Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20343031383338.roa
File: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=
Subject key identifier: 93:3F:E4:0E:09:10:32:52:A3:7D:90:3A:58:76:AB:69:CA:D5:48:C4
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 7F77B5E8B913440EF3026C7DD95447AFB9D2FE27
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20343031383338.roa
Signing time: Wed 13 Aug 2025 05:14:19 +0000
ROA not before: Wed 13 Aug 2025 05:09:19 +0000
ROA not after: Wed 12 Aug 2026 05:14:19 +0000
asID: 401838
IP address blocks: 77.81.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 22:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:77:b5:e8:b9:13:44:0e:f3:02:6c:7d:d9:54:47:af:b9:d2:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Aug 13 05:09:19 2025 GMT
Not After : Aug 12 05:14:19 2026 GMT
Subject: CN=933FE40E09103252A37D903A5876AB69CAD548C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:11:f5:87:fd:d8:8e:da:ef:30:60:c9:e5:
25:00:30:07:8c:87:78:da:ca:b9:15:89:eb:34:16:
64:dd:6d:cc:27:dd:1f:6b:07:22:7c:2c:cb:c9:4c:
1a:70:31:1a:9d:d3:56:5b:fb:ef:0f:31:f8:80:30:
ce:ad:12:e6:27:90:d3:6b:15:fb:b2:1a:ac:bf:cf:
93:91:6d:65:9b:5c:78:b9:79:b1:6a:ba:59:1b:2a:
19:9a:be:51:15:7b:6e:b9:f4:5c:61:ac:a7:6d:fb:
ff:5c:4f:a4:de:84:05:ff:35:d7:c8:60:e5:bf:19:
6f:04:5b:14:21:24:a2:98:cf:ed:81:cc:c0:3a:e2:
24:2e:5a:ac:3c:b2:06:ce:5e:5f:30:5b:a2:7e:0a:
98:a8:58:67:c7:a1:91:8a:b8:cc:11:d6:cd:c5:c2:
e6:73:3e:e8:1f:5f:72:0c:5b:25:dc:b6:07:e4:e3:
0f:d9:e0:58:35:79:62:26:3a:b6:b0:aa:2c:34:3f:
c5:8f:b8:e6:69:3b:7e:84:7a:e1:3d:1e:90:9f:e7:
da:2a:8b:16:f2:d7:85:b8:cf:08:df:ca:f7:b9:99:
aa:2a:68:0d:82:a8:8c:0c:da:1b:01:cb:ef:c9:95:
f0:cb:c3:fc:3d:d3:15:a3:c2:c8:8d:82:fe:4a:52:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:E4:0E:09:10:32:52:A3:7D:90:3A:58:76:AB:69:CA:D5:48:C4
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e20343031383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4b:3b:fd:75:aa:c9:2f:a1:e1:dc:78:ca:80:71:13:aa:cd:
b2:1c:59:bb:0d:e7:16:a2:33:4f:03:a1:b7:76:05:f3:2b:b7:
2c:30:81:41:15:6d:31:30:f8:d6:67:89:04:66:37:9b:88:57:
a7:88:1a:b4:7c:56:15:10:8a:0c:3d:ce:13:78:1f:51:c8:3e:
d9:01:96:72:a6:32:59:0b:0a:ae:05:92:3e:88:be:bb:6e:0f:
fd:fd:63:16:50:e1:52:c0:65:00:bb:17:ba:d2:3a:0a:2e:50:
fa:10:50:f0:0e:9e:99:3a:16:06:f6:2a:a8:2c:49:cf:db:97:
c4:bf:ba:bb:56:ba:60:7f:2c:f2:67:46:e3:00:25:08:9c:9e:
25:58:27:aa:a9:0f:a0:88:d0:c0:6b:ef:96:7f:af:85:fa:6c:
68:0f:89:6c:a3:ee:f9:76:15:4c:a9:b5:60:ec:3d:8c:0f:f7:
f8:17:9a:8c:65:79:26:b3:e5:68:73:16:b3:02:d9:79:d0:10:
29:9d:cd:7a:7c:7d:b3:46:ec:db:7e:e1:f9:82:c4:cf:6e:71:
e5:85:28:aa:43:80:f0:76:4a:a2:8a:31:a1:cd:d3:fe:af:f7:
ae:90:d1:c2:c6:53:55:c1:2a:05:81:17:1b:1e:18:61:4d:3b:
1d:fd:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:52 2025 by rpki-client