Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa
File: 3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa (raw, json)
Hash identifier: 6UdWfUX7KBZtt8PfrfenFEunK14genwVi/Drc7lSeRQ=
Subject key identifier: D4:E3:AA:E4:B9:EE:5A:56:91:D2:A3:4C:33:F5:9F:2D:11:FE:8E:E9
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 1DC3284AC45E6116EA7BFF36A8AEAFDAFA180C01
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa
Signing time: Tue 31 Mar 2026 07:39:19 +0000
ROA not before: Tue 31 Mar 2026 07:34:19 +0000
ROA not after: Tue 30 Mar 2027 07:39:19 +0000
asID: 141718
IP address blocks: 176.102.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 09:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c3:28:4a:c4:5e:61:16:ea:7b:ff:36:a8:ae:af:da:fa:18:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Mar 31 07:34:19 2026 GMT
Not After : Mar 30 07:39:19 2027 GMT
Subject: CN=D4E3AAE4B9EE5A5691D2A34C33F59F2D11FE8EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:e7:a4:30:dc:39:69:7b:85:fa:87:1f:37:
eb:22:5c:f1:7f:dd:42:89:2d:a3:71:f6:74:b7:4c:
ec:5d:41:bd:30:b4:21:6a:91:69:d3:ec:80:b3:8b:
78:66:a7:a8:1a:a1:84:87:4c:d9:b7:b9:94:32:35:
18:8d:60:26:de:99:77:79:cb:bb:ad:5f:e9:94:9d:
9b:93:56:2d:cc:ee:c7:25:c8:d4:5c:f5:2c:16:3d:
66:36:13:a0:49:c2:99:8d:de:b7:fc:77:48:be:02:
66:5a:72:d3:1f:e8:cd:d0:08:d9:a2:d8:bc:8c:bd:
d8:c5:6a:30:cf:b0:75:fc:c5:4f:5b:f6:ce:60:44:
0d:7e:2c:fb:d7:cd:93:27:13:85:eb:60:d5:79:53:
bf:c4:d9:67:0b:16:dc:e2:2e:73:e6:43:12:9e:2f:
ef:a7:5f:2e:fc:1f:63:bb:65:a2:c8:fe:47:ac:b3:
5f:b5:f1:f2:1a:7f:ed:c5:e1:e7:05:f5:47:c0:b6:
ba:81:9e:8e:dc:ce:ab:c2:04:f7:2c:e9:25:c4:ba:
11:57:84:cb:85:b9:04:13:ee:8f:37:cf:06:e2:d8:
5d:83:8e:ba:f8:46:64:b8:b3:6e:8c:dc:5e:40:2c:
9d:04:f5:9e:a3:e9:91:78:56:99:c5:1e:f9:ec:46:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E3:AA:E4:B9:EE:5A:56:91:D2:A3:4C:33:F5:9F:2D:11:FE:8E:E9
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e20313431373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e2:ad:41:a2:87:97:8b:00:2b:55:84:52:88:ce:19:30:30:
fc:99:25:2e:84:29:bc:ef:07:80:1a:6a:5b:05:94:1e:50:f1:
e0:49:f9:12:9a:a4:06:f8:52:90:8b:82:0b:4b:2f:f7:41:b6:
e6:99:81:9c:85:a4:92:34:7c:cc:c1:39:32:c8:48:82:16:47:
70:8a:64:30:32:df:86:34:41:8a:98:27:3b:e6:bd:4e:50:c3:
77:77:13:0b:a5:76:5b:2d:a8:5c:ef:34:42:20:3a:80:9a:c4:
6a:93:1c:06:c3:76:a5:f2:81:9b:dd:23:67:a7:0a:e3:50:c1:
7a:03:d3:a8:7b:25:67:08:51:8f:1b:12:17:72:85:7a:f6:9d:
a9:16:1a:0c:29:32:3a:16:b2:3f:47:b0:90:6b:5f:d1:f3:f7:
a6:18:e0:1b:83:db:4d:7f:44:dd:57:be:35:95:a8:6f:6d:0e:
84:66:6f:c8:b3:69:46:22:6c:1f:a2:74:36:77:a5:6d:ee:63:
af:cb:40:2a:a9:7b:84:51:80:f3:b9:56:fb:4f:5c:8e:39:6d:
42:66:d2:b8:70:b9:48:a1:da:3f:c2:74:b7:a9:12:2a:b4:43:
c8:c8:41:e7:62:0e:9a:0a:a5:c2:19:82:e3:59:c3:db:5d:e8:
3e:84:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:29:30 2026 by rpki-client