Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323133383737.roa
File: 37322e342e36342e302f32312d3234203d3e20323133383737.roa (raw, json)
Hash identifier: 5JuaVyoj7uoMOOuQAfWYB3bD3lyM6lnGctkuEoNIEqE=
Subject key identifier: 01:25:55:EA:52:FC:7E:03:3E:52:B6:50:C9:40:FE:19:9F:BF:55:67
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 515903696B2861761A076CDDFD7041A4931CDCFD
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323133383737.roa
Signing time: Mon 21 Sep 2026 16:51:07 +0000
ROA not before: Mon 21 Sep 2026 16:46:07 +0000
ROA not after: Mon 20 Sep 2027 16:51:07 +0000
asID: 213877
IP address blocks: 72.4.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:59:03:69:6b:28:61:76:1a:07:6c:dd:fd:70:41:a4:93:1c:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Sep 21 16:46:07 2026 GMT
Not After : Sep 20 16:51:07 2027 GMT
Subject: CN=012555EA52FC7E033E52B650C940FE199FBF5567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:2b:41:26:a0:f1:23:b5:7a:33:67:3b:34:
92:d2:75:5b:71:0b:13:bb:51:8f:84:08:11:f7:ae:
21:75:f2:88:bf:7a:58:a0:a9:3e:08:3b:0b:a3:84:
c0:5e:6a:17:6c:2a:24:32:e4:9a:fd:10:00:16:38:
36:eb:37:8b:4c:9f:a6:55:f0:97:79:db:47:fa:97:
0f:aa:aa:43:ac:d1:3c:e9:2b:66:26:a9:ff:04:0d:
0d:79:9b:36:d1:47:70:91:be:4a:e2:ae:15:6b:a0:
76:a8:29:59:db:98:2f:db:12:9a:12:9a:d5:11:4a:
4e:16:08:de:c5:0c:b0:7d:1c:51:2f:36:28:63:28:
c4:41:a8:29:f0:5b:68:eb:7c:c9:45:19:27:cb:f6:
b1:77:d3:db:38:ce:67:c9:dd:98:61:43:79:59:7a:
40:b6:0b:1e:d4:d5:40:6b:61:bc:43:a7:4a:17:d6:
94:d0:bb:32:f8:18:ed:53:2b:62:fd:33:e4:1d:6a:
89:9a:ec:23:f9:b8:40:34:ec:2a:8a:7f:e3:10:c6:
94:bd:9c:e0:64:04:83:c3:a7:c8:ea:88:00:c2:f3:
e0:38:9e:57:10:21:57:ad:bb:0a:2e:20:c9:66:20:
9d:15:09:25:74:e1:63:c9:72:55:6a:16:13:c0:cb:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:55:EA:52:FC:7E:03:3E:52:B6:50:C9:40:FE:19:9F:BF:55:67
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323133383737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.4.64.0/21
Signature Algorithm: sha256WithRSAEncryption
83:8a:b4:5b:1f:c5:34:95:7c:df:0a:91:7f:d3:92:a4:a6:38:
44:46:da:82:da:96:a9:ad:e3:3f:a9:86:34:ac:c2:ee:15:d6:
92:e2:3b:f8:0d:10:7f:2f:c9:9b:de:ca:2f:ae:9d:1e:cc:b4:
f9:81:35:2b:44:3c:4b:ec:f7:c7:de:98:1d:7a:40:19:a4:49:
89:68:69:a7:8b:20:8a:e8:64:ab:5a:d8:0a:27:5a:4c:39:2c:
6f:54:93:ae:48:65:dc:73:ce:ae:be:04:e8:fb:9e:24:56:69:
84:eb:22:9e:e1:7b:6b:16:f0:a0:82:33:65:ac:6d:7d:24:e4:
63:9d:21:d5:1f:8c:cd:47:e3:01:b7:9c:cd:b0:95:e9:73:8c:
23:f5:7e:3a:5b:6c:c5:27:d6:12:23:02:3e:fd:f4:c2:49:f7:
82:19:73:b4:b3:c1:26:38:dd:1a:5d:d2:93:be:07:4c:d9:fb:
0d:56:35:a6:ac:55:22:2e:df:e0:ac:60:7e:c3:88:e6:68:23:
07:f1:3f:d8:b2:ac:65:e6:6a:f6:df:c8:ba:c9:98:c9:37:3c:
6a:e9:47:81:a8:91:4e:10:40:2d:35:76:f3:1b:92:e0:80:86:
dd:ca:92:fe:45:ba:ea:b7:ff:4c:19:a6:f0:0f:de:3e:37:45:
43:45:72:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:27 2026 by rpki-client