Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37302e302f32342d3234203d3e20323039383534.roa
File: 37372e37382e37302e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: ZRGyCCQn7PdM2ZmayuCCFus1vT6eNEe1my93kXHcMVA=
Subject key identifier: 2A:91:E5:49:E0:2B:9F:BA:13:25:F4:89:EC:86:3B:AA:6A:B5:3B:BD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 756A4D7A1BC03AB27F22836DBF3A794A57B604B0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37302e302f32342d3234203d3e20323039383534.roa
Signing time: Wed 21 Jan 2026 09:23:10 +0000
ROA not before: Wed 21 Jan 2026 09:18:10 +0000
ROA not after: Wed 20 Jan 2027 09:23:10 +0000
asID: 209854
IP address blocks: 77.78.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6a:4d:7a:1b:c0:3a:b2:7f:22:83:6d:bf:3a:79:4a:57:b6:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 21 09:18:10 2026 GMT
Not After : Jan 20 09:23:10 2027 GMT
Subject: CN=2A91E549E02B9FBA1325F489EC863BAA6AB53BBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:e8:92:2d:1d:0a:6c:67:c4:5b:27:0e:2f:
f0:ab:77:ed:d3:56:62:39:20:f3:b2:0c:cb:50:0d:
4f:00:70:9b:bb:36:fa:ed:3f:be:3c:f3:a3:e4:8b:
55:75:46:fd:a0:13:10:a6:14:4e:8c:00:82:24:02:
66:22:02:e7:89:c6:c0:a1:52:54:1d:b8:aa:e7:45:
86:db:34:4f:c8:4f:8b:09:08:f7:21:c0:df:bc:88:
05:f8:f9:9e:11:70:88:12:66:0a:75:fb:c6:dc:0a:
31:bb:c1:a6:72:28:9c:78:c9:fc:75:36:0e:b2:4a:
35:ca:8a:70:da:89:20:71:99:c8:40:6e:c8:c5:f0:
2e:c1:2d:27:a7:07:83:72:b0:58:c6:e3:57:5c:95:
98:79:ea:79:27:b1:7c:fd:1c:7d:6e:42:26:0b:c5:
d9:2c:be:b4:ad:4b:70:15:1d:38:6f:67:8b:c5:85:
15:18:79:e6:b7:e5:cf:76:8a:db:cc:8c:33:14:2e:
fa:51:94:15:f3:77:76:95:47:6e:ef:9d:9e:0d:b1:
7c:05:cd:45:79:6d:d1:a2:4a:f7:28:e7:6c:6c:c7:
b2:73:7f:14:35:ee:e9:7f:c9:38:c3:14:c0:50:13:
b1:ae:ed:95:69:98:05:57:a3:29:ea:65:ff:57:73:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:91:E5:49:E0:2B:9F:BA:13:25:F4:89:EC:86:3B:AA:6A:B5:3B:BD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37302e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:50:57:78:6b:69:c6:fb:a4:91:82:1b:ee:d7:09:cc:19:ba:
e4:b1:b4:8d:ee:a4:59:6a:76:a6:a9:3f:19:39:26:c7:be:d6:
c1:60:70:41:c7:07:44:96:b8:f4:a7:89:45:e6:8c:32:b9:1a:
36:fc:f2:20:ca:f8:41:44:00:91:09:88:78:db:fb:d1:f4:58:
a2:b2:bd:33:c9:07:22:0e:61:77:68:31:bc:6d:08:f7:68:32:
5a:fd:2a:a0:3f:7e:0a:9b:5d:e0:8d:4f:8c:5e:c1:32:80:29:
e6:7d:ed:f1:95:64:31:2f:0e:e7:47:56:1d:6f:c6:b0:c6:48:
33:6e:97:1c:1c:62:08:68:60:0c:09:0b:b3:67:ef:22:1b:d5:
fb:20:cf:25:7d:9e:8d:31:07:40:be:99:4b:37:d9:e8:99:73:
1b:4a:ef:17:c0:3a:a0:eb:81:dd:0e:9f:d5:0e:2d:93:a4:7c:
f6:0a:11:8f:f3:9b:ee:a9:a6:b7:b5:56:c5:b8:d7:db:fa:f4:
34:84:00:2a:f9:52:4f:f5:a8:fa:41:77:ff:78:b2:7c:56:15:
08:57:50:58:57:ac:a2:2b:24:a5:8c:68:7d:c5:9b:c0:74:28:
38:c4:0b:c5:4a:7c:17:a1:f8:a3:b2:b6:a2:c0:03:a4:54:33:
59:fc:67:a9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdWpNehvAOrJ/IoNtvzp5Sle2BLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAxMjEwOTE4MTBaFw0yNzAxMjAwOTIzMTBaMDMxMTAvBgNV
BAMTKDJBOTFFNTQ5RTAyQjlGQkExMzI1RjQ4OUVDODYzQkFBNkFCNTNCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUM+iSLR0KbGfEWycOL/Crd+3T
VmI5IPOyDMtQDU8AcJu7NvrtP74886Pki1V1Rv2gExCmFE6MAIIkAmYiAueJxsCh
UlQduKrnRYbbNE/IT4sJCPchwN+8iAX4+Z4RcIgSZgp1+8bcCjG7waZyKJx4yfx1
Ng6ySjXKinDaiSBxmchAbsjF8C7BLSenB4NysFjG41dclZh56nknsXz9HH1uQiYL
xdksvrStS3AVHThvZ4vFhRUYeea35c92itvMjDMULvpRlBXzd3aVR27vnZ4NsXwF
zUV5bdGiSvco52xsx7JzfxQ17ul/yTjDFMBQE7Gu7ZVpmAVXoynqZf9XcwMxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUKpHlSeArn7oTJfSJ7IY7qmq1O70wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzczNzJlMzczODJlMzczMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1O
RjANBgkqhkiG9w0BAQsFAAOCAQEAnFBXeGtpxvukkYIb7tcJzBm65LG0je6kWWp2
pqk/GTkmx77WwWBwQccHRJa49KeJReaMMrkaNvzyIMr4QUQAkQmIeNv70fRYorK9
M8kHIg5hd2gxvG0I92gyWv0qoD9+Cptd4I1PjF7BMoAp5n3t8ZVkMS8O50dWHW/G
sMZIM26XHBxiCGhgDAkLs2fvIhvV+yDPJX2ejTEHQL6ZSzfZ6JlzG0rvF8A6oOuB
3Q6f1Q4tk6R89goRj/Ob7qmmt7VWxbjX2/r0NIQAKvlST/Wo+kF3/3iyfFYVCFdQ
WFesoiskpYxofcWbwHQoOMQLxUp8F6H4o7K2osADpFQzWfxnqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:53 2026 by rpki-client