Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38332e302f32342d3234203d3e203438353932.roa
File: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: Tv5q+rfM3afhLe0aBDFGLWT8PXWC4GLzMQF3H6VLFL8=
Subject key identifier: 7C:E8:AE:EC:B7:0D:B3:43:BC:E6:29:93:7D:2C:1C:9B:69:69:F1:67
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 6C42BA50F3F32928033ED8D4BB11DEBCF27C29BD
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38332e302f32342d3234203d3e203438353932.roa
Signing time: Tue 24 Feb 2026 06:55:39 +0000
ROA not before: Tue 24 Feb 2026 06:50:39 +0000
ROA not after: Tue 23 Feb 2027 06:55:39 +0000
asID: 48592
IP address blocks: 77.81.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:42:ba:50:f3:f3:29:28:03:3e:d8:d4:bb:11:de:bc:f2:7c:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Feb 24 06:50:39 2026 GMT
Not After : Feb 23 06:55:39 2027 GMT
Subject: CN=7CE8AEECB70DB343BCE629937D2C1C9B6969F167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:7c:4c:7f:89:7d:60:a6:81:e1:23:6d:53:
3c:53:ce:ad:a4:c1:35:13:0e:95:12:26:a4:21:91:
37:19:b5:c3:83:63:9a:45:bf:4f:50:08:09:0b:6b:
1e:39:5c:f3:3c:e4:23:32:37:62:14:90:e2:e5:4f:
6f:ba:09:92:7a:dc:87:c7:8f:60:f2:e3:14:02:d7:
ff:83:af:71:f5:85:fa:bd:42:40:be:d0:42:cf:08:
fc:52:46:06:61:99:29:e4:ce:2b:29:21:3f:96:5a:
9e:bd:12:8a:5a:46:fb:49:81:09:7f:d7:9b:39:d9:
f0:9f:cc:b1:c5:1b:95:6a:2f:29:9b:16:e5:50:af:
53:4f:01:50:9d:9e:98:ee:b1:7f:f3:5c:dd:37:50:
6c:3e:14:95:d7:41:ca:db:d2:93:8d:bd:45:2b:91:
70:88:07:de:84:4c:3e:74:9d:f0:95:9c:a0:e2:81:
2c:8f:ff:df:33:bb:4c:b0:b9:e9:a3:35:bf:05:be:
53:f6:b5:1b:54:32:27:9e:eb:20:27:3b:2a:df:81:
74:d3:47:97:80:ac:f3:f8:6e:39:7b:04:97:f9:cf:
8f:2d:32:bb:6c:85:a8:0c:c7:36:65:6a:56:f1:e3:
4d:14:1e:61:2b:3d:95:8f:d1:13:d7:10:67:4d:dd:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E8:AE:EC:B7:0D:B3:43:BC:E6:29:93:7D:2C:1C:9B:69:69:F1:67
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38332e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.83.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bb:ef:30:13:b3:ad:05:e9:dd:79:9c:e8:73:3e:a6:00:5a:
b4:57:a6:17:e8:3c:bd:df:2b:b6:40:d0:b0:3f:a4:70:92:92:
10:0f:35:e7:a5:80:e0:69:73:36:9b:d8:42:5a:7b:ba:10:03:
d7:d1:85:b6:94:3a:23:44:7d:45:ed:0f:74:4f:ff:ca:04:86:
2f:d7:2d:57:f0:a8:29:4c:cb:3d:b3:af:c7:58:8c:9d:75:10:
6d:05:90:2b:9a:4f:4b:d4:1a:29:14:ce:a9:b6:a3:81:e8:11:
e6:86:34:a3:02:6d:8f:a7:f3:6d:93:e8:eb:0a:87:bf:c3:d8:
c5:05:3d:57:a6:78:ad:15:ef:dc:e1:94:c0:75:34:dd:03:8f:
ab:5a:84:93:9e:cc:25:03:b6:e7:af:e3:c4:b9:99:b8:53:1e:
d0:f8:25:9f:81:a1:09:95:6a:e6:74:77:67:65:88:9d:7e:fe:
71:14:4d:38:28:5d:de:10:5d:c7:48:4d:db:7b:b6:0f:d7:07:
d6:cc:ce:54:f4:f8:56:0a:7b:62:dc:0c:8c:12:ac:40:5b:3c:
2c:83:e3:f0:3e:02:c4:55:ed:b7:69:f4:3d:25:09:52:a2:ce:
36:c8:b4:07:2f:d9:ee:2a:e2:d7:70:09:aa:92:a4:9c:b5:74:
9b:57:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:00 2026 by rpki-client