Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e203539383935.roa
File: 37372e38332e3130362e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: rKcXYAbD0EzWWrrsYRhqwdMJomkAPyh4fXa29GzNLXk=
Subject key identifier: 78:3B:F7:59:5F:E9:DC:62:2A:0C:44:37:BD:73:79:DA:F3:45:15:7B
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6D550E34552BD1C61BA70F5A132D4D366276A8F4
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e203539383935.roa
Signing time: Tue 30 Sep 2025 13:55:07 +0000
ROA not before: Tue 30 Sep 2025 13:50:07 +0000
ROA not after: Tue 29 Sep 2026 13:55:07 +0000
asID: 59895
IP address blocks: 77.83.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:55:0e:34:55:2b:d1:c6:1b:a7:0f:5a:13:2d:4d:36:62:76:a8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 30 13:50:07 2025 GMT
Not After : Sep 29 13:55:07 2026 GMT
Subject: CN=783BF7595FE9DC622A0C4437BD7379DAF345157B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:e9:59:0d:ba:53:58:1b:80:d1:06:ae:30:
41:d0:08:8b:ff:6e:94:44:6c:98:6c:00:8d:1f:72:
18:06:60:23:94:8d:86:1e:c4:8f:01:d1:27:c0:0c:
7e:b7:03:c8:e1:9e:b6:b3:9a:a9:ce:b3:2e:ed:0d:
4f:96:e5:b6:25:b3:f3:b5:d3:db:ab:34:ae:9b:92:
c8:49:15:9f:95:44:b5:ec:dc:68:33:49:b4:35:92:
89:25:a8:68:65:ac:92:e3:0a:1b:4c:a5:1c:53:81:
f6:24:9b:cf:07:7a:a2:ea:dd:62:48:6d:c1:b4:f8:
c4:41:08:9d:cb:0e:b3:1e:e7:88:02:f9:3a:39:2a:
09:03:31:ad:34:79:4a:d2:0f:df:08:ee:af:8a:93:
1a:e3:b7:e1:e2:d7:a7:08:54:62:54:b5:b2:04:eb:
5e:19:03:38:7b:49:98:23:d9:13:7f:7e:53:23:5e:
96:12:fa:fd:7d:52:ab:43:d7:2c:10:d1:44:ea:d3:
78:3b:a1:57:21:8d:04:04:b0:03:9b:2b:89:62:ea:
7d:e2:32:9e:a7:ac:65:ff:dc:6f:37:b9:32:aa:15:
5d:be:77:fc:da:b6:6e:bf:56:a7:a6:f9:1f:8a:0c:
fa:f0:09:db:f0:1a:bd:a9:46:cc:6a:ff:e9:4f:61:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:F7:59:5F:E9:DC:62:2A:0C:44:37:BD:73:79:DA:F3:45:15:7B
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130362e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
80:69:ea:c5:79:dc:58:2f:7a:1d:3a:91:16:f4:4d:2e:8e:bb:
95:fd:97:86:fa:23:06:a5:53:94:ec:98:a6:97:0d:5d:b9:a6:
8c:09:f2:1b:25:f0:b8:18:2e:a4:53:dc:b0:b6:d1:b7:64:4f:
1b:48:2d:f6:78:33:40:8d:3f:2b:0f:db:59:fc:f5:cf:f6:43:
43:f6:85:ef:4d:ac:48:a9:47:6d:0c:13:a5:33:e7:24:9a:66:
c3:d7:ba:b2:fb:02:c9:c2:ce:a6:07:c9:df:53:d7:9b:0a:23:
db:84:37:28:ca:16:73:8c:87:98:26:fc:f6:64:70:c7:90:78:
91:5c:4b:82:2b:12:9e:be:0c:cc:a7:dd:5c:7c:da:cf:fa:c8:
d1:83:ff:06:15:09:ae:35:0d:8c:55:a9:a9:10:08:f5:67:06:
9e:64:eb:34:1b:32:2a:61:69:eb:bf:72:e6:41:fe:ee:10:7e:
8a:fc:cd:4c:2e:0f:2a:74:47:8b:bb:3c:26:ff:38:2d:e8:99:
d4:23:d2:12:b6:9d:76:1c:97:ed:ba:d5:bc:e5:d4:29:2b:4b:
e1:6f:d4:41:d0:ce:f7:3d:14:90:c7:50:e5:df:90:5b:59:1a:
79:c4:c9:01:0c:69:f5:73:7f:26:77:aa:07:51:76:52:37:86:
0c:b6:a9:fe
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbVUONFUr0cYbpw9aEy1NNmJ2qPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNTA5MzAxMzUwMDdaFw0yNjA5MjkxMzU1MDdaMDMxMTAvBgNV
BAMTKDc4M0JGNzU5NUZFOURDNjIyQTBDNDQzN0JENzM3OURBRjM0NTE1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48elZDbpTWBuA0QauMEHQCIv/
bpREbJhsAI0fchgGYCOUjYYexI8B0SfADH63A8jhnrazmqnOsy7tDU+W5bYls/O1
09urNK6bkshJFZ+VRLXs3GgzSbQ1koklqGhlrJLjChtMpRxTgfYkm88HeqLq3WJI
bcG0+MRBCJ3LDrMe54gC+To5KgkDMa00eUrSD98I7q+Kkxrjt+Hi16cIVGJUtbIE
614ZAzh7SZgj2RN/flMjXpYS+v19UqtD1ywQ0UTq03g7oVchjQQEsAObK4li6n3i
Mp6nrGX/3G83uTKqFV2+d/zatm6/Vqem+R+KDPrwCdvwGr2pRsxq/+lPYWpHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUeDv3WV/p3GIqDEQ3vXN52vNFFXswHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTM4MzkzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1T
ajANBgkqhkiG9w0BAQsFAAOCAQEAgGnqxXncWC96HTqRFvRNLo67lf2XhvojBqVT
lOyYppcNXbmmjAnyGyXwuBgupFPcsLbRt2RPG0gt9ngzQI0/Kw/bWfz1z/ZDQ/aF
702sSKlHbQwTpTPnJJpmw9e6svsCycLOpgfJ31PXmwoj24Q3KMoWc4yHmCb89mRw
x5B4kVxLgisSnr4MzKfdXHzaz/rI0YP/BhUJrjUNjFWpqRAI9WcGnmTrNBsyKmFp
679y5kH+7hB+ivzNTC4PKnRHi7s8Jv84LeiZ1CPSEraddhyX7brVvOXUKStL4W/U
QdDO9z0UkMdQ5d+QW1kaecTJAQxp9XN/JneqB1F2UjeGDLap/g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:52 2025 by rpki-client