Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3233322e302f32312d3332203d3e203531313637.roa
File: 37372e3233372e3233322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: HjxfR+92dIXokOXQQYUIMqTiRtaHlyECmG1733HlgOM=
Subject key identifier: 8B:1A:A5:E8:8F:56:E8:30:87:A5:42:7F:2A:50:F1:FA:DA:65:0F:77
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37BD49E127E14DA885A0C85D7B0BE07287B0916D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3233322e302f32312d3332203d3e203531313637.roa
Signing time: Tue 10 Feb 2026 08:23:20 +0000
ROA not before: Tue 10 Feb 2026 08:18:20 +0000
ROA not after: Tue 09 Feb 2027 08:23:20 +0000
asID: 51167
IP address blocks: 77.237.232.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:bd:49:e1:27:e1:4d:a8:85:a0:c8:5d:7b:0b:e0:72:87:b0:91:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 10 08:18:20 2026 GMT
Not After : Feb 9 08:23:20 2027 GMT
Subject: CN=8B1AA5E88F56E83087A5427F2A50F1FADA650F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:c7:bf:c5:f3:99:56:2f:f4:26:78:53:13:
f5:7b:7d:7e:18:6c:8b:be:ab:18:b9:fa:14:49:84:
83:07:2d:05:f4:ae:38:84:0d:23:48:ce:0c:20:1c:
20:db:6f:b5:30:3a:3d:15:7b:71:67:66:56:9b:f9:
36:69:38:9f:af:27:ba:5a:59:9c:c0:38:68:0d:80:
39:19:b3:b5:db:78:a2:32:fb:b8:1a:4f:b1:a7:31:
bc:1b:38:e8:be:a5:d7:ca:c0:b8:a6:88:50:50:1c:
64:0a:8a:c4:0c:83:f7:c4:ad:6c:da:dc:88:2d:e4:
ac:4b:0a:11:bd:07:f2:6e:de:02:99:70:f1:2f:fa:
67:4a:7c:80:29:be:92:79:cf:0c:da:15:bc:a7:3b:
bb:41:71:53:7b:5d:06:dd:06:b0:41:84:5e:49:85:
ff:42:50:57:93:1a:a0:3e:66:c7:13:5c:c2:0e:f7:
51:a9:4b:da:a0:cc:eb:5f:17:7e:db:7a:13:e2:6f:
05:bc:d3:2f:27:4f:c3:1c:13:6e:3f:08:15:df:87:
65:3d:05:b9:a9:42:02:53:3e:82:06:8f:48:89:a5:
93:17:6c:4c:22:18:3b:93:9f:ef:c5:d7:89:68:c9:
bf:d1:6a:8e:c8:24:2e:77:15:9f:70:12:2a:05:0e:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:A5:E8:8F:56:E8:30:87:A5:42:7F:2A:50:F1:FA:DA:65:0F:77
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3233322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:e5:3a:f0:64:c2:26:64:f7:17:7f:18:42:50:44:be:b1:15:
1b:5d:0a:b0:5a:55:56:02:6f:ba:21:e3:d0:06:93:bc:8b:3d:
9f:83:81:bd:94:14:fe:cb:49:9d:e7:94:59:a1:5b:9f:ff:db:
a3:43:aa:b5:4e:37:88:cc:f7:fc:5b:a4:e0:c2:92:71:05:6d:
b5:03:25:d1:11:63:9d:8f:55:ea:62:6d:29:9a:5f:f6:75:1a:
3c:3b:0b:b3:26:ec:8f:69:b0:b2:b8:af:cc:6b:06:78:bf:f5:
45:18:62:d8:ae:5c:16:18:25:0c:6d:6b:95:de:66:fa:ea:29:
b4:d1:1c:4e:be:a9:d8:d1:5c:db:8b:33:e7:fb:2a:47:03:09:
20:21:e6:23:52:b4:90:2b:86:37:b4:1f:20:6b:6e:c4:80:c2:
1b:ac:3b:28:86:52:71:e5:b0:f6:89:67:1d:03:e6:e3:4e:9d:
70:dc:c3:6f:da:3c:74:ee:03:5d:70:3c:5d:a3:69:ab:04:83:
91:c5:97:63:10:06:6f:63:62:88:36:c5:63:76:3d:f7:69:b6:
fd:c2:80:35:85:91:84:38:e6:77:7d:05:6f:0d:4b:19:f8:99:
c3:6b:1c:a9:53:e2:01:7e:ff:ab:8e:92:16:53:e2:3d:78:d5:
5c:37:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:31 2026 by rpki-client