GMT
Subject: CN=CD5BD941F6156B5D175450CED3C3B4F4B3B8CE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a0:2c:53:0c:ae:27:ec:1b:85:57:da:53:2b:
f1:89:c0:12:d0:a7:ec:dc:3d:df:e6:7f:cd:ab:ea:
b2:c3:a1:46:eb:a1:ff:4c:6b:cb:0d:55:26:59:9e:
bd:d1:80:fc:1a:c1:23:e8:ba:aa:c8:43:f1:ac:7e:
74:18:b2:fb:83:6d:01:58:0f:95:1b:ec:00:4d:f3:
b8:6c:f7:a9:e0:56:8b:ca:4f:14:b3:65:0a:03:3e:
ef:92:29:e6:e8:a0:d1:3d:73:c1:02:8a:f0:6a:c8:
52:8d:e5:cf:76:cd:91:e3:87:11:56:da:ac:de:f6:
71:91:c5:21:a6:81:13:08:45:eb:cf:7f:35:98:59:
4a:dc:db:c8:d7:15:e9:31:e6:80:b0:4e:a7:1c:1d:
d6:2f:99:2b:a4:5f:09:1e:40:32:1b:1c:b9:4c:1d:
9f:0f:f2:ed:b6:81:99:40:92:99:4d:ed:8a:38:cd:
ae:32:29:56:54:9b:e0:66:a8:c6:77:eb:21:01:f1:
b3:82:67:6d:01:02:86:51:22:c5:a0:cc:57:18:52:
0d:52:d9:1d:8b:ea:1f:5a:2b:28:8d:dc:a0:6b:bc:
1e:82:63:06:88:1c:d5:34:cb:f3:72:ec:07:01:9a:
08:b2:4c:44:34:2d:3a:fa:36:22:36:de:51:8d:9c:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:D9:41:F6:15:6B:5D:17:54:50:CE:D3:C3:B4:F4:B3:B8:CE:2C
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38322e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.82.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5f:f8:8e:20:74:ed:62:f0:2b:28:99:a0:42:9a:7a:10:d4:
cc:8e:2f:1c:3e:bd:a7:dc:0e:b1:c7:78:04:13:64:5c:f1:4f:
11:0e:dd:6b:05:37:88:57:71:1c:ed:d0:09:f3:53:db:9f:94:
b3:73:a6:86:13:e7:f9:a6:2e:4b:73:47:71:3d:01:2c:08:f9:
03:fb:a3:72:32:93:7b:30:88:0b:84:0b:89:5a:d3:b2:6a:d3:
9b:94:5d:43:c6:3c:f8:9e:5b:f8:1a:b1:bd:c5:37:cb:a9:fd:
51:87:83:d4:cb:63:62:d6:81:54:dc:b4:f0:9b:04:01:10:94:
c8:f4:e9:1d:8e:1f:55:34:00:53:d4:1f:02:2a:d9:a8:d1:e0:
89:6f:f2:f8:e2:ba:82:eb:74:64:4d:f9:6b:01:06:de:d6:ae:
57:2a:a0:a8:51:17:cb:73:28:62:54:74:cc:64:ff:8d:9d:6e:
af:6f:da:d0:f9:bf:0f:49:cd:5e:05:9d:78:80:3d:d4:32:59:
f3:32:19:a0:72:49:af:4f:e8:79:58:76:4d:ab:eb:a5:4b:b5:
44:d7:58:ec:0a:2e:a4:70:05:64:65:db:d0:85:b4:99:b0:af:
52:cd:33:8d:b4:4c:04:54:5f:f1:ae:62:d2:44:3c:d9:51:af:
c6:cb:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:52 2026 by rpki-client