Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3130342e302f32312d3234203d3e20383334.roa
File: 37382e3130352e3130342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: CNtD/rpwP3rgQzfqo1Pj2uTARTxyg2iqkzrWYBxr7rk=
Subject key identifier: FF:7E:2C:CA:C5:00:38:43:0A:C9:0B:A7:BC:90:29:56:D9:2C:D8:30
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 55C0DE5AF8422E0529DC82C1DD2AC0A112D7EDA3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3130342e302f32312d3234203d3e20383334.roa
Signing time: Wed 25 Mar 2026 02:21:16 +0000
ROA not before: Wed 25 Mar 2026 02:16:16 +0000
ROA not after: Wed 24 Mar 2027 02:21:16 +0000
asID: 834
IP address blocks: 78.105.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c0:de:5a:f8:42:2e:05:29:dc:82:c1:dd:2a:c0:a1:12:d7:ed:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 25 02:16:16 2026 GMT
Not After : Mar 24 02:21:16 2027 GMT
Subject: CN=FF7E2CCAC50038430AC90BA7BC902956D92CD830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:31:2b:78:d3:d6:b2:32:72:9c:ce:48:a3:
d1:3c:8e:c6:dd:96:8c:b4:e2:16:b9:c5:77:25:aa:
6d:b7:91:61:6a:19:63:d1:8d:4c:84:ca:4b:af:13:
6c:57:47:d5:f0:41:7e:76:82:93:89:34:03:3e:79:
56:30:3d:2b:43:11:79:97:18:0f:2d:86:13:01:10:
aa:7f:a9:a6:29:7d:90:a2:0c:6f:6b:8a:e2:ee:49:
86:da:ff:10:e1:eb:70:ba:bc:f4:1e:5e:e4:b4:78:
6c:ce:5a:b4:18:72:6f:2f:b3:03:c9:10:4b:02:b7:
73:7c:97:88:77:68:9d:69:03:27:8c:f7:69:78:4e:
d7:3f:f3:e2:09:7d:99:dd:31:86:35:29:04:13:78:
04:f4:c9:9d:b5:27:6d:d4:15:61:a1:b6:ea:18:3d:
6d:fb:54:ea:28:9a:d9:5c:b9:14:40:fe:d8:71:14:
43:6f:64:cd:51:ac:25:65:e9:f7:35:a1:c5:0e:ee:
8f:2f:07:7f:70:5f:2f:51:43:2b:55:cf:ff:34:51:
37:3e:2e:70:75:2d:3d:78:d5:9d:64:7d:b0:bd:66:
1f:b9:05:14:29:4f:59:d2:3a:f1:51:b2:83:03:70:
95:1c:f6:21:c0:23:11:30:4e:aa:7d:78:54:4f:93:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:2C:CA:C5:00:38:43:0A:C9:0B:A7:BC:90:29:56:D9:2C:D8:30
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3130342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.104.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:99:5d:26:fc:76:d6:53:36:36:75:cb:79:9c:50:08:78:98:
24:77:1a:aa:99:99:d9:0a:8c:b5:c1:e7:76:7f:2e:3b:34:55:
bb:75:b1:a9:11:8b:e4:5a:b5:e1:27:31:1d:db:52:79:e3:d0:
58:d3:d3:a0:ae:3b:64:34:49:af:8b:99:e8:b0:63:e3:01:9c:
46:c1:9e:21:4c:48:b9:5c:a1:0d:3f:7c:03:66:79:72:03:a0:
6a:a1:0b:7e:b1:f3:46:42:ee:8f:75:75:8d:1d:14:fc:b2:b3:
47:3b:c3:5c:2b:16:20:e8:c2:20:c7:6e:30:ac:a1:6d:df:9b:
41:e3:55:dd:df:a2:6d:56:59:0a:9e:f2:e0:ad:87:c5:9f:cc:
d2:91:c8:ab:d5:fe:bd:57:62:7d:e9:4a:f4:d5:ff:59:d4:16:
f7:75:be:3b:0e:61:67:c5:9f:d3:be:62:ea:49:0a:43:93:ad:
ef:e6:64:1f:fa:f7:a3:f3:2e:a3:bf:34:f6:1b:5a:44:ea:56:
04:36:d6:40:e1:bc:0b:c7:42:cb:0b:d5:25:5a:ec:bd:ba:8e:
c0:65:c2:61:d3:b5:ca:37:ad:d5:58:ab:84:b7:ff:45:98:fc:
a7:34:9f:56:96:8c:c2:46:ce:b1:a0:fc:87:a6:f7:89:86:37:
14:de:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:44 2026 by rpki-client