Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
File: 3138352e3137322e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: uFr7E+eaphwRdKX/Cb7eMtiJ/HsMLZsBcQ3CYO8tIGg=
Subject key identifier: 87:9A:4F:A9:7F:48:8B:3D:0F:48:FE:8A:02:0D:3A:68:EB:7D:3A:94
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3159D7D0D7F12700D17B59220DD33EE5750B62A7
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 05:53:59 +0000
ROA not before: Sun 25 Oct 2026 05:48:59 +0000
ROA not after: Sun 24 Oct 2027 05:53:59 +0000
asID: 834
IP address blocks: 185.172.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:59:d7:d0:d7:f1:27:00:d1:7b:59:22:0d:d3:3e:e5:75:0b:62:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Oct 25 05:48:59 2026 GMT
Not After : Oct 24 05:53:59 2027 GMT
Subject: CN=879A4FA97F488B3D0F48FE8A020D3A68EB7D3A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:b8:19:9f:67:c6:89:45:bd:90:e3:42:1a:
e9:18:7c:27:f2:c7:d2:22:1c:66:b4:d2:5a:14:72:
6e:fc:57:36:46:1c:a5:2f:d9:98:49:51:5a:dc:1e:
54:c4:8a:64:03:02:68:7d:1b:14:c3:a7:14:6b:41:
bc:db:1c:2d:f1:dc:18:2c:b3:9e:93:58:45:9e:d2:
e6:45:57:2d:4b:13:e3:28:79:d1:10:d1:ba:61:11:
ad:dd:50:41:d6:85:56:41:9c:63:a4:2c:28:71:2d:
16:ff:6e:61:07:53:a7:e7:ba:1d:95:c6:98:fd:b3:
9d:6e:dc:df:00:09:fe:c9:7d:83:72:51:9c:a9:d5:
ab:ba:4d:54:32:e4:93:c1:e5:27:e3:6f:35:2c:0b:
9d:e0:a3:9a:d3:ca:68:e4:a8:e8:bb:a9:4a:e3:ca:
68:80:a9:14:58:af:ce:84:29:2c:74:1a:db:d3:79:
08:f4:d7:c7:22:bf:31:7a:bf:74:0c:d9:97:37:98:
fe:70:13:b5:c3:da:26:ea:ba:df:d3:49:4a:6a:ee:
e9:ae:9d:18:d3:98:e5:26:35:f2:84:39:21:fc:05:
e3:cc:8c:03:22:a1:d5:06:3d:79:19:2f:ca:24:de:
ec:74:5a:9e:a6:65:1a:3e:0d:d3:90:56:fc:3f:14:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:4F:A9:7F:48:8B:3D:0F:48:FE:8A:02:0D:3A:68:EB:7D:3A:94
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:07:b1:05:33:e6:98:60:1d:50:06:94:b9:51:de:12:f4:40:
fb:d4:dc:53:8c:18:e3:33:95:43:62:ea:75:3f:9d:75:63:4f:
1f:77:ac:62:bf:3d:13:7d:da:f6:ff:f4:a6:65:ef:dc:7e:51:
6d:ef:ad:cc:b4:e6:98:68:df:a8:2a:61:12:44:72:3a:a3:fa:
ff:fd:90:25:c0:04:ee:bf:54:cf:c4:1b:02:a4:d6:c9:77:54:
7c:3d:4f:d3:3d:c8:d3:ad:a7:aa:e3:1b:3c:e1:36:3c:0b:40:
89:e4:84:31:0a:48:11:a6:da:0b:0e:bc:f8:02:ca:65:c2:59:
ae:55:82:0f:4d:56:a6:a4:fa:7f:82:22:98:90:e0:94:c3:a5:
5d:05:ef:45:0a:d5:68:5e:b9:26:86:ba:d3:82:a2:7d:b8:53:
eb:80:ae:82:d7:f6:9c:8e:44:08:87:c5:a6:53:1c:35:c8:88:
c2:d7:4e:95:a9:7a:a1:a3:36:49:5e:7a:f2:4a:39:b3:64:67:
26:56:02:4c:fb:2c:ec:94:ba:e5:83:5a:86:18:2f:51:f5:8d:
66:d6:97:c3:d0:a7:fd:73:76:f7:05:91:e6:79:44:92:4e:85:
4d:8f:22:2c:6d:cb:2e:db:3c:98:20:ab:9d:cf:d0:02:30:86:
b2:a7:e3:bf
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMVnX0NfxJwDRe1kiDdM+5XULYqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjEwMjUwNTQ4NTlaFw0yNzEwMjQwNTUzNTlaMDMxMTAvBgNV
BAMTKDg3OUE0RkE5N0Y0ODhCM0QwRjQ4RkU4QTAyMEQzQTY4RUI3RDNBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyD7gZn2fGiUW9kONCGukYfCfy
x9IiHGa00loUcm78VzZGHKUv2ZhJUVrcHlTEimQDAmh9GxTDpxRrQbzbHC3x3Bgs
s56TWEWe0uZFVy1LE+MoedEQ0bphEa3dUEHWhVZBnGOkLChxLRb/bmEHU6fnuh2V
xpj9s51u3N8ACf7JfYNyUZyp1au6TVQy5JPB5SfjbzUsC53go5rTymjkqOi7qUrj
ymiAqRRYr86EKSx0GtvTeQj018civzF6v3QM2Zc3mP5wE7XD2ibqut/TSUpq7umu
nRjTmOUmNfKEOSH8BePMjAMiodUGPXkZL8ok3ux0Wp6mZRo+DdOQVvw/FOE5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUh5pPqX9Iiz0PSP6KAg06aOt9OpQwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzODM1MmUzMTM3MzIyZTMx
MzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALms
rjANBgkqhkiG9w0BAQsFAAOCAQEAqAexBTPmmGAdUAaUuVHeEvRA+9TcU4wY4zOV
Q2LqdT+ddWNPH3esYr89E33a9v/0pmXv3H5Rbe+tzLTmmGjfqCphEkRyOqP6//2Q
JcAE7r9Uz8QbAqTWyXdUfD1P0z3I062nquMbPOE2PAtAieSEMQpIEabaCw68+ALK
ZcJZrlWCD01WpqT6f4IimJDglMOlXQXvRQrVaF65Joa604KifbhT64Cugtf2nI5E
CIfFplMcNciIwtdOlal6oaM2SV568ko5s2RnJlYCTPss7JS65YNahhgvUfWNZtaX
w9Cn/XN29wWR5nlEkk6FTY8iLG3LLts8mCCrnc/QAjCGsqfjvw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:09:28 2026 by rpki-client