Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38352e302f32342d3234203d3e203437353833.roa
File: 37372e3234332e38352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: KOvk1hQN0FF8NgQ+wgWXdqIILoHHUC2QYn59fFIiNx4=
Subject key identifier: 80:9A:E9:C1:D0:53:1B:BC:D0:8B:C7:08:A7:D0:14:F2:7D:21:13:AD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39C7228A101E3B0C0BE1075491846FE1E5D0D402
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38352e302f32342d3234203d3e203437353833.roa
Signing time: Fri 30 Oct 2026 12:31:40 +0000
ROA not before: Fri 30 Oct 2026 12:26:40 +0000
ROA not after: Fri 29 Oct 2027 12:31:40 +0000
asID: 47583
IP address blocks: 77.243.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c7:22:8a:10:1e:3b:0c:0b:e1:07:54:91:84:6f:e1:e5:d0:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Oct 30 12:26:40 2026 GMT
Not After : Oct 29 12:31:40 2027 GMT
Subject: CN=809AE9C1D0531BBCD08BC708A7D014F27D2113AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:de:77:a1:82:e2:ba:cf:ff:21:79:97:5d:
36:76:fe:63:f3:f9:8a:cb:6c:f5:8a:28:f3:c3:59:
a7:e3:31:0a:49:3d:3d:82:b9:1a:fd:96:ac:d3:ff:
37:df:c7:46:91:1b:fa:fa:e8:a4:6f:f9:57:56:ee:
a9:f9:b0:1a:5a:2d:85:aa:c7:11:ec:99:0b:07:f1:
a2:14:d6:83:c4:85:9c:f1:1d:2b:8e:c5:89:22:a8:
3d:a9:16:5c:1c:e2:f0:fa:8f:97:83:f4:48:66:95:
74:60:ac:ec:4c:54:2d:50:8a:b8:49:09:61:10:1f:
8f:95:d2:36:fa:ba:49:8b:dc:5f:36:ff:6a:c6:c9:
40:70:a4:c8:4d:99:e5:57:0c:29:b6:b3:f7:ee:a6:
e6:bf:3a:33:a9:f5:84:bf:3a:70:fb:9d:27:e2:36:
8a:11:78:12:9a:a9:ef:86:64:5e:68:a4:d7:db:ac:
51:2b:b5:20:03:2d:bf:22:2f:1f:7b:f5:7e:91:4f:
df:8b:77:ec:ce:ef:6e:24:d4:23:ca:b3:71:e3:fe:
9e:4e:dc:2a:07:a4:50:57:82:5d:bc:6c:b1:34:0a:
e1:ac:32:b0:71:b4:b0:e9:b8:82:4e:af:7b:37:89:
b3:99:31:f9:6f:9a:30:1b:7c:d3:15:a9:ed:31:49:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9A:E9:C1:D0:53:1B:BC:D0:8B:C7:08:A7:D0:14:F2:7D:21:13:AD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f1:d6:7c:ff:bf:f3:0e:66:28:2a:12:26:b4:28:10:7f:cb:
4b:5b:97:e8:f6:cd:16:b1:24:51:db:d0:77:b3:80:39:cd:2b:
58:91:89:b0:4c:38:30:c0:a7:91:16:17:eb:e8:50:7f:56:ad:
4b:c5:73:63:8a:f9:1f:78:dc:76:93:a0:0c:ca:05:31:e6:d6:
3b:f3:3b:f1:4b:0a:b3:85:40:a0:72:0d:ba:e1:b1:c8:16:4a:
9b:8b:61:12:5c:b4:4d:42:0b:34:54:fa:ee:da:00:2b:5a:33:
51:f5:92:c0:f4:33:a1:20:74:c9:c6:61:95:c1:7f:84:55:46:
97:a7:6b:29:6a:15:d0:b5:1b:be:e6:ae:f2:b8:7f:57:ee:2d:
43:ff:4d:07:3f:73:e4:5c:f2:27:52:bc:9a:ff:4c:49:43:55:
c7:0a:05:95:6d:7b:79:7d:dc:9f:e5:96:25:5f:1f:53:f6:33:
df:81:63:be:78:a9:d5:d7:83:ef:e5:e7:be:a7:16:f0:a6:af:
71:f4:93:34:c8:e7:fd:84:da:83:31:9b:75:94:6f:0a:d9:16:
73:01:3a:bc:76:cd:1e:93:78:ae:8c:c4:3e:9c:e9:12:d3:f7:
9f:91:ae:4f:1e:fc:d9:c3:b2:8b:70:de:9e:bc:bf:4d:e9:17:
f2:c7:7b:f3
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUOcciihAeOwwL4QdUkYRv4eXQ1AIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjEwMzAxMjI2NDBaFw0yNzEwMjkxMjMxNDBaMDMxMTAvBgNV
BAMTKDgwOUFFOUMxRDA1MzFCQkNEMDhCQzcwOEE3RDAxNEYyN0QyMTEzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdt53oYLius//IXmXXTZ2/mPz
+YrLbPWKKPPDWafjMQpJPT2CuRr9lqzT/zffx0aRG/r66KRv+VdW7qn5sBpaLYWq
xxHsmQsH8aIU1oPEhZzxHSuOxYkiqD2pFlwc4vD6j5eD9EhmlXRgrOxMVC1QirhJ
CWEQH4+V0jb6ukmL3F82/2rGyUBwpMhNmeVXDCm2s/fupua/OjOp9YS/OnD7nSfi
NooReBKaqe+GZF5opNfbrFErtSADLb8iLx979X6RT9+Ld+zO724k1CPKs3Hj/p5O
3CoHpFBXgl28bLE0CuGsMrBxtLDpuIJOr3s3ibOZMflvmjAbfNMVqe0xSZH/AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUgJrpwdBTG7zQi8cIp9AU8n0hE60wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNzM3MmUzMjM0MzMy
ZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQATfNVMA0GCSqGSIb3DQEBCwUAA4IBAQBq8dZ8/7/zDmYoKhImtCgQf8tLW5fo
9s0WsSRR29B3s4A5zStYkYmwTDgwwKeRFhfr6FB/Vq1LxXNjivkfeNx2k6AMygUx
5tY78zvxSwqzhUCgcg264bHIFkqbi2ESXLRNQgs0VPru2gArWjNR9ZLA9DOhIHTJ
xmGVwX+EVUaXp2spahXQtRu+5q7yuH9X7i1D/00HP3PkXPInUrya/0xJQ1XHCgWV
bXt5fdyf5ZYlXx9T9jPfgWO+eKnV14Pv5ee+pxbwpq9x9JM0yOf9hNqDMZt1lG8K
2RZzATq8ds0ek3iujMQ+nOkS0/efka5PHvzZw7KLcN6evL9N6Rfyx3vz
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:04:47 2026 by rpki-client