Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa
File: 3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier: sCqFG2YhCHeDqaJvV17HVBO8NLNwKmROgfeEU+mI+Xw=
Subject key identifier: 71:29:36:17:15:72:FD:F7:30:2C:EC:EA:1C:25:78:5C:23:C5:57:F9
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 30FF088CFB8BE73699C70019912E3CF22CA34425
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa
Signing time: Mon 20 Jul 2026 02:40:25 +0000
ROA not before: Mon 20 Jul 2026 02:35:25 +0000
ROA not after: Mon 19 Jul 2027 02:40:25 +0000
asID: 401776
IP address blocks: 176.102.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ff:08:8c:fb:8b:e7:36:99:c7:00:19:91:2e:3c:f2:2c:a3:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 20 02:35:25 2026 GMT
Not After : Jul 19 02:40:25 2027 GMT
Subject: CN=712936171572FDF7302CECEA1C25785C23C557F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:71:23:a8:4d:bc:f1:50:13:b7:8b:a9:98:
8d:be:a6:16:0d:1a:fd:f4:22:d9:08:69:9b:38:dd:
0d:87:8e:a1:2c:ad:9a:77:4e:60:79:82:1d:86:09:
45:db:50:ce:08:b9:19:ae:80:b3:0b:67:e9:f2:4d:
b8:66:40:08:04:70:23:7e:8f:19:dd:95:e5:be:a7:
4d:66:3f:44:5c:af:87:55:29:82:02:25:b1:3d:e8:
fd:5d:67:cb:da:60:b4:7d:b1:66:ad:b7:6a:56:6c:
b1:aa:b5:eb:68:4d:b6:4d:79:8b:bf:07:8d:d9:6c:
37:17:7b:45:b9:77:36:c6:47:ad:b0:39:0d:b7:5f:
90:af:16:e8:5b:b2:5e:d1:2e:f5:13:4c:2d:c3:f5:
b4:41:e9:82:87:9b:fc:52:44:71:4f:06:19:f3:5b:
ae:8d:1b:b0:f8:fc:b7:57:e8:ab:ad:b7:cd:71:9c:
0c:63:19:ab:87:4c:62:c8:bb:3a:f1:4b:0c:44:3f:
a7:7a:a8:b7:53:50:37:38:b0:7b:0f:85:1f:99:78:
7a:cd:c0:3d:be:f1:ee:01:87:86:9a:75:84:9d:19:
28:ac:bc:7b:c3:61:b9:91:bf:9d:cd:97:82:9b:1e:
66:98:41:f0:a8:3c:d8:3c:5e:3f:63:4e:57:6b:59:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:29:36:17:15:72:FD:F7:30:2C:EC:EA:1C:25:78:5C:23:C5:57:F9
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:94:7c:37:7a:88:69:23:55:05:e8:fa:3d:09:f7:21:b7:9a:
b5:13:5f:4e:4f:97:f1:00:c1:0b:8b:73:10:d5:9c:2c:ca:d9:
ce:d7:58:e0:db:5f:58:4b:21:57:67:3d:2c:57:0e:d3:4b:68:
15:c2:81:8b:e6:8f:d6:31:d1:d0:4d:44:64:47:e1:4c:fd:0f:
f7:4d:0b:0a:23:74:2e:2a:d1:71:dc:98:68:4c:29:15:17:f4:
b8:dc:42:9e:74:9e:83:1a:de:0e:b7:dd:4b:26:59:ce:12:44:
4e:9d:0b:5a:dc:b1:56:85:df:91:61:fe:e1:83:d0:6c:1e:8f:
58:4d:c3:7e:56:fc:ab:e5:79:68:ca:da:8f:35:1d:42:37:d7:
7f:ac:2d:18:aa:d9:6c:d9:3a:8e:91:c3:86:af:da:bb:8b:f7:
cf:72:96:fe:b5:d8:2d:25:eb:f9:13:17:92:60:79:5e:3c:b9:
f9:94:bf:8f:8c:e2:e1:ea:f0:6d:c9:4b:9e:bb:7d:8d:5e:a8:
04:ac:ec:ac:6a:2f:ad:ce:44:83:bf:70:e5:98:90:d2:9d:8d:
3d:ec:45:fe:25:a4:f0:07:a5:41:81:bb:cf:ba:ff:0e:b5:32:
3a:d4:d9:b6:14:77:73:50:42:4c:b0:dd:c7:83:fe:a1:3d:48:
52:f9:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:58 2026 by rpki-client