Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323130353436.roa
File: 37322e342e36342e302f32312d3234203d3e20323130353436.roa (raw, json)
Hash identifier: 3HoCLBQvrCiDsa8r01UTnlbfabOdnsCU4K+/+QNFf8k=
Subject key identifier: B5:6F:D9:6A:6B:AE:A2:5A:17:90:1F:F2:AC:9D:22:F5:C2:95:09:80
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 1C52F68C13D5BC71906A2933195C9C588A23698C
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323130353436.roa
Signing time: Mon 21 Sep 2026 16:52:44 +0000
ROA not before: Mon 21 Sep 2026 16:47:44 +0000
ROA not after: Mon 20 Sep 2027 16:52:44 +0000
asID: 210546
IP address blocks: 72.4.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:52:f6:8c:13:d5:bc:71:90:6a:29:33:19:5c:9c:58:8a:23:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Sep 21 16:47:44 2026 GMT
Not After : Sep 20 16:52:44 2027 GMT
Subject: CN=B56FD96A6BAEA25A17901FF2AC9D22F5C2950980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:99:a9:20:0a:8d:f4:49:27:e4:07:e0:5a:
9b:35:6c:c8:3a:05:9c:93:44:4b:b6:16:20:19:45:
93:41:f9:54:8c:55:48:6a:3f:6e:40:45:5c:d4:47:
f1:52:d5:49:5c:b9:3d:66:09:0d:1b:0c:a5:45:bd:
d8:0a:36:23:3e:4c:b3:db:4d:6c:7b:e7:ce:2d:d7:
b8:56:36:c4:d4:15:a5:d7:53:86:9d:3d:ba:ad:b5:
27:cc:12:d1:db:2f:04:31:78:bd:bf:57:c7:6a:12:
d9:bb:1a:8c:e5:97:94:0a:06:3d:39:b4:91:82:c0:
87:ca:f0:ac:9e:24:47:1c:0c:b2:52:e7:ce:f9:c8:
2d:92:04:83:a5:37:eb:b3:63:ec:15:a5:b9:09:09:
db:87:18:11:80:ba:d7:89:a0:86:ff:b0:0d:85:f0:
8d:eb:66:99:46:82:07:d8:f9:a5:24:25:17:8e:00:
a7:97:76:ca:8a:4b:86:80:76:bd:b7:53:a0:55:80:
02:3f:62:bf:c2:41:6a:f3:e0:23:b3:b2:c9:0e:a2:
ac:0d:d2:23:dc:41:42:6e:1c:10:80:5c:68:48:86:
43:47:5c:5e:2d:c8:22:2d:6d:c5:6b:28:ea:4a:da:
25:3f:d9:27:e1:61:38:56:3e:a9:dd:58:2d:77:90:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:D9:6A:6B:AE:A2:5A:17:90:1F:F2:AC:9D:22:F5:C2:95:09:80
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323130353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.4.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:5f:ae:07:01:2c:d4:9c:29:18:17:59:9d:d0:5f:8e:1e:2c:
87:5f:1e:7f:b8:b9:b5:ac:c4:64:0e:64:06:67:3e:dd:12:1b:
ec:ec:c1:9e:b7:5b:e9:80:81:40:67:23:87:de:13:b3:50:9f:
31:b7:62:ec:c2:52:07:1f:e3:3d:6e:fd:91:af:19:53:67:b2:
33:3a:05:70:cc:9d:c4:b6:30:45:3d:42:05:69:cb:41:3a:b6:
1a:8d:fd:1e:ae:7c:89:56:86:4f:4e:b2:62:f4:5f:55:bd:8a:
b0:6a:fd:ae:af:29:79:75:fa:0a:7a:17:ef:9e:60:5e:f2:fe:
c6:b8:7e:dc:2b:73:05:da:66:be:a6:51:78:f4:b8:21:65:aa:
66:fc:85:31:3e:72:73:09:b2:49:93:15:19:48:b9:74:7b:85:
08:28:01:8d:58:1b:5e:3f:f8:5d:44:be:39:d3:f0:ff:65:02:
6e:7b:cd:36:77:d0:3c:ee:6b:10:89:0b:d3:cd:55:80:c3:f6:
26:a2:61:85:8a:52:cf:6d:b6:1b:72:57:fa:06:73:32:88:b5:
f2:fd:24:8c:1b:28:df:f7:c0:e3:bd:20:22:ff:5f:2e:aa:28:
13:0a:aa:0c:b8:b9:8c:15:e4:c3:c8:b3:2e:21:65:71:ec:7a:
ed:93:0d:f3
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUHFL2jBPVvHGQaikzGVycWIojaYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNjA5MjExNjQ3NDRaFw0yNzA5MjAxNjUyNDRaMDMxMTAvBgNV
BAMTKEI1NkZEOTZBNkJBRUEyNUExNzkwMUZGMkFDOUQyMkY1QzI5NTA5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARpmpIAqN9Ekn5AfgWps1bMg6
BZyTREu2FiAZRZNB+VSMVUhqP25ARVzUR/FS1UlcuT1mCQ0bDKVFvdgKNiM+TLPb
TWx7584t17hWNsTUFaXXU4adPbqttSfMEtHbLwQxeL2/V8dqEtm7Gozll5QKBj05
tJGCwIfK8KyeJEccDLJS5875yC2SBIOlN+uzY+wVpbkJCduHGBGAuteJoIb/sA2F
8I3rZplGggfY+aUkJReOAKeXdsqKS4aAdr23U6BVgAI/Yr/CQWrz4COzsskOoqwN
0iPcQUJuHBCAXGhIhkNHXF4tyCItbcVrKOpK2iU/2SfhYThWPqndWC13kFXHAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUtW/ZamuuoloXkB/yrJ0i9cKVCYAwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt
OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzczMjJlMzQyZTM2MzQyZTMw
MmYzMjMxMmQzMjM0MjAzZDNlMjAzMjMxMzAzNTM0MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANIBEAw
DQYJKoZIhvcNAQELBQADggEBAKZfrgcBLNScKRgXWZ3QX44eLIdfHn+4ubWsxGQO
ZAZnPt0SG+zswZ63W+mAgUBnI4feE7NQnzG3YuzCUgcf4z1u/ZGvGVNnsjM6BXDM
ncS2MEU9QgVpy0E6thqN/R6ufIlWhk9OsmL0X1W9irBq/a6vKXl1+gp6F++eYF7y
/sa4ftwrcwXaZr6mUXj0uCFlqmb8hTE+cnMJskmTFRlIuXR7hQgoAY1YG14/+F1E
vjnT8P9lAm57zTZ30DzuaxCJC9PNVYDD9iaiYYWKUs9tthtyV/oGczKItfL9JIwb
KN/3wOO9ICL/Xy6qKBMKqgy4uYwV5MPIsy4hZXHseu2TDfM=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:18 2026 by rpki-client