Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323135353930.roa
File: 37322e342e36342e302f32312d3234203d3e20323135353930.roa (raw, json)
Hash identifier: UU1yktOfkcvmH8tNoOrtykdTweA/Ii+eyGWqUS9LW9w=
Subject key identifier: 47:54:98:D9:72:F0:D3:ED:48:35:25:0C:9B:24:00:FB:FB:FC:DD:BF
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 5AA2D5D8C56512A3BD8079C168088934E2D40365
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323135353930.roa
Signing time: Mon 21 Sep 2026 16:51:25 +0000
ROA not before: Mon 21 Sep 2026 16:46:25 +0000
ROA not after: Mon 20 Sep 2027 16:51:25 +0000
asID: 215590
IP address blocks: 72.4.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a2:d5:d8:c5:65:12:a3:bd:80:79:c1:68:08:89:34:e2:d4:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Sep 21 16:46:25 2026 GMT
Not After : Sep 20 16:51:25 2027 GMT
Subject: CN=475498D972F0D3ED4835250C9B2400FBFBFCDDBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:5e:c2:e5:f2:be:62:ee:9b:e4:5d:bf:b4:
73:00:7a:6e:3b:f3:2d:89:96:37:bd:24:67:03:6b:
d9:ee:48:7d:8a:8f:c1:b3:78:34:38:c4:20:23:36:
0f:ca:6c:53:6d:4f:6a:d6:f7:4b:fe:36:f9:d2:7a:
c0:84:04:86:af:da:3b:ca:de:b6:0d:7f:6f:fb:08:
21:98:e9:31:b9:57:af:4f:c7:19:20:3a:a8:c9:cd:
ef:61:97:b6:f0:31:27:e2:8f:cb:cb:a7:70:4b:2f:
3c:b5:b7:9a:6f:85:47:04:b5:8c:95:d7:c0:2a:a8:
57:64:5e:35:83:b0:91:ef:da:b6:eb:06:d4:18:99:
b8:d5:a8:8f:ce:a1:b6:13:81:c8:29:77:d0:99:59:
e4:32:98:42:59:02:08:89:2d:51:0e:28:d4:83:e8:
02:dc:7b:02:8b:6e:01:89:7d:6c:63:c1:b0:b5:a0:
b1:27:40:10:99:37:c3:1c:4d:53:8f:b1:08:a7:65:
70:9a:3c:6c:03:a5:0b:5c:a1:b5:9b:48:d2:55:10:
11:26:a9:c3:09:dc:4d:d3:ed:92:a9:33:42:31:e5:
b0:f7:d5:94:95:05:80:e3:a4:12:7b:01:84:45:64:
52:02:e1:7b:2b:7f:36:48:dd:ea:06:d5:d5:83:e3:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:54:98:D9:72:F0:D3:ED:48:35:25:0C:9B:24:00:FB:FB:FC:DD:BF
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/37322e342e36342e302f32312d3234203d3e20323135353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.4.64.0/21
Signature Algorithm: sha256WithRSAEncryption
45:8f:87:64:f4:3e:a9:72:d1:9e:12:24:72:e8:8a:46:1f:34:
44:db:47:72:8d:db:a6:40:95:19:40:2b:cd:87:4f:fb:76:da:
cf:7a:a9:28:d6:6f:5a:85:b6:c1:04:44:e7:ea:13:0f:c7:5b:
0f:a7:d3:a4:c4:9c:20:40:0d:31:ff:83:da:f4:4e:6a:09:9d:
53:ec:ae:ac:e7:64:b9:1f:b6:37:a1:e0:43:9d:dd:18:91:8e:
79:4e:f3:74:64:48:57:09:b3:01:1b:71:41:fe:ee:75:46:77:
d3:68:6e:a7:76:cb:eb:80:34:26:94:d5:52:7c:67:c4:a3:33:
1a:77:c5:2e:cb:df:ed:49:1a:d2:e0:6e:cd:43:14:f2:36:45:
cc:54:2b:a8:5d:35:ce:23:cb:3e:b4:a7:7b:0f:83:d9:41:91:
ba:b6:74:f3:23:97:27:e4:f2:dd:11:5d:bd:9b:df:0c:99:4e:
1c:20:0d:f7:7f:04:28:29:45:ca:8e:66:db:a2:de:c7:af:88:
72:3d:13:17:ec:c9:5d:a3:f9:fc:c4:02:7c:ae:b6:3d:d6:30:
3f:af:a3:d3:6f:b7:4f:b8:be:7f:eb:9c:db:45:45:fb:57:17:
3c:90:68:6f:84:9e:d4:00:fb:1d:a7:43:9d:28:03:d1:be:1b:
00:2e:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:36:12 2026 by rpki-client