Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203239383032.roa
File: 3137312e32322e37362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: YG6VYgV25r5ivU8xV8+xvxZOWPGG21+FBjMOrEoKIAw=
Subject key identifier: 37:AA:DF:4D:CB:5E:80:AF:B6:78:74:67:71:54:B4:DC:09:8F:A8:5A
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 0652AD9D36829AD494F91F92EC5DB31D83AB6682
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203239383032.roa
Signing time: Tue 07 Jul 2026 20:44:17 +0000
ROA not before: Tue 07 Jul 2026 20:39:17 +0000
ROA not after: Tue 06 Jul 2027 20:44:17 +0000
asID: 29802
IP address blocks: 171.22.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:52:ad:9d:36:82:9a:d4:94:f9:1f:92:ec:5d:b3:1d:83:ab:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 7 20:39:17 2026 GMT
Not After : Jul 6 20:44:17 2027 GMT
Subject: CN=37AADF4DCB5E80AFB67874677154B4DC098FA85A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:d8:3e:22:b4:2c:84:31:90:a6:15:9f:e5:
72:e0:5b:3b:e4:7c:7f:f3:c5:a6:05:81:27:37:34:
4d:f2:60:05:57:a7:b3:61:b0:bf:9e:31:d5:37:ba:
c8:af:ed:64:09:90:0a:d8:96:b7:76:cd:95:4a:19:
75:07:57:ec:a7:0b:6b:63:6f:3b:76:ba:02:13:8f:
93:ad:91:f1:8b:50:5b:01:17:32:a6:f3:40:82:96:
e4:2d:2b:26:52:3d:e9:83:42:d5:35:9b:bf:bc:ec:
3e:b2:2f:dc:d9:c5:80:f6:8a:37:51:62:c8:72:9a:
9b:0d:9e:9e:b5:3a:04:8f:03:c3:34:a6:da:a8:e6:
28:aa:0f:34:da:67:04:3e:04:58:5a:a4:37:34:6f:
fb:b7:e6:0f:ee:fa:ce:58:43:57:cd:d9:a4:f5:b0:
eb:46:6f:af:52:fc:16:05:3e:2b:c3:69:34:40:d2:
69:53:0e:c2:cd:83:a9:51:93:41:d8:13:7f:36:36:
82:5d:6e:3c:ca:06:7d:0e:6e:db:ab:1f:4c:59:98:
ab:9d:1a:21:32:19:46:bf:a4:1f:91:69:ea:ab:79:
32:ae:5d:10:52:b6:eb:e6:a3:90:34:c0:de:a8:4f:
ae:6c:98:6d:f3:09:d9:b4:a7:c5:a7:b9:6a:d7:9e:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:DF:4D:CB:5E:80:AF:B6:78:74:67:71:54:B4:DC:09:8F:A8:5A
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
88:9c:3a:37:d4:be:73:15:ca:92:32:22:2f:ac:e2:52:aa:6a:
ed:4b:a7:69:49:87:bc:d0:7a:8b:f8:72:c4:16:4e:27:2b:ad:
3f:de:82:a6:e8:74:29:65:eb:a6:51:15:a9:ac:9e:9d:f2:0f:
ef:76:fc:47:9a:0f:e4:a2:06:e9:43:c2:3d:be:b3:31:e0:a0:
53:2b:82:f6:8f:be:74:08:03:e1:be:57:cd:08:e3:f6:d8:ba:
5a:9b:34:f5:8f:9f:c3:3d:5c:0e:e0:86:da:4d:85:4e:3c:9a:
5c:79:a2:06:80:08:33:4e:86:ad:ee:ba:08:f7:6e:8e:54:32:
96:11:a7:df:7f:f2:16:44:e4:a0:f6:92:60:64:02:a7:72:7a:
aa:10:f9:83:cb:6b:c6:b1:06:7a:5c:02:5b:f8:91:5a:e6:e9:
2e:6b:4d:e5:e3:a7:3c:05:1d:f1:07:8b:64:94:46:c2:af:e2:
2a:26:ee:5a:3c:f7:89:0f:24:92:3f:6b:c2:0b:75:aa:7b:43:
00:ee:86:a8:42:40:fa:0b:0f:20:89:36:10:83:0e:49:9b:87:
7b:e0:be:97:ac:4b:c3:89:63:26:91:93:2b:c3:9f:5c:69:93:
9b:84:dd:50:8e:fc:20:fe:b5:6f:c3:dd:c5:e0:6c:a7:58:cc:
8b:0c:44:ae
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUBlKtnTaCmtSU+R+S7F2zHYOrZoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA3MDcyMDM5MTdaFw0yNzA3MDYyMDQ0MTdaMDMxMTAvBgNV
BAMTKDM3QUFERjREQ0I1RTgwQUZCNjc4NzQ2NzcxNTRCNERDMDk4RkE4NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7dg+IrQshDGQphWf5XLgWzvk
fH/zxaYFgSc3NE3yYAVXp7NhsL+eMdU3usiv7WQJkArYlrd2zZVKGXUHV+ynC2tj
bzt2ugITj5OtkfGLUFsBFzKm80CCluQtKyZSPemDQtU1m7+87D6yL9zZxYD2ijdR
YshympsNnp61OgSPA8M0ptqo5iiqDzTaZwQ+BFhapDc0b/u35g/u+s5YQ1fN2aT1
sOtGb69S/BYFPivDaTRA0mlTDsLNg6lRk0HYE382NoJdbjzKBn0ObturH0xZmKud
GiEyGUa/pB+RaeqreTKuXRBStuvmo5A0wN6oT65smG3zCdm0p8WnuWrXnijpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUN6rfTctegK+2eHRncVS03AmPqFowHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzNzMxMmUzMjMyMmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKsW
TDANBgkqhkiG9w0BAQsFAAOCAQEAiJw6N9S+cxXKkjIiL6ziUqpq7UunaUmHvNB6
i/hyxBZOJyutP96Cpuh0KWXrplEVqayenfIP73b8R5oP5KIG6UPCPb6zMeCgUyuC
9o++dAgD4b5XzQjj9ti6Wps09Y+fwz1cDuCG2k2FTjyaXHmiBoAIM06Gre66CPdu
jlQylhGn33/yFkTkoPaSYGQCp3J6qhD5g8trxrEGelwCW/iRWubpLmtN5eOnPAUd
8QeLZJRGwq/iKibuWjz3iQ8kkj9rwgt1qntDAO6GqEJA+gsPIIk2EIMOSZuHe+C+
l6xLw4ljJpGTK8OfXGmTm4TdUI78IP61b8PdxeBsp1jMiwxErg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:06:05 2026 by rpki-client