Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e2030.roa
File: 3137362e3130322e3136392e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: nKG6CnM11Yjb8MVIkignfXNBO3ikiwLEINTV0ehMpsg=
Subject key identifier: 9E:92:03:16:CE:95:B9:16:E1:AF:92:29:D8:EB:62:B6:3F:3A:52:88
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 61696B2E102AE5FDA55F6EC3CF427078E850415B
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e2030.roa
Signing time: Thu 25 Jun 2026 12:22:54 +0000
ROA not before: Thu 25 Jun 2026 12:17:54 +0000
ROA not after: Thu 24 Jun 2027 12:22:54 +0000
asID: 0
IP address blocks: 176.102.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:69:6b:2e:10:2a:e5:fd:a5:5f:6e:c3:cf:42:70:78:e8:50:41:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jun 25 12:17:54 2026 GMT
Not After : Jun 24 12:22:54 2027 GMT
Subject: CN=9E920316CE95B916E1AF9229D8EB62B63F3A5288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:fc:14:61:3e:a9:28:3c:3b:45:c1:51:cb:
95:0d:a6:e0:15:01:e6:63:78:08:76:0b:b1:f0:aa:
54:d5:02:2a:a3:60:bd:0d:f9:5f:83:59:46:52:bf:
e2:e7:5d:ac:e1:c1:58:78:02:ac:30:6f:92:d8:ca:
85:58:67:67:ed:ca:3c:ba:b2:42:1b:bf:84:0b:17:
25:6a:b8:3a:7a:ba:53:86:a3:73:74:5f:c0:6c:3c:
c3:81:5f:b0:31:5c:1c:b7:07:96:95:3c:ea:c6:24:
2c:f5:67:1f:88:2d:70:29:0d:9d:5e:ab:f1:0e:b0:
0b:c1:cd:dc:70:ff:33:cb:14:70:cb:94:15:e2:f8:
e7:68:9c:ae:89:ac:83:eb:f1:75:bf:46:3f:d1:15:
f6:7a:9e:c4:95:1f:bb:46:75:84:ab:90:ca:4d:0d:
9a:98:e4:6e:f3:38:19:37:01:d8:d0:3c:23:e7:27:
3b:c0:a6:06:85:2e:16:c4:29:de:cb:23:24:e3:3e:
0b:c0:09:c1:cc:ee:d5:4b:4c:b9:0f:9d:ab:b3:63:
48:04:e2:84:61:73:b8:15:57:9a:fb:f3:12:dc:b3:
89:da:c5:07:78:59:6e:92:a3:49:2d:4c:75:da:46:
64:84:04:6f:cd:d8:89:7e:55:72:09:8b:a2:6a:2b:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:03:16:CE:95:B9:16:E1:AF:92:29:D8:EB:62:B6:3F:3A:52:88
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:38:8e:11:02:69:af:85:c2:da:18:4e:db:18:fa:4d:be:e3:
59:d0:c1:9e:c5:01:e6:6e:12:ad:9c:83:cd:99:66:45:82:aa:
0c:ed:2b:cd:21:e3:2d:da:c4:81:92:48:4a:bc:c0:06:b8:a4:
46:b5:e5:16:34:e3:a5:c6:fa:5c:38:19:97:0e:22:b5:98:21:
eb:67:23:77:fc:74:a0:ad:e3:38:62:44:92:b5:07:c2:5e:1e:
77:74:08:ed:f8:d6:27:85:1d:87:0c:74:56:6e:71:13:e4:03:
4b:63:4b:43:fb:42:8a:5e:f5:82:ba:6e:f7:f8:ce:e2:09:51:
de:d6:48:26:6d:d2:75:c6:d3:db:0a:4b:38:ae:52:99:a3:85:
e0:d1:7c:30:30:7b:9d:10:d5:78:9f:d1:3f:ad:b2:04:b8:09:
e3:90:ce:a6:f7:c7:bd:6b:e4:54:0d:bd:ba:55:c4:8f:f0:2c:
ee:02:55:0b:9b:20:3f:0b:0f:41:bc:03:d5:a6:ce:5e:a0:01:
ed:f6:c7:84:84:dd:0d:ed:d2:b2:68:76:9a:b8:d5:c8:08:ac:
64:85:8a:4f:86:3f:c5:8d:e7:8a:49:bf:6e:0a:fc:56:67:8b:
51:e9:28:a6:a3:97:69:0d:5b:d4:80:87:0d:ec:c0:2a:00:db:
89:47:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:33 2026 by rpki-client