Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20313532363938.roa
File: 3137312e32322e37362e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: CYznR9RHwe4IF78gsTX1t526eOv8thzZltD26M9KZR8=
Subject key identifier: F6:B1:5B:8F:DA:D2:D1:A4:8F:E1:6B:80:C1:3C:7A:54:DF:0A:91:32
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4E744BB6A7158A1F1B39C64FB29EF6A361AF784B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20313532363938.roa
Signing time: Tue 25 Aug 2026 11:42:47 +0000
ROA not before: Tue 25 Aug 2026 11:37:47 +0000
ROA not after: Tue 24 Aug 2027 11:42:47 +0000
asID: 152698
IP address blocks: 171.22.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 06:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:74:4b:b6:a7:15:8a:1f:1b:39:c6:4f:b2:9e:f6:a3:61:af:78:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 25 11:37:47 2026 GMT
Not After : Aug 24 11:42:47 2027 GMT
Subject: CN=F6B15B8FDAD2D1A48FE16B80C13C7A54DF0A9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:51:a7:6b:6b:fa:58:c5:5a:a8:64:1d:92:
d6:89:3f:37:3f:96:ef:66:1b:c3:ec:a7:2c:6b:e2:
2d:03:e9:13:89:96:0b:20:a5:1e:eb:8b:ca:0d:66:
3d:5d:dc:c2:9a:19:06:97:c1:81:89:df:e4:72:6a:
7a:03:b3:fa:8c:c2:f1:ad:d1:5f:ba:89:07:27:c8:
c6:72:6d:5a:00:96:70:ee:52:82:9c:3c:85:a1:c7:
d1:bb:04:2b:8d:ea:2f:1b:82:db:d6:bb:e6:1c:80:
67:57:12:dd:f8:2e:f2:c7:8e:09:00:18:70:2f:93:
c3:90:64:3c:24:47:29:db:86:9b:8a:84:b0:67:85:
9f:cd:7d:95:43:4b:d7:11:f6:69:f6:fc:b5:d5:34:
a3:9a:d8:4f:7d:1f:17:0e:d2:d0:0f:8d:60:2c:71:
29:c3:f1:e2:f3:e3:2a:b4:a1:39:e5:fe:27:b3:a1:
7a:83:69:a1:ab:ea:3b:9d:c7:5b:14:ea:f6:ae:2c:
33:bd:b7:3a:ca:0b:b7:1a:15:28:c8:2e:c2:4b:aa:
79:2b:36:65:d4:ba:7f:fc:88:86:6b:c6:8d:6d:69:
80:9e:c5:d3:f7:fb:43:93:19:ea:8d:10:a5:cc:73:
a5:e3:3b:b2:46:80:87:b1:08:ec:29:7c:6c:bc:92:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:5B:8F:DA:D2:D1:A4:8F:E1:6B:80:C1:3C:7A:54:DF:0A:91:32
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8d:42:7a:c9:73:26:07:fb:2d:ba:c0:46:76:77:9b:d3:96:
ef:5a:7e:4a:17:f3:7f:25:ba:2a:19:3b:0f:98:8b:26:2f:d0:
de:05:a5:9f:51:eb:c3:b6:85:56:46:89:a3:95:98:1e:c1:3c:
3c:99:68:0d:09:44:b7:43:3d:91:cd:ff:ca:1b:54:e8:3e:82:
d1:f4:d9:2f:3b:c7:03:d1:43:be:0e:3c:3f:d9:f4:9b:d6:a3:
47:25:d9:92:ff:2d:39:d7:df:ca:2f:37:74:fd:c2:36:41:5e:
2d:fa:5c:63:d8:32:bc:35:81:af:a5:2d:72:ba:4a:ba:a1:de:
7f:f8:9f:a7:94:c1:d5:50:f7:ba:fd:c2:04:69:93:b4:45:2e:
1e:bf:46:bd:80:b4:4b:51:97:b8:26:60:14:49:0f:cf:e4:0d:
fb:c2:b5:2a:54:5a:48:f2:c6:40:8d:b4:2e:96:40:26:0e:56:
d8:4a:f4:86:e8:f8:d1:84:33:ac:95:1e:82:1f:3a:58:3a:92:
ba:f1:52:b9:54:8c:83:cc:1d:00:c6:d7:09:de:0d:08:8f:13:
aa:ee:2f:90:64:f4:ba:2f:1d:26:34:1c:1c:c9:37:34:34:d0:
60:07:f0:85:e4:93:a5:51:1c:9e:b4:03:41:ad:ce:f2:b6:a9:
4c:7a:5f:9f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTnRLtqcVih8bOcZPsp72o2GveEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA4MjUxMTM3NDdaFw0yNzA4MjQxMTQyNDdaMDMxMTAvBgNV
BAMTKEY2QjE1QjhGREFEMkQxQTQ4RkUxNkI4MEMxM0M3QTU0REYwQTkxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrL1Gna2v6WMVaqGQdktaJPzc/
lu9mG8Pspyxr4i0D6ROJlgsgpR7ri8oNZj1d3MKaGQaXwYGJ3+RyanoDs/qMwvGt
0V+6iQcnyMZybVoAlnDuUoKcPIWhx9G7BCuN6i8bgtvWu+YcgGdXEt34LvLHjgkA
GHAvk8OQZDwkRynbhpuKhLBnhZ/NfZVDS9cR9mn2/LXVNKOa2E99HxcO0tAPjWAs
cSnD8eLz4yq0oTnl/iezoXqDaaGr6judx1sU6vauLDO9tzrKC7caFSjILsJLqnkr
NmXUun/8iIZrxo1taYCexdP3+0OTGeqNEKXMc6XjO7JGgIexCOwpfGy8kgkRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9rFbj9rS0aSP4WuAwTx6VN8KkTIwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzNzMxMmUzMjMyMmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMyMzYzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
qxZMMA0GCSqGSIb3DQEBCwUAA4IBAQBAjUJ6yXMmB/stusBGdneb05bvWn5KF/N/
JboqGTsPmIsmL9DeBaWfUevDtoVWRomjlZgewTw8mWgNCUS3Qz2Rzf/KG1ToPoLR
9NkvO8cD0UO+Djw/2fSb1qNHJdmS/y0519/KLzd0/cI2QV4t+lxj2DK8NYGvpS1y
ukq6od5/+J+nlMHVUPe6/cIEaZO0RS4ev0a9gLRLUZe4JmAUSQ/P5A37wrUqVFpI
8sZAjbQulkAmDlbYSvSG6PjRhDOslR6CHzpYOpK68VK5VIyDzB0AxtcJ3g0IjxOq
7i+QZPS6Lx0mNBwcyTc0NNBgB/CF5JOlURyetANBrc7ytqlMel+f
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:13:27 2026 by rpki-client