Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3134342e302f32302d3234203d3e20383334.roa
File: 37382e3130352e3134342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: 6/gIQDg/HiLuQeqe7tM1OR6/2sYwjJ/5aEINt4WFx98=
Subject key identifier: F4:9E:5E:F6:58:77:55:12:56:86:56:99:FD:FA:CA:81:50:16:D7:7A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2DE32077DE99C4CDD82F82B7D6D589ABB85B5417
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3134342e302f32302d3234203d3e20383334.roa
Signing time: Tue 24 Mar 2026 13:02:02 +0000
ROA not before: Tue 24 Mar 2026 12:57:02 +0000
ROA not after: Tue 23 Mar 2027 13:02:02 +0000
asID: 834
IP address blocks: 78.105.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e3:20:77:de:99:c4:cd:d8:2f:82:b7:d6:d5:89:ab:b8:5b:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 24 12:57:02 2026 GMT
Not After : Mar 23 13:02:02 2027 GMT
Subject: CN=F49E5EF65877551256865699FDFACA815016D77A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:78:7f:49:b0:69:83:51:4f:1d:e5:e4:9c:
7a:77:1b:44:6b:1e:9c:dc:97:47:ba:09:89:4b:d9:
bb:99:18:43:1c:fa:48:19:4d:ba:4f:43:5e:5a:74:
04:80:42:28:5c:4d:2f:9e:8f:6f:62:58:be:f3:3e:
fe:e1:48:7f:18:a2:fd:56:93:70:05:14:78:2c:dd:
35:b6:2c:7f:91:dc:de:86:84:53:f4:6e:81:be:b9:
47:af:2f:1a:04:2c:61:05:d6:4d:3c:5b:f7:71:4d:
36:1d:be:83:89:f0:4e:b5:24:08:2a:4d:b6:69:3b:
ee:c4:24:4b:c9:13:ad:c6:31:2b:c5:97:a1:5a:dd:
96:db:86:f6:db:79:2c:d7:8b:aa:5a:72:9d:05:8a:
3a:33:78:6c:ac:2e:ad:9e:e8:86:a6:f3:51:f7:47:
e6:a8:ae:47:40:16:77:85:ad:5e:8c:28:6c:33:66:
0b:59:7f:d8:2c:53:b3:89:93:d5:2b:1a:05:d7:5f:
7d:cd:bc:c7:ea:44:50:56:a6:05:70:bb:76:00:e1:
14:fb:91:f3:74:e2:83:c0:04:82:c5:18:00:01:a6:
9f:eb:b0:fb:57:5d:b9:59:3a:d3:eb:56:6e:3a:b8:
df:de:7d:e7:68:8c:af:7c:89:f1:98:79:ec:ea:9e:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:5E:F6:58:77:55:12:56:86:56:99:FD:FA:CA:81:50:16:D7:7A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3134342e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:7a:27:d6:a6:e0:30:68:1a:49:aa:6f:5e:a7:12:12:2a:96:
e6:42:1e:48:4e:19:84:37:a5:fe:a8:7e:8f:11:16:66:ea:b5:
a8:57:a2:5c:ec:62:3b:1b:12:c5:81:5e:b2:11:b8:22:c0:a5:
2b:53:6d:a0:56:7d:09:69:3c:21:c7:d2:f6:9b:5b:c2:80:0d:
e9:3d:81:7e:d0:0b:eb:25:2a:3a:c9:16:a9:c7:56:ab:20:db:
84:96:4f:9e:c4:33:d3:f7:b0:3a:f5:25:7c:59:6b:e4:0b:3e:
84:ba:78:7d:1e:37:2d:84:07:a9:fd:7c:5e:45:32:a5:b5:9b:
de:e2:81:05:e5:37:6b:76:e3:b5:97:04:7f:b5:1b:ad:c4:b8:
ce:7c:86:c7:8b:7b:f4:a4:89:e4:1d:5e:68:65:47:87:4c:2a:
56:40:3c:8e:76:e7:38:e3:17:30:9c:c4:f6:23:46:cc:6e:4d:
6a:9c:ab:c4:75:c5:37:0a:0f:f1:08:d0:02:09:00:04:cb:1d:
7f:45:d3:21:f3:c7:22:72:4a:4e:71:40:86:4b:8a:6b:32:03:
94:73:7a:77:5e:35:47:85:55:9b:d0:65:d5:72:cc:42:a0:d6:
16:34:67:c1:7c:8e:ab:03:3c:27:73:4c:43:45:1b:71:5c:dc:
35:9a:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:51 2026 by rpki-client