Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa
File: 33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: dwQUswMLBdHs73UesXWAD0ZQg5qANZOmM6TyXUvfYUc=
Subject key identifier: B1:19:83:B6:46:78:85:20:C3:B8:FC:96:57:95:CE:ED:79:DA:7E:92
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 783C2685CE710997CE3BF5179013A67A1B1CAEF2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa
Signing time: Thu 24 Sep 2026 17:29:20 +0000
ROA not before: Thu 24 Sep 2026 17:24:20 +0000
ROA not after: Thu 23 Sep 2027 17:29:20 +0000
asID: 201341
IP address blocks: 37.140.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3c:26:85:ce:71:09:97:ce:3b:f5:17:90:13:a6:7a:1b:1c:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Sep 24 17:24:20 2026 GMT
Not After : Sep 23 17:29:20 2027 GMT
Subject: CN=B11983B646788520C3B8FC965795CEED79DA7E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:f2:af:f1:f2:76:05:0f:66:09:94:7f:06:
59:4c:12:62:32:b1:f4:82:dc:65:f4:7c:0b:e9:4a:
32:03:c0:99:d6:79:4f:e6:58:d6:7d:e0:09:1e:01:
23:87:b9:b1:03:15:bc:6f:af:3d:df:27:28:fe:79:
37:24:3f:24:0c:1d:ec:93:0a:d4:2d:9f:cb:37:40:
89:ae:25:65:5d:28:26:f3:a2:d4:20:55:84:09:09:
b6:8e:d1:4d:61:0c:0f:72:03:84:c2:ac:2d:79:19:
4d:8b:92:d1:24:42:39:a5:4a:2c:55:c7:f7:2e:6c:
c1:fb:e4:32:23:7c:e6:ff:4b:70:1e:9d:94:f5:c8:
29:23:da:a0:2e:42:d3:8c:11:d9:2c:da:64:b5:26:
6f:67:2c:b5:ea:99:ec:4f:d3:24:81:3b:c0:d7:a1:
85:c9:5a:2b:56:e2:e7:5d:68:34:cd:cc:ec:c1:5b:
69:9d:01:97:a3:f4:27:26:3b:b1:70:0f:f1:9c:f8:
73:6e:e1:47:87:0c:24:2b:73:97:87:aa:14:6f:0f:
e6:b5:f2:a9:ee:20:a7:5c:5f:8a:52:7b:c8:e1:95:
4e:f5:22:d8:a0:68:1c:e2:89:90:d1:d4:7b:db:0f:
3c:39:3f:5b:6e:61:78:3b:19:e1:62:bc:d6:2a:7a:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:83:B6:46:78:85:20:C3:B8:FC:96:57:95:CE:ED:79:DA:7E:92
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33372e3134302e3234362e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
25:23:64:9e:51:55:26:45:22:b2:b3:15:27:b4:e9:45:03:1a:
c7:01:ef:af:2f:bc:00:ad:ce:1f:97:2e:71:84:43:5a:b2:91:
10:d8:15:f9:3a:2e:7d:09:9b:f4:b1:6f:6d:89:92:25:94:6b:
e3:2c:ad:7b:12:79:16:82:e5:eb:f7:ea:9d:40:b1:18:07:83:
0a:6d:72:88:40:cd:ca:65:75:64:89:a8:7b:42:7b:ae:68:a9:
af:0f:ff:16:ff:e9:c5:39:4b:19:11:d8:a9:74:01:93:6e:80:
25:07:fc:d6:e3:4a:7b:a0:7d:e7:20:25:c1:1d:fd:0b:74:e1:
9a:72:67:27:e0:c9:35:42:de:dc:37:98:78:6c:a1:2c:b6:c9:
b0:a1:9f:4c:00:fe:fc:3c:43:75:f0:29:4a:24:55:13:12:ea:
62:03:59:f1:c9:6b:c8:71:4c:49:a9:8e:2c:14:92:31:0e:c6:
ea:78:ff:1a:92:d9:e0:0b:8c:fd:41:19:2e:e2:b8:98:5c:65:
ea:da:16:14:d6:bc:e2:e6:d3:74:10:c6:47:20:f9:18:49:17:
80:2a:2f:8e:78:fd:67:3b:0f:ec:f4:c6:9a:a7:c0:ca:df:da:
0c:82:d1:ef:d3:d8:19:18:3a:d0:e1:dc:09:bd:f5:ec:c0:75:
47:fd:b9:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:31:44 2026 by rpki-client