Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa
File: 3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: tVXgDczh1Jz7wXt3P0yPpo1PmevC5I4Bn+9xw+6RHtQ=
Subject key identifier: F4:76:7C:7A:18:0E:D7:87:FE:AC:40:03:92:56:A1:66:49:80:C7:71
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 09F356BCB20DB00809C8775FEEB6B90450690203
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa
Signing time: Tue 16 Jun 2026 16:31:26 +0000
ROA not before: Tue 16 Jun 2026 16:26:26 +0000
ROA not after: Tue 15 Jun 2027 16:31:26 +0000
asID: 17561
IP address blocks: 178.236.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f3:56:bc:b2:0d:b0:08:09:c8:77:5f:ee:b6:b9:04:50:69:02:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Jun 16 16:26:26 2026 GMT
Not After : Jun 15 16:31:26 2027 GMT
Subject: CN=F4767C7A180ED787FEAC40039256A1664980C771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:08:a0:a0:e9:ee:aa:aa:3f:7e:54:ae:de:
2b:48:45:4e:7b:d4:15:53:e6:b0:f4:cc:07:91:70:
3d:93:2e:ee:9b:49:c5:29:50:e5:cf:a0:65:e1:4a:
9a:02:3c:ae:ae:ee:87:0f:83:5f:1e:e8:79:24:ae:
31:da:fe:6f:27:ba:b6:55:5d:8d:c5:87:3b:71:6a:
a5:fd:c2:74:13:14:b6:8d:12:0a:32:22:34:be:28:
db:68:44:bc:ac:ed:14:7b:95:81:4a:87:39:57:7f:
a1:ce:51:8c:53:2c:42:d1:d2:92:6f:fa:4c:fe:60:
2c:40:13:20:ee:c4:8d:bb:45:29:36:d9:d4:d1:fc:
86:b6:01:78:62:20:1f:71:c8:fc:0f:9c:e2:da:85:
b5:55:2e:d0:f1:36:e9:2c:d3:5f:25:ad:2a:84:f2:
7f:7b:e4:d1:51:aa:4f:28:cd:d9:f6:64:d3:74:0f:
c1:13:fd:0b:2a:83:26:69:da:d8:98:6b:62:6f:58:
da:6c:35:57:1b:54:1d:8d:03:e7:83:94:7b:06:8f:
e3:93:9d:5b:27:9a:34:c7:26:28:d0:4c:0d:05:8f:
d3:14:36:fe:ab:e1:39:5b:d8:dc:d7:0f:09:b6:f5:
67:5a:af:5e:f5:15:10:fc:e3:35:3b:84:4a:b6:c4:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:7C:7A:18:0E:D7:87:FE:AC:40:03:92:56:A1:66:49:80:C7:71
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233372e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b5:dc:a8:af:97:53:bf:84:a7:ea:05:8c:20:a2:1f:25:54:
45:b8:29:e7:a1:4f:6e:53:63:fb:63:62:71:21:00:97:bb:91:
60:d3:ea:6b:0a:f1:4f:a3:e6:8d:ec:f4:c4:94:1f:2a:5e:a1:
c8:9e:d8:ce:45:96:99:78:e2:7a:b1:b7:7d:3e:40:39:cd:b6:
44:31:c0:b1:01:30:60:f3:ea:a3:21:b0:15:ae:1d:00:88:5d:
46:74:d7:d7:48:9d:d1:bf:04:44:2d:07:e7:26:c6:e1:d3:62:
26:3e:1a:84:0e:63:f9:c4:f6:a2:8c:f5:82:06:41:e0:ee:73:
74:70:e8:83:2e:2f:96:0a:6b:ec:2f:6a:15:fb:56:39:d2:b5:
19:df:17:ff:50:97:19:4b:11:bb:3f:57:18:40:db:75:43:47:
c8:f7:7c:39:69:e6:18:d7:91:79:cd:85:1a:e2:06:bf:54:5c:
8e:05:52:ce:42:98:c3:80:8c:42:21:9c:6a:0c:d8:b1:bd:90:
7a:09:64:33:21:13:0f:e7:4b:c5:2f:a0:e6:90:35:c4:47:e6:
c6:77:5c:bf:80:b2:e7:4a:7d:2f:36:8d:f4:29:5f:d1:0f:0a:
2e:0d:3e:17:61:fa:f9:1a:0a:bd:74:56:42:5f:82:e2:25:2e:
c5:67:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:19:05 2026 by rpki-client