Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3234382e302f32312d3234203d3e2035363530.roa
File: 37382e3130352e3234382e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: PpKH6q4tpRiJVN61GgrXl3wxkMp1FkWqwEXSzk6Qy4w=
Subject key identifier: 45:3A:AD:69:CA:FC:82:46:AE:B1:C3:D7:85:4B:A1:5F:31:12:EE:C2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 1C78CB2BEECFE07FE4D6630F5FBE7B1976351CBF
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3234382e302f32312d3234203d3e2035363530.roa
Signing time: Tue 24 Mar 2026 12:59:06 +0000
ROA not before: Tue 24 Mar 2026 12:54:06 +0000
ROA not after: Tue 23 Mar 2027 12:59:06 +0000
asID: 5650
IP address blocks: 78.105.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:78:cb:2b:ee:cf:e0:7f:e4:d6:63:0f:5f:be:7b:19:76:35:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 24 12:54:06 2026 GMT
Not After : Mar 23 12:59:06 2027 GMT
Subject: CN=453AAD69CAFC8246AEB1C3D7854BA15F3112EEC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1e:e1:cc:45:bc:92:87:d6:77:9a:ce:e0:16:
17:c5:8c:74:07:66:b5:dd:f6:0f:d9:50:82:43:13:
27:46:2d:16:c8:7c:fa:70:89:2e:c0:03:ac:89:49:
bc:6f:d4:05:49:32:59:97:b5:43:37:18:78:db:b3:
0c:ec:e1:6f:af:47:aa:3c:68:1b:09:01:11:97:47:
ec:dd:8f:f4:70:1a:41:7f:16:98:9c:65:44:d1:a8:
49:4d:62:fe:66:e1:1e:9b:a1:08:c1:ef:91:cb:04:
f8:74:5a:af:8f:de:cc:a0:b6:8a:67:37:ac:42:86:
63:39:ed:df:78:5c:fe:3e:6c:37:52:d2:df:61:b4:
bf:b6:82:c2:73:c6:0b:88:a1:8e:7d:d7:fa:0b:8d:
ed:d3:74:77:50:de:fe:83:09:71:f8:67:79:ca:d2:
3e:36:f5:61:76:6e:bb:4f:07:ce:b7:46:eb:2a:c7:
c9:c0:97:5c:29:54:ef:36:31:20:8a:e5:dc:95:bc:
94:20:55:d5:4f:b1:ef:1c:cb:24:9f:4b:2b:02:a0:
04:98:5e:3e:80:7c:02:f4:b4:c5:8e:29:be:6c:34:
26:54:05:02:28:55:23:32:53:1a:38:15:72:f4:c8:
b4:de:28:89:eb:2d:54:af:65:7b:df:49:4a:6c:e5:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:AD:69:CA:FC:82:46:AE:B1:C3:D7:85:4B:A1:5F:31:12:EE:C2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/37382e3130352e3234382e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.105.248.0/21
Signature Algorithm: sha256WithRSAEncryption
42:97:9c:b4:f2:48:c0:11:60:e6:98:5d:c9:9f:3c:16:e8:ca:
20:34:35:a6:f7:13:9b:f8:20:09:e2:fa:b0:38:19:66:22:c5:
6e:cf:6e:12:be:77:32:bd:56:af:bd:bf:64:4b:af:30:4f:42:
08:48:2e:79:73:75:26:91:ba:85:59:dc:a9:35:6d:f4:7b:be:
da:97:cc:03:59:8f:cf:95:0d:29:a3:50:14:3e:a7:7d:5d:6f:
5d:2c:5a:50:44:82:6c:5b:29:fa:12:6c:3e:cd:a2:18:f1:b5:
fe:76:b0:70:39:75:59:59:e8:aa:5e:35:a5:47:7e:82:df:53:
7d:8a:2a:32:6a:27:f5:02:39:b7:3e:33:58:3a:63:a1:65:0a:
0e:04:47:87:ff:6a:ce:19:fa:2e:da:29:5e:77:17:66:9d:f4:
74:26:a4:da:10:ee:16:7d:4e:11:29:4a:9a:39:ce:66:92:8c:
5f:99:fd:85:4b:aa:85:c8:a8:21:44:21:65:03:b6:5c:e3:0e:
fe:25:68:08:67:26:ed:02:d8:63:c6:60:08:f7:df:f8:ee:85:
c6:61:be:4c:ce:cb:54:14:2e:e3:dc:43:44:2c:49:15:52:d0:
43:15:1f:74:32:b8:de:2b:bb:61:f2:47:5f:1e:39:64:80:56:
b5:22:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:39 2026 by rpki-client