Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20313938333737.roa
File: 3137362e3130322e3136382e302f32342d3234203d3e20313938333737.roa (raw, json)
Hash identifier: ImK26w9v0DrIoorSl6OWCo7vwAHHQQIR6bv3PXc75gY=
Subject key identifier: 77:C5:2B:FF:76:DD:38:62:03:54:38:09:6E:38:F0:C3:5B:A3:27:1A
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 7A20A4CDF5D772FBB0FCA3389EF5141DD8DC12D9
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20313938333737.roa
Signing time: Sun 25 Oct 2026 01:23:20 +0000
ROA not before: Sun 25 Oct 2026 01:18:20 +0000
ROA not after: Sun 24 Oct 2027 01:23:20 +0000
asID: 198377
IP address blocks: 176.102.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:20:a4:cd:f5:d7:72:fb:b0:fc:a3:38:9e:f5:14:1d:d8:dc:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Oct 25 01:18:20 2026 GMT
Not After : Oct 24 01:23:20 2027 GMT
Subject: CN=77C52BFF76DD3862035438096E38F0C35BA3271A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:85:7e:4d:cf:22:00:96:60:48:d8:9c:28:
5e:f1:f3:e4:3d:e8:d5:25:bd:03:a8:86:58:53:7c:
fc:c9:cb:c5:83:81:67:0a:35:fe:21:28:ad:f0:65:
78:8a:75:37:f2:24:ca:d8:ac:19:55:cc:ee:28:1a:
df:22:90:b0:94:eb:da:a4:94:2e:6c:fc:b8:0f:b5:
97:bc:58:db:55:00:36:f3:8d:8a:da:3c:f4:cc:2e:
e5:c9:12:e6:6c:4c:fe:0c:e5:65:89:33:90:f7:1c:
bf:e2:ca:c9:5d:46:73:b8:f6:e7:5c:4f:58:22:67:
7d:ce:3a:f3:11:15:fd:fc:21:b8:db:4d:ef:aa:fb:
a7:de:53:4b:62:0a:36:7d:eb:dc:32:4a:97:c9:d3:
68:af:f2:ff:66:fb:0b:25:35:06:18:d9:12:54:6f:
6e:57:28:3d:02:e8:01:8f:4c:8c:f0:2c:41:4e:60:
26:9b:c7:37:33:c0:3f:d5:ff:88:84:11:76:6a:fe:
a3:35:1c:20:96:f2:9c:91:9e:5b:e4:4f:f4:db:80:
51:94:3a:84:43:36:60:9f:3b:98:78:9b:a7:a6:56:
5e:6a:27:57:2e:ce:df:0d:75:79:26:74:dd:bc:5e:
a1:9e:22:ae:d3:ca:c3:15:00:87:bc:45:0a:b9:49:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:2B:FF:76:DD:38:62:03:54:38:09:6E:38:F0:C3:5B:A3:27:1A
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20313938333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:82:2e:a1:0e:02:4e:c8:81:b2:05:76:4d:f6:9f:c7:a6:58:
c2:08:67:5e:0a:98:4d:11:a2:0f:b5:6f:e6:ba:ec:4c:cb:f5:
12:f8:9e:ba:72:95:64:95:a1:bb:6c:64:1a:7b:32:fc:4c:52:
28:7a:96:8b:91:fe:f5:94:99:ad:4d:22:d7:78:08:7a:52:be:
16:07:e2:cf:c0:29:c3:26:42:f2:d3:65:a5:90:76:7a:52:40:
79:9e:10:a5:d5:ce:c9:a5:9c:15:7b:ef:f9:e5:d7:3a:79:63:
5e:f2:68:a3:60:da:30:fb:e7:bc:c0:52:a6:44:14:40:b2:09:
bf:8c:23:4f:d8:c6:85:45:a8:33:b7:41:f0:15:79:bb:3c:f7:
8b:2e:02:16:1e:02:da:3b:fe:f8:53:85:bf:95:78:e9:2c:5e:
c5:d1:9a:03:8c:5c:00:1c:ab:60:43:e8:9d:ca:ed:99:46:ef:
c3:08:3b:5b:6c:78:bf:0c:3a:fc:5c:0a:6d:54:5d:ce:17:28:
d8:3d:9b:65:b6:3d:8d:e8:6b:fa:70:95:44:fa:85:78:06:61:
e5:e2:71:31:eb:a3:6c:c5:9d:ff:20:34:4a:7e:ab:81:ef:1d:
30:d3:0c:9c:65:3e:74:fc:16:b4:7f:31:57:86:15:76:c1:93:
e1:1e:60:a0
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUeiCkzfXXcvuw/KM4nvUUHdjcEtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjEwMjUwMTE4MjBaFw0yNzEwMjQwMTIzMjBaMDMxMTAvBgNV
BAMTKDc3QzUyQkZGNzZERDM4NjIwMzU0MzgwOTZFMzhGMEMzNUJBMzI3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq4V+Tc8iAJZgSNicKF7x8+Q9
6NUlvQOohlhTfPzJy8WDgWcKNf4hKK3wZXiKdTfyJMrYrBlVzO4oGt8ikLCU69qk
lC5s/LgPtZe8WNtVADbzjYraPPTMLuXJEuZsTP4M5WWJM5D3HL/iysldRnO49udc
T1giZ33OOvMRFf38IbjbTe+q+6feU0tiCjZ969wySpfJ02iv8v9m+wslNQYY2RJU
b25XKD0C6AGPTIzwLEFOYCabxzczwD/V/4iEEXZq/qM1HCCW8pyRnlvkT/TbgFGU
OoRDNmCfO5h4m6emVl5qJ1cuzt8NdXkmdN28XqGeIq7TysMVAIe8RQq5STdLAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUd8Ur/3bdOGIDVDgJbjjww1ujJxowHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzNzM2MmUzMTMwMzIyZTMx
MzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODMzMzczNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALBmqDANBgkqhkiG9w0BAQsFAAOCAQEAwYIuoQ4CTsiBsgV2Tfafx6ZYwghn
XgqYTRGiD7Vv5rrsTMv1EvieunKVZJWhu2xkGnsy/ExSKHqWi5H+9ZSZrU0i13gI
elK+Fgfiz8ApwyZC8tNlpZB2elJAeZ4QpdXOyaWcFXvv+eXXOnljXvJoo2DaMPvn
vMBSpkQUQLIJv4wjT9jGhUWoM7dB8BV5uzz3iy4CFh4C2jv++FOFv5V46SxexdGa
A4xcAByrYEPoncrtmUbvwwg7W2x4vww6/FwKbVRdzhco2D2bZbY9jehr+nCVRPqF
eAZh5eJxMeujbMWd/yA0Sn6rge8dMNMMnGU+dPwWtH8xV4YVdsGT4R5goA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:45 2026 by rpki-client