Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232382e302f32342d3234203d3e203432333636.roa
File: 37372e3233372e3232382e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: LIILxPULkD5Dso5829pzfqqIO78WJ+fwpDrWW0jdCwU=
Subject key identifier: 4B:16:70:E9:AF:B0:D2:17:72:C4:6C:EE:19:9C:BC:C2:0D:7F:0E:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C9519FB79EE064E364391041A5DD70677D4DD3F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232382e302f32342d3234203d3e203432333636.roa
Signing time: Mon 07 Sep 2026 17:28:37 +0000
ROA not before: Mon 07 Sep 2026 17:23:37 +0000
ROA not after: Mon 06 Sep 2027 17:28:37 +0000
asID: 42366
IP address blocks: 77.237.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:95:19:fb:79:ee:06:4e:36:43:91:04:1a:5d:d7:06:77:d4:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 17:23:37 2026 GMT
Not After : Sep 6 17:28:37 2027 GMT
Subject: CN=4B1670E9AFB0D21772C46CEE199CBCC20D7F0E96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:f0:5d:09:bc:27:6a:6e:eb:91:d8:01:04:
05:5f:03:a8:00:27:33:10:bc:40:67:d6:19:16:9f:
34:17:e3:cc:1d:ed:21:ec:6f:0f:14:ef:a5:b7:a8:
8b:d2:f0:5f:4b:81:4c:f1:9f:fa:c5:d1:a6:6a:f8:
e3:a3:69:86:be:f4:13:fc:81:85:ca:06:3b:c1:77:
95:00:61:47:b8:e8:d5:7f:95:cd:a7:34:8d:d9:92:
39:16:46:f0:75:cc:20:19:dd:70:90:f2:ee:f6:0a:
00:c1:a2:2f:7b:49:2b:94:72:d8:ed:ec:8a:6a:33:
a2:98:5e:4f:56:e2:5b:72:bb:0b:e4:75:19:fb:fe:
24:c1:09:2e:e1:91:75:7f:e0:65:15:58:bb:c4:43:
b7:9d:40:17:53:8d:76:41:0b:8e:49:5a:66:2a:41:
29:f9:8d:06:41:10:6f:48:90:df:62:24:a1:c4:d1:
18:a0:4f:32:68:46:df:75:fa:41:dd:be:62:1d:1c:
38:b5:7c:bc:43:f9:7b:e3:85:21:6f:99:22:36:dd:
97:fc:84:0b:15:c8:18:96:9b:7c:51:e2:22:56:c2:
f6:d7:10:11:53:81:83:1a:e0:a1:ea:d0:b7:54:c6:
ce:15:f9:0b:6b:8c:56:1a:59:51:42:54:78:33:7f:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:16:70:E9:AF:B0:D2:17:72:C4:6C:EE:19:9C:BC:C2:0D:7F:0E:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232382e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.228.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d3:27:60:5e:5c:5a:3a:e8:7e:ce:9c:70:f2:42:74:36:5a:
6f:17:5d:9a:5e:7b:20:a2:87:e7:ec:80:10:33:67:24:e5:f4:
11:91:44:b0:57:1b:9b:4d:8c:b4:46:26:04:1e:96:2f:98:6d:
c9:f8:54:d5:26:a0:0b:72:3c:cd:d9:6f:ac:f2:0a:af:20:74:
d9:c5:b9:50:e3:95:7f:ae:45:78:c3:65:1f:d5:4a:c3:51:f6:
22:46:16:7e:d1:c8:3a:84:f8:05:37:f4:64:64:fa:4b:c5:f9:
44:6d:f5:7b:4b:da:e3:23:4b:0c:10:cb:ac:35:39:da:6e:08:
73:1b:c7:af:3c:b6:3c:b1:a1:76:53:ed:6a:2c:21:b5:b1:be:
f1:7a:7c:c4:24:cb:a9:7a:31:27:2d:28:c6:f3:29:ee:62:e2:
0d:1f:ab:33:65:fb:9e:48:c3:46:3d:6a:01:47:7d:69:7f:6d:
66:51:1a:ec:d2:1b:90:35:ed:0e:bf:76:06:47:8b:c3:14:3b:
f6:ab:7d:f3:6d:bd:d9:ab:27:75:cc:5d:f3:ac:53:38:d9:35:
74:d0:79:33:3d:d0:86:de:59:fb:08:2c:d3:62:17:d9:dc:e7:
ea:32:05:52:2d:b0:9e:4c:ed:56:ad:4d:88:2f:d8:62:d3:b3:
90:f5:fb:b3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDJUZ+3nuBk42Q5EEGl3XBnfU3T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDcxNzIzMzdaFw0yNzA5MDYxNzI4MzdaMDMxMTAvBgNV
BAMTKDRCMTY3MEU5QUZCMEQyMTc3MkM0NkNFRTE5OUNCQ0MyMEQ3RjBFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEvBdCbwnam7rkdgBBAVfA6gA
JzMQvEBn1hkWnzQX48wd7SHsbw8U76W3qIvS8F9LgUzxn/rF0aZq+OOjaYa+9BP8
gYXKBjvBd5UAYUe46NV/lc2nNI3ZkjkWRvB1zCAZ3XCQ8u72CgDBoi97SSuUctjt
7IpqM6KYXk9W4ltyuwvkdRn7/iTBCS7hkXV/4GUVWLvEQ7edQBdTjXZBC45JWmYq
QSn5jQZBEG9IkN9iJKHE0RigTzJoRt91+kHdvmIdHDi1fLxD+XvjhSFvmSI23Zf8
hAsVyBiWm3xR4iJWwvbXEBFTgYMa4KHq0LdUxs4V+QtrjFYaWVFCVHgzf6xhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUSxZw6a+w0hdyxGzuGZy8wg1/DpYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzczNzJlMzIzMzM3MmUzMjMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Te3kMA0GCSqGSIb3DQEBCwUAA4IBAQB30ydgXlxaOuh+zpxw8kJ0NlpvF12aXnsg
oofn7IAQM2ck5fQRkUSwVxubTYy0RiYEHpYvmG3J+FTVJqALcjzN2W+s8gqvIHTZ
xblQ45V/rkV4w2Uf1UrDUfYiRhZ+0cg6hPgFN/RkZPpLxflEbfV7S9rjI0sMEMus
NTnabghzG8evPLY8saF2U+1qLCG1sb7xenzEJMupejEnLSjG8ynuYuINH6szZfue
SMNGPWoBR31pf21mURrs0huQNe0Ov3YGR4vDFDv2q33zbb3Zqyd1zF3zrFM42TV0
0HkzPdCG3ln7CCzTYhfZ3OfqMgVSLbCeTO1WrU2IL9hi07OQ9fuz
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:37:16 2026 by rpki-client