Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa
File: 3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa (raw, json)
Hash identifier: Abx0NY/FEKNB40FyZyolSPqu0J8sHxU49jbBgSLFT6U=
Subject key identifier: 89:F2:61:9E:1A:84:3F:19:15:D7:4C:E3:BD:EA:45:C4:0D:B5:D2:E6
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 0AF6CE7D3EAF94622C0CC57F18DF42650A0830B2
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa
Signing time: Sun 16 Aug 2026 15:15:48 +0000
ROA not before: Sun 16 Aug 2026 15:10:48 +0000
ROA not after: Sun 15 Aug 2027 15:15:48 +0000
asID: 219105
IP address blocks: 176.102.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 09:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f6:ce:7d:3e:af:94:62:2c:0c:c5:7f:18:df:42:65:0a:08:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Aug 16 15:10:48 2026 GMT
Not After : Aug 15 15:15:48 2027 GMT
Subject: CN=89F2619E1A843F1915D74CE3BDEA45C40DB5D2E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:2e:e0:bd:cb:8e:e2:39:3c:1b:7e:ea:09:
52:39:60:ea:eb:a6:31:4d:ac:98:56:61:a2:48:bb:
16:1c:ef:30:63:1a:19:53:ec:fa:3d:9e:77:76:d7:
6e:1c:e8:13:0f:bf:02:51:11:81:ad:d2:b2:a8:04:
f4:e8:1f:e6:19:46:98:53:ba:a5:22:4e:85:c8:e7:
ad:a4:f4:77:af:f6:d1:8a:dc:6c:74:55:af:da:62:
93:31:74:3a:bc:5e:20:d0:7d:c1:e7:22:82:bf:b3:
bb:ee:de:cf:6e:b7:70:e9:b1:b1:d5:87:65:aa:40:
5a:f3:2b:1d:43:09:5e:79:9a:84:ad:e3:4b:6a:b0:
5b:24:5a:73:50:9c:23:60:6e:6c:ae:d3:1e:20:b3:
99:ad:e7:4e:f3:70:47:29:29:65:41:5e:40:25:60:
32:1f:df:ee:8b:83:2b:7d:06:c9:3b:e1:ef:8c:d7:
36:b5:c7:de:d6:bc:08:9e:ac:e0:59:6c:38:66:c4:
89:1e:4c:59:a8:e7:0d:e1:25:68:c7:d9:28:09:06:
19:1d:85:c2:3a:d6:75:ff:fe:34:2a:2b:4c:02:e5:
0d:19:b6:2a:68:b4:9a:7e:b4:0e:de:b9:91:54:fd:
60:74:71:3d:2a:66:75:20:84:15:8a:43:c6:90:86:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:61:9E:1A:84:3F:19:15:D7:4C:E3:BD:EA:45:C4:0D:B5:D2:E6
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6c:17:85:66:0e:36:31:e3:09:22:aa:e3:d5:12:0c:df:44:
60:55:6d:00:e1:8b:d6:3e:68:a7:43:ae:04:dc:12:57:ca:e5:
72:9e:18:60:b7:35:3a:ad:ae:25:b8:fd:32:0c:eb:a8:12:ca:
1e:79:a2:77:0c:38:da:88:82:ab:be:d8:ce:69:ba:16:24:e6:
4f:69:cf:8a:bc:bf:5f:f6:77:70:f4:eb:bf:02:c3:21:e4:9a:
c6:3d:a8:e7:c6:0d:ca:d7:e5:5b:60:65:3b:14:d7:fc:23:c0:
a7:b7:44:ec:15:95:1a:c7:8d:37:0e:15:21:18:a6:8e:95:ba:
c4:1a:91:3b:5b:30:00:8c:3e:f2:3e:ba:de:ed:1a:65:2e:22:
4b:7e:74:37:f3:5c:c4:f2:b7:d1:78:31:f9:cb:40:27:5b:f0:
4a:0f:03:ee:b7:0d:4a:50:e7:6d:19:a0:3c:8a:c7:48:1b:85:
35:14:73:54:13:f6:da:d3:b8:73:ed:b9:8e:16:fe:98:1b:23:
b9:d6:2c:e7:ef:d2:22:d7:46:ef:5d:0a:23:b8:d2:2f:3c:63:
92:95:4f:0a:df:23:3d:d2:92:e7:c4:94:d7:38:0e:02:a7:9e:
39:65:fd:af:8f:78:e7:fb:0f:91:4f:a3:ed:3e:85:3c:2f:d7:
21:3a:96:e1
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUCvbOfT6vlGIsDMV/GN9CZQoIMLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjA4MTYxNTEwNDhaFw0yNzA4MTUxNTE1NDhaMDMxMTAvBgNV
BAMTKDg5RjI2MTlFMUE4NDNGMTkxNUQ3NENFM0JERUE0NUM0MERCNUQyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluS7gvcuO4jk8G37qCVI5YOrr
pjFNrJhWYaJIuxYc7zBjGhlT7Po9nnd2124c6BMPvwJREYGt0rKoBPToH+YZRphT
uqUiToXI562k9Hev9tGK3Gx0Va/aYpMxdDq8XiDQfcHnIoK/s7vu3s9ut3DpsbHV
h2WqQFrzKx1DCV55moSt40tqsFskWnNQnCNgbmyu0x4gs5mt507zcEcpKWVBXkAl
YDIf3+6Lgyt9Bsk74e+M1za1x97WvAierOBZbDhmxIkeTFmo5w3hJWjH2SgJBhkd
hcI61nX//jQqK0wC5Q0ZtipotJp+tA7euZFU/WB0cT0qZnUghBWKQ8aQhqmZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUifJhnhqEPxkV10zjvepFxA210uYwHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzNzM2MmUzMTMwMzIyZTMx
MzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzOTMxMzAzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALBmqDANBgkqhkiG9w0BAQsFAAOCAQEAUmwXhWYONjHjCSKq49USDN9EYFVt
AOGL1j5op0OuBNwSV8rlcp4YYLc1Oq2uJbj9MgzrqBLKHnmidww42oiCq77Yzmm6
FiTmT2nPiry/X/Z3cPTrvwLDIeSaxj2o58YNytflW2BlOxTX/CPAp7dE7BWVGseN
Nw4VIRimjpW6xBqRO1swAIw+8j663u0aZS4iS350N/NcxPK30Xgx+ctAJ1vwSg8D
7rcNSlDnbRmgPIrHSBuFNRRzVBP22tO4c+25jhb+mBsjudYs5+/SItdG710KI7jS
LzxjkpVPCt8jPdKS58SU1zgOAqeeOWX9r4945/sPkU+j7T6FPC/XITqW4Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:46:46 2026 by rpki-client