Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa
File: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: 9Fhp6MCOd+X2RA59heYecj22kZJd6g79ksb5ZL538E4=
Subject key identifier: 46:FE:87:4A:DD:84:F7:51:87:5E:F0:A7:72:FF:96:2B:84:8B:5A:1A
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 7809BC7611403B2A4B35F6A861CB70FC427733D3
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa
Signing time: Tue 16 Jun 2026 16:31:45 +0000
ROA not before: Tue 16 Jun 2026 16:26:45 +0000
ROA not after: Tue 15 Jun 2027 16:31:45 +0000
asID: 17561
IP address blocks: 178.236.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:09:bc:76:11:40:3b:2a:4b:35:f6:a8:61:cb:70:fc:42:77:33:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Jun 16 16:26:45 2026 GMT
Not After : Jun 15 16:31:45 2027 GMT
Subject: CN=46FE874ADD84F751875EF0A772FF962B848B5A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:23:83:9b:ce:fd:8f:67:6c:0c:56:74:af:
0c:fc:62:70:08:0e:73:58:37:dc:33:0c:36:ab:8a:
7a:a8:59:5e:52:4b:f5:15:80:1a:d7:14:e2:f8:76:
38:4f:c8:b1:0c:74:b6:cb:44:2c:72:34:6d:2a:ed:
52:62:8a:61:8f:d8:b1:a0:10:97:fe:3d:92:53:6b:
58:c4:c0:c7:2d:16:6e:07:bd:f7:a7:fa:9c:4b:66:
93:88:a7:a0:c7:73:19:2c:5a:90:03:ad:24:92:5e:
e5:31:f6:5c:5c:f3:dc:ce:ef:d5:5b:3c:8a:ba:4b:
ed:a1:8d:75:36:b0:26:a5:e4:b2:9d:90:dc:f2:5d:
07:42:66:3e:6d:9f:33:91:6f:b2:ec:0b:ab:a5:bc:
11:c0:84:f4:ed:a4:d3:eb:64:3f:63:29:4f:6c:93:
86:ae:9a:54:35:0d:da:ac:22:a5:b9:5f:41:b6:cb:
2b:e1:eb:cf:1f:04:01:41:0c:be:4d:bc:d7:2e:37:
32:ef:44:97:f1:3c:19:58:a8:d0:bf:63:71:cc:cc:
a9:ca:7f:55:a2:28:91:f4:cd:b9:cd:5a:51:1a:b2:
14:e9:fb:80:42:3d:78:89:d0:2a:43:c8:ed:71:d9:
75:06:cb:77:34:c6:97:5a:b4:c2:38:e4:a9:68:ee:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:87:4A:DD:84:F7:51:87:5E:F0:A7:72:FF:96:2B:84:8B:5A:1A
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.234.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d8:ed:22:78:76:a4:78:68:2b:1e:97:06:8b:ab:68:59:fd:
10:b6:58:45:d4:9c:da:ce:58:dd:11:36:72:4d:2f:5c:cc:34:
9d:50:a7:23:00:b1:51:58:84:bb:b8:7d:e7:bb:2d:47:9d:09:
31:70:66:ac:a0:13:4a:5f:93:1a:0b:d5:5f:ed:3e:61:2e:2f:
00:0c:cf:24:cb:91:60:c4:71:69:6f:5b:20:03:5d:c8:6b:0e:
20:7a:a0:f5:f6:0c:20:0e:2c:4a:28:dc:2a:90:ad:90:44:2b:
f6:06:65:db:fe:b4:4d:ba:31:59:3c:2e:5d:66:87:5a:d9:55:
4f:1d:ad:f8:ad:c7:20:ee:00:44:38:2b:51:17:c1:aa:ee:b0:
27:66:8f:a8:64:6e:92:76:a5:54:bb:44:8c:8c:e1:7f:25:79:
01:a7:3b:ce:3b:70:12:34:c2:93:4f:c2:8c:9f:e4:ec:b6:ed:
10:4d:5c:72:da:fa:5b:65:05:3b:53:8c:b8:c2:a4:21:45:50:
51:3e:1f:02:b1:c3:6b:fb:bd:66:c2:6f:dc:67:01:fd:95:66:
66:0c:86:94:23:4c:a8:05:12:c4:44:d2:db:1e:51:ff:92:15:
47:ae:b8:96:da:fa:64:11:ff:dd:82:7a:5c:7f:17:8a:78:82:
97:99:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:13:49 2026 by rpki-client