Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa
File: 3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: bWfkodHT7E5HimunFdGnoIBAIfbUWSMFLrgQXGVbeTU=
Subject key identifier: 1D:76:22:6C:C8:B9:6C:85:24:AB:DD:12:17:E5:62:30:59:9F:5C:56
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 3A7DBAFFCB9494155CE36C35BFC46F5AEFB864FB
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa
Signing time: Tue 16 Jun 2026 16:31:34 +0000
ROA not before: Tue 16 Jun 2026 16:26:34 +0000
ROA not after: Tue 15 Jun 2027 16:31:34 +0000
asID: 16509
IP address blocks: 178.236.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7d:ba:ff:cb:94:94:15:5c:e3:6c:35:bf:c4:6f:5a:ef:b8:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Jun 16 16:26:34 2026 GMT
Not After : Jun 15 16:31:34 2027 GMT
Subject: CN=1D76226CC8B96C8524ABDD1217E56230599F5C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:a0:71:0a:b8:24:5b:7a:be:45:5d:0d:d6:
75:21:11:b9:6e:21:00:20:9b:ce:23:95:f5:51:99:
9b:6d:6d:44:b2:9c:6c:72:f2:0a:a5:08:f4:04:2d:
f5:4d:c3:57:40:5b:6d:31:3f:3f:56:6d:96:c9:55:
88:1d:45:04:a9:52:dd:01:c8:72:f7:20:ce:98:63:
d4:47:57:97:ab:54:58:47:13:f2:57:9a:54:75:39:
65:95:2b:62:b0:de:84:ce:7a:8c:ba:9c:df:d9:b2:
0a:87:6d:01:1f:5f:27:c0:e7:b5:f1:8f:df:0d:90:
bb:f7:64:ab:08:be:40:80:8e:49:20:70:13:dc:fb:
33:7e:5b:1c:47:f6:14:23:e1:a5:e1:08:9b:de:e9:
b4:71:47:3c:2a:43:ec:f9:8e:4a:e1:83:28:20:43:
72:c7:fd:ac:72:bb:72:1a:26:c6:1e:04:66:e4:90:
55:77:4c:28:ec:3e:80:59:8d:0d:c0:8d:b4:ae:2f:
c1:0f:f5:c4:0a:2e:0d:50:7f:d5:5f:69:28:92:ad:
23:26:9a:aa:fd:1c:ac:0a:22:e9:d4:7a:bc:45:45:
0f:44:17:c3:76:a4:e2:c5:61:da:4c:4b:cc:ff:74:
e5:ea:08:39:4b:5b:0c:22:e5:08:f7:65:b3:06:07:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:22:6C:C8:B9:6C:85:24:AB:DD:12:17:E5:62:30:59:9F:5C:56
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233352e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1c:56:e4:3e:4d:08:7c:f9:71:be:71:d6:d7:b0:59:c9:09:
65:eb:62:a8:9a:30:4a:70:2b:a9:37:75:d1:ba:3e:a5:ac:d5:
8e:74:fb:25:d0:4c:46:3c:7a:9d:4c:63:20:42:89:87:72:a5:
20:e9:f6:04:bb:7e:9b:0e:10:e8:25:cb:b1:7e:14:25:8a:d1:
8a:a7:db:0c:02:d9:ea:e4:7b:30:d2:69:ab:6c:8f:a1:20:fc:
9f:e5:e2:4b:3f:4b:db:f7:d0:2d:f8:24:73:b1:57:ff:50:b6:
fd:27:03:8a:96:3f:0e:b0:4d:7e:24:de:ad:45:67:dd:38:74:
64:e3:91:9f:e9:4d:8a:83:6b:7c:95:59:01:a1:12:8a:ac:03:
1c:d9:6d:cc:ec:a5:64:3d:0b:46:40:82:af:2c:46:08:dc:5a:
1f:a3:ad:77:4c:83:e0:b3:12:e3:44:68:41:f9:95:3e:45:ab:
38:57:be:01:d6:5c:dd:2e:1b:99:66:1d:2d:74:d8:ee:ff:8d:
00:22:07:13:32:fa:61:b5:c7:66:33:fe:8b:4e:32:54:dc:3c:
ac:4c:00:6f:02:3c:33:82:9a:62:a2:a7:0e:7d:22:6d:c2:c3:
a1:0c:c1:fa:40:ba:8c:f1:9c:4c:7e:0c:36:6b:e0:fc:19:94:
d3:08:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:18:58 2026 by rpki-client