Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3131322e302f32302d3234203d3e20383334.roa
File: 37382e3130352e3131322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: yT/otMfFBHA8YkgbInq0mo5qX6qQDhwEgeg58elTPAY=
Subject key identifier: 33:E9:7A:44:87:C7:3F:77:A5:01:14:53:B0:38:9A:B0:88:74:E8:2D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 65536195D63FC77AE4880D5E8C196A1EC212ABA0
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3131322e302f32302d3234203d3e20383334.roa
Signing time: Wed 25 Mar 2026 02:21:16 +0000
ROA not before: Wed 25 Mar 2026 02:16:16 +0000
ROA not after: Wed 24 Mar 2027 02:21:16 +0000
asID: 834
IP address blocks: 78.105.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:53:61:95:d6:3f:c7:7a:e4:88:0d:5e:8c:19:6a:1e:c2:12:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 25 02:16:16 2026 GMT
Not After : Mar 24 02:21:16 2027 GMT
Subject: CN=33E97A4487C73F77A5011453B0389AB08874E82D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:ec:19:28:ba:66:58:8e:8d:16:f5:42:a7:
c1:5d:98:c4:1d:67:35:d6:65:37:53:85:a9:b8:a5:
7b:d1:97:d1:c0:10:87:af:ad:43:ce:cb:34:b5:d0:
0b:a2:f5:7c:2e:82:5a:ea:5f:b6:b0:93:2f:82:16:
2f:f8:14:85:c4:f9:91:81:33:af:13:cf:96:b5:aa:
2a:b3:6d:e0:fc:0a:7a:b3:71:bf:d2:c6:e1:b8:dc:
f3:5a:f5:8b:bf:80:30:7b:af:34:27:c5:f7:cd:05:
69:74:7e:6f:82:0f:de:5c:df:70:3f:92:8d:dc:5d:
49:8d:6b:20:3b:25:32:05:48:c2:dc:3b:08:b8:91:
cd:9e:9a:0f:f3:fa:75:84:22:0f:66:83:f7:4c:66:
60:fa:e4:ca:af:fa:c1:20:e5:e2:f6:f3:f9:f2:71:
59:3b:db:72:9d:bf:ab:fc:35:87:67:74:41:f3:be:
9d:ac:48:ab:64:d9:44:80:cf:90:e5:b7:1e:71:c3:
0a:03:1a:3c:0d:c3:b5:0d:2a:f0:c2:15:85:98:11:
91:c9:e1:88:5b:62:08:d7:08:67:fc:31:2e:d4:78:
2c:e5:6a:49:43:13:11:b8:0f:5d:32:1f:16:eb:be:
ee:90:38:12:98:76:de:2f:15:15:dc:bb:82:48:29:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E9:7A:44:87:C7:3F:77:A5:01:14:53:B0:38:9A:B0:88:74:E8:2D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3131322e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.112.0/20
Signature Algorithm: sha256WithRSAEncryption
35:9d:14:a8:94:e3:eb:41:57:c8:8e:9e:98:24:0f:30:a5:a1:
9d:78:20:97:ce:68:81:f2:56:c3:78:f1:c4:da:3f:e6:e7:5a:
ec:c4:0e:aa:c1:8d:28:e3:bc:e5:fe:cd:3f:c1:37:c5:85:54:
c2:a7:d9:a1:dd:bb:39:c8:0b:e1:e7:2d:f8:50:74:92:d7:90:
8e:ea:f1:f9:09:06:e7:78:bb:81:f1:05:aa:0d:50:6c:bc:c6:
16:2a:d4:13:58:7f:5d:4a:f4:50:83:61:bc:64:00:08:23:e8:
9a:71:48:40:28:0c:45:03:21:b5:9c:4f:ce:b0:e8:44:b1:67:
82:bd:2c:cb:d3:25:36:02:d5:3a:3c:3e:87:0e:44:87:8d:e2:
98:fa:6b:99:f2:30:3d:a6:a9:a5:f6:4e:5a:12:bc:e7:70:30:
ef:32:8a:60:97:5b:a1:26:6e:d0:71:c4:f7:ab:35:c6:b5:07:
0c:18:9e:a4:75:8a:96:9e:fb:eb:67:78:4c:a5:9d:4f:2d:6a:
ed:d1:29:a0:f0:8b:1c:97:eb:2c:e5:b0:61:08:72:73:83:79:
75:78:31:0b:3b:58:72:f5:fb:b4:6a:6d:79:7f:be:fd:be:c3:
cc:15:1c:0f:cf:07:3b:3f:0f:52:dc:9a:e8:0a:30:9b:11:dd:
18:d1:37:fc
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUZVNhldY/x3rkiA1ejBlqHsISq6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMjUwMjE2MTZaFw0yNzAzMjQwMjIxMTZaMDMxMTAvBgNV
BAMTKDMzRTk3QTQ0ODdDNzNGNzdBNTAxMTQ1M0IwMzg5QUIwODg3NEU4MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tuwZKLpmWI6NFvVCp8FdmMQd
ZzXWZTdTham4pXvRl9HAEIevrUPOyzS10Aui9XwuglrqX7awky+CFi/4FIXE+ZGB
M68Tz5a1qiqzbeD8Cnqzcb/SxuG43PNa9Yu/gDB7rzQnxffNBWl0fm+CD95c33A/
ko3cXUmNayA7JTIFSMLcOwi4kc2emg/z+nWEIg9mg/dMZmD65Mqv+sEg5eL28/ny
cVk723Kdv6v8NYdndEHzvp2sSKtk2USAz5Dltx5xwwoDGjwNw7UNKvDCFYWYEZHJ
4YhbYgjXCGf8MS7UeCzlaklDExG4D10yHxbrvu6QOBKYdt4vFRXcu4JIKb6tAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUM+l6RIfHP3elARRTsDiasIh06C0wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzczODJlMzEzMDM1MmUzMTMx
MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAROaXAw
DQYJKoZIhvcNAQELBQADggEBADWdFKiU4+tBV8iOnpgkDzCloZ14IJfOaIHyVsN4
8cTaP+bnWuzEDqrBjSjjvOX+zT/BN8WFVMKn2aHduznIC+HnLfhQdJLXkI7q8fkJ
Bud4u4HxBaoNUGy8xhYq1BNYf11K9FCDYbxkAAgj6JpxSEAoDEUDIbWcT86w6ESx
Z4K9LMvTJTYC1To8PocORIeN4pj6a5nyMD2mqaX2TloSvOdwMO8yimCXW6EmbtBx
xPerNca1BwwYnqR1ipae++tneEylnU8tau3RKaDwixyX6yzlsGEIcnODeXV4MQs7
WHL1+7RqbXl/vv2+w8wVHA/PBzs/D1LcmugKMJsR3RjRN/w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:58 2026 by rpki-client