Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa
File: 3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa (raw, json)
Hash identifier: xqCke77+QgrbwlgHgByruyXH3p4bzIJvsN+aMsuhy1g=
Subject key identifier: 4E:B8:AF:D9:EB:96:FE:F9:9C:4E:7C:AA:F7:EE:00:9D:43:8F:65:C3
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 521D78F0444B43F6538048A997ED1B4FB1442D89
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa
Signing time: Thu 09 Jul 2026 15:18:55 +0000
ROA not before: Thu 09 Jul 2026 15:13:55 +0000
ROA not after: Thu 08 Jul 2027 15:18:55 +0000
asID: 28753
IP address blocks: 176.102.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 02:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1d:78:f0:44:4b:43:f6:53:80:48:a9:97:ed:1b:4f:b1:44:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 9 15:13:55 2026 GMT
Not After : Jul 8 15:18:55 2027 GMT
Subject: CN=4EB8AFD9EB96FEF99C4E7CAAF7EE009D438F65C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:fd:28:5f:63:33:3b:94:fa:bb:41:93:31:
b1:7c:a8:90:cd:3a:12:25:99:2b:f7:2b:d5:38:15:
8f:c4:3e:35:ac:fc:c1:cb:00:74:a5:b4:a6:87:d9:
34:65:b5:0b:a6:aa:dc:cd:c7:3a:c8:cb:aa:4d:15:
e6:29:e2:9c:cf:2d:ed:5b:28:1b:bc:87:77:50:6b:
33:50:f2:93:4e:8b:01:ff:5d:28:41:44:56:fc:d3:
8e:51:e1:2e:1d:84:40:73:52:0c:f1:86:86:ac:5c:
a4:32:72:a7:40:fc:ed:b5:4d:55:d5:02:fb:9f:45:
93:eb:77:8e:35:1a:73:da:f3:39:05:34:9f:d7:82:
cb:c6:e4:30:e6:68:f0:ce:41:20:cc:8e:3a:dc:b6:
2b:14:35:6a:cb:aa:a6:30:23:e3:55:ed:24:d2:1f:
2a:95:84:c2:ec:e8:11:8a:c1:ae:78:7a:23:aa:64:
6c:58:40:68:13:7d:39:6e:ae:d5:9f:c4:28:05:1e:
e5:f6:df:14:59:24:c1:cb:12:f1:3b:5a:c2:02:aa:
7a:db:08:1d:dc:60:df:1c:d4:28:19:b7:ec:81:fd:
d2:f0:52:7c:6b:82:79:c5:b2:47:43:6b:81:cb:ba:
7e:01:37:ac:ad:a4:b8:45:cb:cf:9e:bb:6a:8f:0e:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:AF:D9:EB:96:FE:F9:9C:4E:7C:AA:F7:EE:00:9D:43:8F:65:C3
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137332e302f32342d3234203d3e203238373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.173.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f3:bb:3c:8b:b8:28:e9:1f:94:72:55:16:68:b6:8a:f0:32:
ff:4a:9b:32:d8:36:72:ff:63:6f:8f:84:66:de:9b:31:10:65:
a2:74:d7:08:d6:58:6a:db:9e:7e:9c:6a:56:39:37:b0:cd:a2:
3e:03:7a:b0:ff:0c:ad:26:a6:f3:26:35:8e:07:59:ad:bd:b5:
da:b0:2a:27:a8:c8:6a:77:d4:5c:58:3d:aa:f9:5d:ee:19:63:
8a:f3:aa:e7:0a:36:2c:91:30:98:62:23:5d:e9:76:d9:34:ed:
d9:38:02:f1:f5:78:15:c8:0b:69:f2:82:e0:c9:71:61:a4:ab:
e2:76:ef:de:65:ae:94:e7:2f:d4:10:f1:dd:f4:f6:2a:04:f4:
fe:a5:c5:7b:7b:05:36:5d:9f:a2:e5:46:d1:f5:28:45:7d:80:
b4:99:66:df:ac:92:e1:70:6d:dc:fe:4c:4a:f8:32:cf:2d:e7:
e2:e9:9e:e5:ae:23:a2:ed:54:4e:2f:90:bf:29:ba:de:f6:92:
28:fd:93:42:e4:e3:81:cd:dc:33:4c:12:32:db:14:22:46:d7:
f0:ab:aa:07:fe:f0:bb:5f:5c:05:02:fd:db:56:6f:23:7b:5e:
f3:c5:57:ca:a4:f6:9c:d7:36:8f:bb:da:dd:4f:0a:00:81:45:
f9:3e:f3:76
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUh148ERLQ/ZTgEipl+0bT7FELYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjA3MDkxNTEzNTVaFw0yNzA3MDgxNTE4NTVaMDMxMTAvBgNV
BAMTKDRFQjhBRkQ5RUI5NkZFRjk5QzRFN0NBQUY3RUUwMDlENDM4RjY1QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/f0oX2MzO5T6u0GTMbF8qJDN
OhIlmSv3K9U4FY/EPjWs/MHLAHSltKaH2TRltQumqtzNxzrIy6pNFeYp4pzPLe1b
KBu8h3dQazNQ8pNOiwH/XShBRFb8045R4S4dhEBzUgzxhoasXKQycqdA/O21TVXV
AvufRZPrd441GnPa8zkFNJ/XgsvG5DDmaPDOQSDMjjrctisUNWrLqqYwI+NV7STS
HyqVhMLs6BGKwa54eiOqZGxYQGgTfTlurtWfxCgFHuX23xRZJMHLEvE7WsICqnrb
CB3cYN8c1CgZt+yB/dLwUnxrgnnFskdDa4HLun4BN6ytpLhFy8+eu2qPDuM1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTriv2euW/vmcTnyq9+4AnUOPZcMwHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzNzM2MmUzMTMwMzIyZTMx
MzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzNzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACwZq0wDQYJKoZIhvcNAQELBQADggEBAAXzuzyLuCjpH5RyVRZotorwMv9KmzLY
NnL/Y2+PhGbemzEQZaJ01wjWWGrbnn6calY5N7DNoj4DerD/DK0mpvMmNY4HWa29
tdqwKieoyGp31FxYPar5Xe4ZY4rzqucKNiyRMJhiI13pdtk07dk4AvH1eBXIC2ny
guDJcWGkq+J2795lrpTnL9QQ8d309ioE9P6lxXt7BTZdn6LlRtH1KEV9gLSZZt+s
kuFwbdz+TEr4Ms8t5+LpnuWuI6LtVE4vkL8put72kij9k0Lk44HN3DNMEjLbFCJG
1/Crqgf+8LtfXAUC/dtWbyN7XvPFV8qk9pzXNo+72t1PCgCBRfk+83Y=
-----END CERTIFICATE-----
Generated at Mon Jul 13 14:27:32 2026 by rpki-client