Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3234302e302f32302d3332203d3e203531313637.roa
File: 33372e36302e3234302e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: b0Q0sbvNKvQ69/miaCfsNMJXjVQTL75bjMz/2W6grhE=
Subject key identifier: 6E:FF:BA:FA:8F:8F:54:E2:3E:05:D9:F9:F7:E0:13:21:66:72:EA:A3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68436995766694500EAFB83157E4EFCB23CA7A06
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3234302e302f32302d3332203d3e203531313637.roa
Signing time: Thu 29 Oct 2026 11:30:50 +0000
ROA not before: Thu 29 Oct 2026 11:25:50 +0000
ROA not after: Thu 28 Oct 2027 11:30:50 +0000
asID: 51167
IP address blocks: 37.60.240.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:43:69:95:76:66:94:50:0e:af:b8:31:57:e4:ef:cb:23:ca:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 29 11:25:50 2026 GMT
Not After : Oct 28 11:30:50 2027 GMT
Subject: CN=6EFFBAFA8F8F54E23E05D9F9F7E013216672EAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:11:15:d4:46:e9:37:39:b9:3e:40:00:02:
83:b2:fb:63:3e:77:4a:66:61:60:68:6c:ce:84:31:
ac:45:7e:0a:bd:6c:3c:04:e5:ed:f5:8e:ce:82:7f:
73:ce:51:d2:02:4c:f6:0f:dc:c1:a4:de:bd:8e:96:
ff:77:b3:52:97:b6:b4:9a:2a:f9:0b:a0:aa:b6:d3:
e0:e3:3b:60:01:00:7c:33:cc:e3:61:94:a9:d8:cb:
69:e2:8d:c4:f9:18:28:2e:ac:1d:56:74:7a:ff:fc:
96:95:3a:c1:96:77:13:d8:83:ee:1b:f2:a1:97:5c:
0a:85:bb:f7:83:45:58:03:0e:65:b3:f5:83:29:61:
2c:e5:19:ae:a2:75:c8:5e:d3:6e:40:02:c7:ab:da:
d6:1d:8d:b7:68:94:98:6f:75:e4:7e:22:bf:e1:6e:
cf:69:c5:02:87:b5:bb:bb:23:de:cc:ef:0e:05:97:
1a:b9:51:80:3c:7b:e5:19:87:1d:02:fc:0f:0a:89:
df:24:e0:bd:45:67:b4:6e:5d:95:c4:ee:ef:0a:43:
43:ba:30:5b:5c:d4:5b:a1:c9:91:02:e8:66:6d:09:
82:84:29:5c:13:1c:87:42:30:3a:25:72:48:84:a9:
27:40:c0:11:9e:cd:26:92:76:2b:37:13:6a:c5:c3:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:BA:FA:8F:8F:54:E2:3E:05:D9:F9:F7:E0:13:21:66:72:EA:A3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3234302e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:be:7b:14:ac:a4:8c:25:86:69:75:37:72:66:30:21:82:6e:
e9:12:97:0d:c1:2e:cd:c7:1c:f6:0b:9e:ab:b6:b7:62:b0:38:
a0:7a:61:84:ac:f8:54:91:ff:0c:ad:8f:dc:4c:c1:fa:18:7a:
25:36:bf:8c:2b:ec:43:b6:d9:a1:0b:45:84:f6:ad:60:b7:e7:
a3:4c:61:7d:26:c9:25:5e:ac:b7:85:ae:98:11:93:fd:46:47:
cc:42:b5:f2:e7:ed:b3:cd:00:7c:a0:76:73:86:b7:b6:b6:07:
50:e9:51:75:a9:2c:f6:25:5d:01:c0:10:a7:fc:b8:ca:18:8e:
96:10:fa:5e:a7:c3:32:47:f8:43:27:63:03:61:47:ad:f1:c6:
0a:3b:bb:56:c6:7f:8c:b3:a8:90:6c:3c:b5:ff:9a:5c:09:ea:
3a:c0:28:be:ea:fd:16:2e:02:2b:a6:ff:e2:4e:ea:2a:9d:58:
73:3a:dc:4e:ca:b0:f4:49:9b:b6:b2:96:f9:ba:2a:31:85:06:
4a:bb:f8:08:f3:ba:18:93:91:d6:cd:ff:9b:14:34:01:36:33:
f0:6e:cb:22:4e:df:84:b3:13:a6:ba:9a:21:4d:0f:08:8b:64:
91:21:bc:22:d4:d4:cc:74:23:27:36:2d:f0:08:08:2c:95:00:
59:b4:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:50 2026 by rpki-client