Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20343032363731.roa
File: 3137362e3130322e3137342e302f32342d3234203d3e20343032363731.roa (raw, json)
Hash identifier: xDptdabyeWPX/gSoyCALiBVTTObqQNmToJa1Uqasj3o=
Subject key identifier: 0D:D1:43:2D:CB:10:FD:BC:61:79:95:7D:51:E5:71:5D:2B:88:91:55
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 79FDB0DE1419523B5EF90A3FDDEE73BB1659D1BE
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20343032363731.roa
Signing time: Tue 20 Oct 2026 07:54:35 +0000
ROA not before: Tue 20 Oct 2026 07:49:35 +0000
ROA not after: Tue 19 Oct 2027 07:54:35 +0000
asID: 402671
IP address blocks: 176.102.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:fd:b0:de:14:19:52:3b:5e:f9:0a:3f:dd:ee:73:bb:16:59:d1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Oct 20 07:49:35 2026 GMT
Not After : Oct 19 07:54:35 2027 GMT
Subject: CN=0DD1432DCB10FDBC6179957D51E5715D2B889155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:24:30:89:ce:49:b2:47:03:4e:65:3c:a3:
ba:0b:de:85:95:0c:fc:7c:5f:5b:15:50:8a:31:04:
c4:ed:93:6d:c6:df:8c:87:67:72:1c:77:68:79:dc:
a0:87:6c:d2:30:37:fa:8f:c9:3f:37:d5:44:be:7e:
18:c2:49:38:5d:b0:c3:c9:3d:64:55:65:43:62:fb:
b9:12:ea:0f:5f:0d:be:54:aa:cf:9b:d9:cc:1e:93:
21:9b:18:5e:c5:f0:4d:64:b0:3b:f8:99:9e:18:26:
18:75:d4:77:cd:a2:83:70:98:d9:d7:ec:a1:51:b9:
b4:e6:c5:fa:c6:8d:4d:5a:fa:1a:1a:f9:36:b7:44:
8c:4f:a4:11:66:61:de:3b:ca:f4:57:26:49:57:66:
ab:3d:6d:94:c7:92:81:bb:c8:b7:09:34:fc:d7:e7:
d8:40:04:42:65:0a:64:3c:7f:8a:9d:8b:3d:0b:a4:
53:9c:b4:ae:ae:76:5d:ea:e6:43:ff:7c:5a:40:7b:
8e:86:7b:53:1a:54:eb:8b:d2:af:ed:16:64:4c:8d:
fa:fb:83:0c:fc:1c:77:28:c7:27:3c:da:ff:ee:68:
b6:ef:ea:bf:60:b8:4a:ac:d3:06:d3:2a:0f:c1:c7:
7c:e5:bc:3c:26:eb:84:18:37:8b:60:8f:64:92:95:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:43:2D:CB:10:FD:BC:61:79:95:7D:51:E5:71:5D:2B:88:91:55
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20343032363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:50:db:12:d4:9f:3d:fd:bc:65:b4:96:93:f6:44:b4:78:f8:
33:5b:d5:c8:b6:c8:c3:cb:f4:93:e5:91:a3:93:a5:20:8d:4a:
9a:f6:c6:b8:f4:f8:25:9a:fa:a2:32:ce:73:cb:82:ac:1a:29:
cd:1e:60:4d:3d:40:27:f3:d7:a3:10:90:f7:f6:cd:3a:5e:fa:
e0:26:34:ed:14:73:be:08:c1:2c:40:51:d6:bb:1a:d3:e4:d0:
4a:80:e1:73:32:81:b3:8d:c7:36:a4:e0:36:47:77:70:1c:37:
a8:c3:16:69:fa:c3:fa:82:4d:1d:e5:49:1b:95:d9:dc:b0:90:
75:b7:52:a5:ac:3e:65:5b:c2:89:5b:95:3b:b1:bc:ab:3f:4e:
4c:d2:52:0d:7f:0d:2b:dc:3a:47:99:3a:d5:4e:8b:82:a2:dc:
21:67:4c:b3:26:54:d6:96:e5:f1:eb:eb:b8:58:31:44:ac:df:
01:a5:dd:cb:e0:18:0d:46:9d:b3:85:59:1f:2b:72:75:92:92:
b0:e1:6b:90:13:67:1f:0f:c9:9a:89:0f:17:a5:d0:10:a8:3d:
79:50:73:93:07:79:3f:71:95:12:1b:b8:b7:aa:33:15:1a:c6:
5d:5c:9c:6d:65:64:4f:44:c6:74:34:45:c0:f8:f2:02:72:f6:
8c:06:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:42:18 2026 by rpki-client