Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20313437323831.roa
File: 3137312e32322e37362e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: ZiXHODt8+zKBrLG1D2G2VXzzXnHe4JH0o8Zjc7M9bLQ=
Subject key identifier: 83:A9:A6:63:87:D8:9B:2E:93:C8:97:AD:F8:0B:1A:99:E3:46:D5:81
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2714738B6F4C70A757AE324163E9A247D5613E6A
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20313437323831.roa
Signing time: Tue 01 Sep 2026 02:32:14 +0000
ROA not before: Tue 01 Sep 2026 02:27:14 +0000
ROA not after: Tue 31 Aug 2027 02:32:14 +0000
asID: 147281
IP address blocks: 171.22.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:14:73:8b:6f:4c:70:a7:57:ae:32:41:63:e9:a2:47:d5:61:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 1 02:27:14 2026 GMT
Not After : Aug 31 02:32:14 2027 GMT
Subject: CN=83A9A66387D89B2E93C897ADF80B1A99E346D581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:5d:14:9e:52:7d:88:6e:0f:eb:ad:4e:bd:
1d:f5:0c:58:e5:8e:50:16:fa:d8:15:9d:70:67:68:
91:10:60:83:6e:2b:16:f2:11:56:c2:e8:28:38:9f:
87:13:c5:bf:0f:55:0a:48:e9:c7:fc:f6:a7:b3:23:
ec:52:8d:eb:8a:71:bb:ab:a6:47:b0:81:19:fd:f8:
6c:0e:3e:50:c1:b0:42:07:3d:86:b4:1d:48:42:eb:
d6:10:d2:c0:fb:5e:7c:77:e9:2d:2c:b9:d0:e9:33:
e7:6b:48:15:56:69:ee:0a:7f:1a:d0:e4:3b:ea:63:
26:79:94:a2:d8:e1:fe:01:8c:c9:fe:c8:f1:69:08:
68:5e:91:22:4c:b5:85:7b:2b:40:df:db:c0:1e:5c:
18:4b:d1:4c:e7:5b:5a:ea:7d:8d:24:10:6d:1f:5b:
b2:9a:8b:69:25:0f:3b:e2:cc:8c:fe:fe:45:d4:cc:
2f:55:7d:18:64:d4:d8:42:17:92:68:8c:5b:12:c9:
3a:d0:67:ee:2c:69:30:ae:bb:20:33:82:ea:80:ee:
69:33:1c:b9:1e:ba:fc:7c:47:c0:5a:02:35:58:3b:
79:f9:61:3f:ed:fd:d4:ea:a3:ef:a2:66:44:6e:c8:
88:73:2e:f5:f5:9a:f2:32:a5:38:fb:68:b4:eb:a7:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:A6:63:87:D8:9B:2E:93:C8:97:AD:F8:0B:1A:99:E3:46:D5:81
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:36:e2:7a:a8:ea:87:da:b2:52:88:be:01:13:7c:17:36:ad:
6a:89:3b:b2:e8:5d:1a:bd:bd:61:8d:2e:86:d4:52:ec:28:51:
d6:d3:51:53:ee:cd:2e:c3:d1:9c:a7:12:29:90:c3:59:06:e9:
d0:14:fa:2e:70:dc:53:59:73:a8:95:f1:af:6b:0a:2a:6b:75:
9c:01:ea:a3:a7:cd:09:08:ae:76:0a:99:7e:08:fd:44:99:4a:
fb:74:b9:00:24:8e:19:d1:53:37:47:ba:8e:da:bb:bb:5c:f8:
23:fe:14:e6:c8:f4:b1:8f:11:a9:5c:80:52:aa:05:09:a7:6f:
4e:dc:fb:4a:dc:54:a4:b9:16:f1:91:3b:f3:6b:3b:43:ac:3b:
ea:83:91:d6:f7:18:1c:90:9b:46:27:fa:bc:da:d3:28:26:bb:
bc:e0:b0:e1:63:42:af:11:5b:20:46:6c:87:4d:8d:bb:34:43:
d6:a0:70:57:1c:c1:ed:d2:ca:df:ff:4e:0b:69:d8:5a:8e:6d:
5e:18:d6:ab:a3:0d:a2:1f:b6:ff:83:be:c8:43:20:95:07:06:
87:78:1a:33:42:37:e4:a1:28:96:e7:a0:89:34:60:19:38:ef:
15:39:b9:29:cb:ad:0d:91:69:1a:81:93:2e:3c:b0:47:69:db:
27:9e:5d:0a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUJxRzi29McKdXrjJBY+miR9VhPmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA5MDEwMjI3MTRaFw0yNzA4MzEwMjMyMTRaMDMxMTAvBgNV
BAMTKDgzQTlBNjYzODdEODlCMkU5M0M4OTdBREY4MEIxQTk5RTM0NkQ1ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxl0UnlJ9iG4P661OvR31DFjl
jlAW+tgVnXBnaJEQYINuKxbyEVbC6Cg4n4cTxb8PVQpI6cf89qezI+xSjeuKcbur
pkewgRn9+GwOPlDBsEIHPYa0HUhC69YQ0sD7Xnx36S0sudDpM+drSBVWae4KfxrQ
5DvqYyZ5lKLY4f4BjMn+yPFpCGhekSJMtYV7K0Df28AeXBhL0UznW1rqfY0kEG0f
W7Kai2klDzvizIz+/kXUzC9VfRhk1NhCF5JojFsSyTrQZ+4saTCuuyAzguqA7mkz
HLkeuvx8R8BaAjVYO3n5YT/t/dTqo++iZkRuyIhzLvX1mvIypTj7aLTrp1gPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUg6mmY4fYmy6TyJet+AsameNG1YEwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzNzMxMmUzMjMyMmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzIzODMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qxZMMA0GCSqGSIb3DQEBCwUAA4IBAQAqNuJ6qOqH2rJSiL4BE3wXNq1qiTuy6F0a
vb1hjS6G1FLsKFHW01FT7s0uw9GcpxIpkMNZBunQFPoucNxTWXOolfGvawoqa3Wc
Aeqjp80JCK52Cpl+CP1EmUr7dLkAJI4Z0VM3R7qO2ru7XPgj/hTmyPSxjxGpXIBS
qgUJp29O3PtK3FSkuRbxkTvzaztDrDvqg5HW9xgckJtGJ/q82tMoJru84LDhY0Kv
EVsgRmyHTY27NEPWoHBXHMHt0srf/04Ladhajm1eGNarow2iH7b/g77IQyCVBwaH
eBozQjfkoSiW56CJNGAZOO8VObkpy60NkWkagZMuPLBHadsnnl0K
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:00 2026 by rpki-client