Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37372e302f32342d3234203d3e203438323636.roa
File: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=
Subject key identifier: C3:B1:A6:E9:26:89:74:96:9F:19:99:A1:67:12:E9:39:F4:64:54:A8
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 203ED6B8DE7F053C8F499035343BC9C90D635C27
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37372e302f32342d3234203d3e203438323636.roa
Signing time: Mon 06 Oct 2025 09:19:27 +0000
ROA not before: Mon 06 Oct 2025 09:14:27 +0000
ROA not after: Mon 05 Oct 2026 09:19:27 +0000
asID: 48266
IP address blocks: 77.81.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3e:d6:b8:de:7f:05:3c:8f:49:90:35:34:3b:c9:c9:0d:63:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Oct 6 09:14:27 2025 GMT
Not After : Oct 5 09:19:27 2026 GMT
Subject: CN=C3B1A6E9268974969F1999A16712E939F46454A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:2f:de:d1:af:ea:d0:cc:7b:e0:42:2f:36:
06:8a:f2:29:06:6f:ac:b3:43:0e:d8:ff:c2:6c:fb:
38:e4:f1:59:aa:75:6a:d0:5e:03:8d:52:7c:21:46:
74:40:04:04:f8:25:76:1b:c5:35:cc:d6:74:44:bb:
67:52:81:18:a6:96:f5:ae:0b:9a:15:43:9c:cb:9f:
a5:8b:b5:ed:84:19:82:42:b7:92:cc:86:1f:b3:ad:
a5:e3:c4:42:5b:2f:dc:ad:2f:62:c9:de:f1:d3:54:
94:c1:e6:f3:f5:94:91:7c:31:ec:37:a2:c0:fb:bc:
7a:0e:ea:64:58:10:92:84:dd:46:6b:86:88:de:77:
00:3e:dc:16:24:3b:18:9e:15:80:39:b2:ee:23:3b:
ea:f8:59:2b:96:37:a5:58:cd:1e:1e:27:6e:7c:da:
40:38:9f:3b:f7:e2:7b:6f:f7:ba:cb:24:16:a4:db:
06:aa:4f:f4:9a:d5:53:f4:04:76:24:c0:da:8b:ea:
33:c6:b5:e4:6b:a5:53:36:9c:3f:89:6d:00:2b:2e:
cf:0f:aa:ef:de:ba:a2:74:ab:bb:4d:fb:61:14:e5:
ba:af:2d:c6:f4:90:32:2a:71:99:49:1a:7d:07:9c:
38:c1:f6:42:ba:18:9e:6f:e6:c4:e5:0e:53:51:56:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:A6:E9:26:89:74:96:9F:19:99:A1:67:12:E9:39:F4:64:54:A8
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37372e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.77.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9b:43:2b:c9:fa:72:ca:8a:c8:ba:e1:8c:ae:6d:f4:fc:9d:
b9:db:ad:0d:9b:7c:51:a9:bf:87:4e:39:76:3d:d3:ef:2f:06:
ab:f0:61:e7:b8:ac:c1:a2:cd:07:38:5b:9b:33:9d:29:d4:dd:
00:91:58:92:78:fd:ad:e5:86:7f:62:5a:94:8d:a9:2a:c1:f2:
9d:61:c1:3f:f4:84:e2:75:6b:81:8b:0c:fd:e7:9d:77:73:8f:
54:84:bd:d8:69:c7:94:1f:36:8e:42:53:14:df:0d:d2:27:b9:
26:dc:88:1b:28:ed:1f:63:e8:30:fe:d9:cc:5f:dc:2c:96:10:
39:56:04:b7:ee:de:a4:70:97:39:cd:3f:c0:12:42:03:d1:48:
7d:69:3a:00:1b:8a:8d:2f:fd:d8:d5:e8:09:6f:87:67:cd:6f:
59:a6:00:27:1c:9e:b3:39:3c:34:60:86:19:10:b2:a6:3c:ec:
31:95:68:b5:7c:95:4b:d8:aa:e0:13:1a:83:bb:e6:7f:10:a3:
d1:44:6d:35:1c:68:a5:3a:e1:0b:e4:0e:0c:d8:a3:58:99:a9:
ea:49:e9:95:73:a7:e9:a1:ed:25:1b:f8:38:08:5d:16:fc:3c:
df:9d:50:3d:4e:a4:f7:66:5c:d3:87:a7:9c:97:77:22:28:ea:
ee:b4:68:e2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUID7WuN5/BTyPSZA1NDvJyQ1jXCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVlODY0OGU0NDVkY2NkMGQ4ZWU2OTlmNTE0MGJiODE0
ZTQzYWUxYjAeFw0yNTEwMDYwOTE0MjdaFw0yNjEwMDUwOTE5MjdaMDMxMTAvBgNV
BAMTKEMzQjFBNkU5MjY4OTc0OTY5RjE5OTlBMTY3MTJFOTM5RjQ2NDU0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIS/e0a/q0Mx74EIvNgaK8ikG
b6yzQw7Y/8Js+zjk8VmqdWrQXgONUnwhRnRABAT4JXYbxTXM1nREu2dSgRimlvWu
C5oVQ5zLn6WLte2EGYJCt5LMhh+zraXjxEJbL9ytL2LJ3vHTVJTB5vP1lJF8Mew3
osD7vHoO6mRYEJKE3UZrhojedwA+3BYkOxieFYA5su4jO+r4WSuWN6VYzR4eJ258
2kA4nzv34ntv97rLJBak2waqT/Sa1VP0BHYkwNqL6jPGteRrpVM2nD+JbQArLs8P
qu/euqJ0q7tN+2EU5bqvLcb0kDIqcZlJGn0HnDjB9kK6GJ5v5sTlDlNRVvnVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUw7Gm6SaJdJafGZmhZxLpOfRkVKgwHwYDVR0j
BBgwFoAURehkjkRdzNDY7mmfUUC7gU5DrhswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTMzYjJmZDctMzFjMS00NTFjLTgyODgtYzFhYTBhYTEy
NzUwLzAvNDVFODY0OEU0NDVEQ0NEMEQ4RUU2OTlGNTE0MEJCODE0RTQzQUUxQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JlaGtqa1Jkek5EWTdtbWZVVUM3Z1U1
RHJocy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTMzYjJmZDct
MzFjMS00NTFjLTgyODgtYzFhYTBhYTEyNzUwLzAvMzczNzJlMzgzMTJlMzczNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMjM2MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNUU0w
DQYJKoZIhvcNAQELBQADggEBAJmbQyvJ+nLKisi64YyubfT8nbnbrQ2bfFGpv4dO
OXY90+8vBqvwYee4rMGizQc4W5sznSnU3QCRWJJ4/a3lhn9iWpSNqSrB8p1hwT/0
hOJ1a4GLDP3nnXdzj1SEvdhpx5QfNo5CUxTfDdInuSbciBso7R9j6DD+2cxf3CyW
EDlWBLfu3qRwlznNP8ASQgPRSH1pOgAbio0v/djV6Alvh2fNb1mmACccnrM5PDRg
hhkQsqY87DGVaLV8lUvYquATGoO75n8Qo9FEbTUcaKU64QvkDgzYo1iZqepJ6ZVz
p+mh7SUb+DgIXRb8PN+dUD1OpPdmXNOHp5yXdyIo6u60aOI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:01 2025 by rpki-client