Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32322d3234203d3e2030.roa
File: 3137362e3130322e3136382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: CXIvRfQqzEtDWgPFyzaNz4QogOJOjAUZffk+jhOjSGw=
Subject key identifier: AB:75:87:40:FC:A8:16:FD:06:8D:E9:CB:59:6D:C3:60:7B:C9:C8:6C
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 5C91519185C9018B21B4FC3F58F7572919E52CA5
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32322d3234203d3e2030.roa
Signing time: Wed 01 Apr 2026 17:52:00 +0000
ROA not before: Wed 01 Apr 2026 17:47:00 +0000
ROA not after: Wed 31 Mar 2027 17:52:00 +0000
asID: 0
IP address blocks: 176.102.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 09:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:91:51:91:85:c9:01:8b:21:b4:fc:3f:58:f7:57:29:19:e5:2c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Apr 1 17:47:00 2026 GMT
Not After : Mar 31 17:52:00 2027 GMT
Subject: CN=AB758740FCA816FD068DE9CB596DC3607BC9C86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:d7:94:ec:bc:41:d9:22:33:16:e2:43:8b:
5d:77:e6:cc:ad:b3:d3:14:6c:bd:e4:c5:d4:c4:0a:
a5:8c:09:5f:93:ca:51:1c:56:0c:88:35:a0:ef:30:
be:1b:94:60:41:52:75:0c:c0:c8:20:96:8a:54:a1:
d8:ce:a7:34:a7:f6:1d:74:ce:32:78:5c:50:ca:81:
4c:5b:72:ac:ba:d6:45:00:26:c7:a7:6a:70:1f:4c:
8b:ad:53:11:a2:ae:ab:a0:89:c9:68:8f:6e:47:45:
13:47:81:b2:f5:8e:63:1a:d6:6d:72:66:d0:0d:62:
fa:f9:d1:d7:4a:59:ed:46:82:82:0e:92:0b:85:e6:
72:43:0c:6c:a3:1f:a4:ae:85:17:a3:f8:4a:ac:c8:
68:3c:4e:a8:7d:8b:53:16:e1:8a:86:48:be:b5:5d:
aa:9b:d6:d0:c9:bb:05:dc:a5:ba:ac:00:77:fb:ee:
50:b4:5e:fc:36:2f:11:d7:63:fc:15:5a:d7:fd:07:
29:52:49:21:ee:bc:89:11:dc:46:31:c5:ac:b9:4c:
45:04:6e:a4:8b:b9:9a:5f:b3:02:ad:e4:65:d0:12:
a8:52:8b:c5:a7:ae:01:90:3d:6d:72:91:7f:ec:f5:
ee:02:3d:ce:fc:8a:f5:af:42:10:89:dd:4f:0e:bc:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:87:40:FC:A8:16:FD:06:8D:E9:CB:59:6D:C3:60:7B:C9:C8:6C
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:35:10:e8:11:73:c0:a0:f9:5a:0d:22:34:72:ee:38:cf:8e:
2d:31:8b:5f:0e:60:7f:a2:df:e8:7a:12:28:04:3d:79:39:c8:
51:b7:f8:98:d5:84:8e:6a:64:1f:8d:bd:f1:62:d8:d7:b0:e2:
d0:4b:18:1f:e5:cf:93:49:8e:6d:39:62:94:76:d1:b7:b3:ef:
59:bf:7e:5b:e1:1b:5a:8b:85:7b:62:90:06:fe:aa:4d:ab:32:
fe:f2:66:30:35:db:7c:dc:93:d2:3e:e4:82:5a:a5:b9:26:41:
03:73:52:a8:02:d8:ef:bf:5b:26:56:7f:d8:53:0f:39:5d:83:
b6:ef:85:74:ad:d9:32:68:b7:f7:80:49:6b:36:f1:fd:13:66:
d9:f4:38:6b:0c:93:9f:07:05:f0:ef:14:1e:4d:18:88:63:e1:
5b:15:42:3c:20:6e:7a:95:89:9a:a2:df:98:98:07:fd:cc:0e:
5d:45:3d:0d:fe:e6:4c:65:59:8d:ba:52:23:75:a7:e9:eb:6e:
5c:37:f9:74:3d:eb:ca:ba:e9:56:5e:5d:25:a6:86:2b:dd:e4:
98:7c:7c:5a:a3:60:fa:a8:2f:57:89:3a:54:4c:ff:b3:8a:c2:
ff:2e:c2:0e:f5:36:ae:b7:6b:9b:30:9e:df:1c:42:f9:3c:80:
ed:be:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:52 2026 by rpki-client