Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20313337343130.roa
File: 3138352e3137322e3137342e302f32342d3234203d3e20313337343130.roa (raw, json)
Hash identifier: +c26ItwFjwQT+oHZX/4jCen76Jql4g5ZIzIJP0dubZk=
Subject key identifier: E4:3E:99:76:4F:9C:42:73:4A:91:A2:51:34:2A:76:7A:72:A9:A8:DD
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 373019DD6C1DA7F9A316BD91691201ED6F11BC71
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20313337343130.roa
Signing time: Thu 06 Aug 2026 02:33:24 +0000
ROA not before: Thu 06 Aug 2026 02:28:24 +0000
ROA not after: Thu 05 Aug 2027 02:33:24 +0000
asID: 137410
IP address blocks: 185.172.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:30:19:dd:6c:1d:a7:f9:a3:16:bd:91:69:12:01:ed:6f:11:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 6 02:28:24 2026 GMT
Not After : Aug 5 02:33:24 2027 GMT
Subject: CN=E43E99764F9C42734A91A251342A767A72A9A8DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:16:d3:5f:dc:c3:49:e9:28:ab:47:3f:c8:
b5:4a:db:0c:1d:9b:77:25:54:28:93:17:30:7e:0e:
02:ba:3d:79:d5:78:78:80:f8:fc:ff:b4:d5:4e:b0:
b7:07:a8:3c:2a:ae:c3:4f:ab:4e:7e:23:c2:f8:f8:
b6:a1:d0:ee:35:48:23:6d:a9:66:69:01:e3:a3:cf:
84:b8:27:33:af:ea:a2:35:14:84:71:a0:e1:84:f9:
74:97:6f:c2:ea:3d:1a:db:c0:fd:51:6a:97:2a:ad:
70:9d:7b:4b:d7:0c:48:99:18:04:b7:23:85:4d:46:
f0:9b:23:02:d6:1d:a6:32:7f:f9:50:9a:f3:dd:1f:
26:08:22:06:27:88:77:35:04:b8:42:7b:ab:32:af:
88:2b:dc:08:36:07:6c:13:74:2f:e9:a4:92:9b:92:
ba:e0:9e:22:89:a3:13:b7:5e:81:e0:97:6d:ec:80:
81:99:29:76:94:b7:91:90:57:20:a5:a8:17:3f:3f:
53:c3:50:74:36:30:39:37:39:98:d6:df:6e:9d:43:
b1:03:06:e1:56:74:44:a1:aa:10:35:ec:f3:9a:bf:
84:43:1e:b4:59:24:21:ff:4c:e0:44:b5:5e:25:f5:
03:9a:43:64:6a:ab:e5:43:9c:93:d4:31:5b:75:7e:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:99:76:4F:9C:42:73:4A:91:A2:51:34:2A:76:7A:72:A9:A8:DD
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20313337343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:01:f6:17:d2:13:90:8e:02:75:22:69:98:d7:24:eb:f8:d3:
fa:67:33:5b:37:24:55:b7:cb:50:88:73:a9:ac:54:3d:f2:ba:
5e:9a:c6:bd:98:1f:fa:5b:72:a8:1b:07:ab:83:6b:14:35:06:
ac:8a:ac:eb:8e:11:89:d5:4f:48:47:d1:de:a0:29:03:52:1b:
13:95:58:25:11:30:e3:92:5f:c1:a6:77:b6:d5:44:04:76:bb:
9c:50:b3:72:2c:75:d4:b8:eb:a2:1b:1d:ff:a0:82:d6:98:0e:
34:6b:2a:81:35:79:a2:d6:92:da:db:fd:0d:7f:5c:df:50:56:
81:fd:c0:ff:fd:17:fd:80:d0:5d:af:e0:67:72:da:e1:b5:98:
f7:00:71:05:95:20:44:6a:8c:f5:9a:4d:96:e1:cb:ff:bf:70:
2e:e2:7a:87:9f:e3:4f:20:82:12:a6:dc:c8:ee:68:13:47:8f:
cf:6d:3f:d4:c1:08:a9:fd:71:d2:a5:34:54:8b:45:a0:c7:3b:
14:2a:9a:b6:63:52:bb:08:7b:0e:cb:39:03:7b:b3:e0:b9:e3:
99:b4:86:7b:db:5a:e2:0f:56:39:f2:ed:92:e4:68:63:70:cc:
b6:b8:5e:84:19:43:e5:5e:d2:f2:0d:a6:bb:8a:62:2c:20:a4:
73:1f:8c:23
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNzAZ3Wwdp/mjFr2RaRIB7W8RvHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA4MDYwMjI4MjRaFw0yNzA4MDUwMjMzMjRaMDMxMTAvBgNV
BAMTKEU0M0U5OTc2NEY5QzQyNzM0QTkxQTI1MTM0MkE3NjdBNzJBOUE4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZxbTX9zDSekoq0c/yLVK2wwd
m3clVCiTFzB+DgK6PXnVeHiA+Pz/tNVOsLcHqDwqrsNPq05+I8L4+Lah0O41SCNt
qWZpAeOjz4S4JzOv6qI1FIRxoOGE+XSXb8LqPRrbwP1RapcqrXCde0vXDEiZGAS3
I4VNRvCbIwLWHaYyf/lQmvPdHyYIIgYniHc1BLhCe6syr4gr3Ag2B2wTdC/ppJKb
krrgniKJoxO3XoHgl23sgIGZKXaUt5GQVyClqBc/P1PDUHQ2MDk3OZjW326dQ7ED
BuFWdEShqhA17POav4RDHrRZJCH/TOBEtV4l9QOaQ2Rqq+VDnJPUMVt1fuHXAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU5D6Zdk+cQnNKkaJRNCp2enKpqN0wHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzODM1MmUzMTM3MzIyZTMx
MzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM0MzEzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALmsrjANBgkqhkiG9w0BAQsFAAOCAQEAygH2F9ITkI4CdSJpmNck6/jT+mcz
WzckVbfLUIhzqaxUPfK6XprGvZgf+ltyqBsHq4NrFDUGrIqs644RidVPSEfR3qAp
A1IbE5VYJREw45JfwaZ3ttVEBHa7nFCzcix11Ljrohsd/6CC1pgONGsqgTV5otaS
2tv9DX9c31BWgf3A//0X/YDQXa/gZ3La4bWY9wBxBZUgRGqM9ZpNluHL/79wLuJ6
h5/jTyCCEqbcyO5oE0ePz20/1MEIqf1x0qU0VItFoMc7FCqatmNSuwh7Dss5A3uz
4LnjmbSGe9ta4g9WOfLtkuRoY3DMtrhehBlD5V7S8g2mu4piLCCkcx+MIw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:39 2026 by rpki-client