Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa
File: 3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa (raw, json)
Hash identifier: nWTO0lpwynwPzlypXWMi8OJsZ+pn3ksbbbieOy6HhBk=
Subject key identifier: 91:C7:41:25:27:BE:3A:D2:87:B5:C3:91:ED:6B:F6:CE:C4:55:0E:49
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 1931DEC82AECFBC66D5582E967F7D933565ECE3F
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa
Signing time: Tue 31 Mar 2026 07:39:20 +0000
ROA not before: Tue 31 Mar 2026 07:34:20 +0000
ROA not after: Tue 30 Mar 2027 07:39:20 +0000
asID: 7118
IP address blocks: 176.102.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 09:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:31:de:c8:2a:ec:fb:c6:6d:55:82:e9:67:f7:d9:33:56:5e:ce:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Mar 31 07:34:20 2026 GMT
Not After : Mar 30 07:39:20 2027 GMT
Subject: CN=91C7412527BE3AD287B5C391ED6BF6CEC4550E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:3e:98:ba:77:29:3d:9b:fd:56:c5:8a:df:
28:49:41:c9:e0:1e:f1:b7:db:15:d4:d2:9e:e7:0a:
a5:13:1a:ec:b4:eb:0d:53:ba:c1:b1:d5:f9:f6:10:
4d:ac:e8:c6:5f:b9:20:7e:18:5a:f9:60:98:41:68:
83:f4:2e:a7:49:55:40:cc:6f:ef:e8:35:46:bd:ef:
80:c9:72:90:7a:b8:74:39:9c:09:af:7e:37:ad:69:
89:9a:d7:fa:e9:f1:91:2c:a8:f9:a1:a2:6d:0c:07:
63:d0:ec:4b:fa:4e:6a:a6:43:fd:f1:0c:d3:53:09:
17:b0:a0:37:3e:a8:e8:0b:52:ae:1e:2e:f6:54:36:
df:3c:3f:5d:2c:0f:b8:33:5a:6f:d5:76:14:18:ea:
0e:fe:63:72:07:15:2c:84:bb:47:0f:20:fc:2b:60:
e1:6b:26:1f:e5:76:61:64:e6:dc:6b:da:22:59:5e:
d3:d8:0f:b8:eb:46:60:ba:75:6b:7d:11:6a:66:55:
bc:fa:52:f4:6c:ae:35:7b:4b:a9:ec:eb:3f:3d:d2:
a7:ff:a6:ae:b1:43:11:b2:4e:ec:a6:df:56:f3:cc:
4a:28:89:fc:f9:fd:14:65:07:63:e7:0e:a0:23:64:
7a:e1:4a:76:c5:70:5b:ca:27:b0:8e:5a:35:9c:32:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:41:25:27:BE:3A:D2:87:B5:C3:91:ED:6B:F6:CE:C4:55:0E:49
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e2037313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5b:9b:39:a4:39:2b:ce:2d:11:93:e8:dc:82:6c:02:e7:88:
72:b2:fd:bb:13:0c:e2:1d:32:41:3e:b7:2a:61:d8:41:89:4d:
31:67:e4:84:fb:58:7e:69:a2:78:2d:0d:3c:dc:c9:59:d6:c2:
ff:d0:ec:5d:d0:87:03:10:13:06:5d:da:b8:f0:bf:7e:9c:4f:
dd:7d:4f:11:b9:60:d9:3c:e7:e9:c0:31:19:1d:9f:e4:d5:a4:
37:e6:8f:db:08:37:c8:87:22:8f:af:c6:ad:d4:1a:07:2b:d8:
70:0d:73:3d:a2:8f:2e:16:18:eb:71:31:0e:4b:44:dc:09:c4:
49:1f:ec:c3:4e:aa:f3:86:b2:e6:96:cf:dd:41:97:83:92:a1:
84:f7:ac:05:1c:bc:e6:3d:be:c1:97:43:80:a2:59:fd:5e:2a:
b1:7c:c2:48:d0:33:82:39:cd:21:27:cb:78:87:2c:50:25:d1:
07:e0:b8:a2:b8:61:bd:f5:09:d2:f4:55:a2:36:51:b2:fc:00:
90:cb:46:a5:c9:cd:58:a7:46:6e:fc:9d:5c:52:8f:06:83:a7:
40:a1:a8:c9:ec:1f:4a:c6:e3:e8:bf:14:c5:94:28:a3:51:24:
83:c5:c5:54:6a:49:08:30:9c:a0:d3:0e:76:f6:ee:26:9f:cd:
0c:62:2f:39
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUGTHeyCrs+8ZtVYLpZ/fZM1Zezj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjAzMzEwNzM0MjBaFw0yNzAzMzAwNzM5MjBaMDMxMTAvBgNV
BAMTKDkxQzc0MTI1MjdCRTNBRDI4N0I1QzM5MUVENkJGNkNFQzQ1NTBFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VD6YuncpPZv9VsWK3yhJQcng
HvG32xXU0p7nCqUTGuy06w1TusGx1fn2EE2s6MZfuSB+GFr5YJhBaIP0LqdJVUDM
b+/oNUa974DJcpB6uHQ5nAmvfjetaYma1/rp8ZEsqPmhom0MB2PQ7Ev6TmqmQ/3x
DNNTCRewoDc+qOgLUq4eLvZUNt88P10sD7gzWm/VdhQY6g7+Y3IHFSyEu0cPIPwr
YOFrJh/ldmFk5txr2iJZXtPYD7jrRmC6dWt9EWpmVbz6UvRsrjV7S6ns6z890qf/
pq6xQxGyTuym31bzzEooifz5/RRlB2PnDqAjZHrhSnbFcFvKJ7COWjWcMszxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkcdBJSe+OtKHtcOR7Wv2zsRVDkkwHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzNzM2MmUzMTMwMzIyZTMx
MzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzEzMTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sGaqMA0GCSqGSIb3DQEBCwUAA4IBAQC4W5s5pDkrzi0Rk+jcgmwC54hysv27Ewzi
HTJBPrcqYdhBiU0xZ+SE+1h+aaJ4LQ083MlZ1sL/0Oxd0IcDEBMGXdq48L9+nE/d
fU8RuWDZPOfpwDEZHZ/k1aQ35o/bCDfIhyKPr8at1BoHK9hwDXM9oo8uFhjrcTEO
S0TcCcRJH+zDTqrzhrLmls/dQZeDkqGE96wFHLzmPb7Bl0OAoln9XiqxfMJI0DOC
Oc0hJ8t4hyxQJdEH4LiiuGG99QnS9FWiNlGy/ACQy0alyc1Yp0Zu/J1cUo8Gg6dA
oajJ7B9KxuPovxTFlCijUSSDxcVUakkIMJyg0w529u4mn80MYi85
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:28:20 2026 by rpki-client