Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e2030.roa
File: 3137362e3130322e3137302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: FdEMwfxos0DWgUBXbZbZR+NBnM6pumNifWcFam4oyus=
Subject key identifier: F3:D9:37:D3:D3:EB:A8:F0:8A:DE:A9:5F:05:EA:4C:D6:95:D1:C6:4E
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 77CECF6B2EAFDA5AA8B5B6CD9ADDFA78121643DA
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e2030.roa
Signing time: Thu 25 Jun 2026 12:22:21 +0000
ROA not before: Thu 25 Jun 2026 12:17:21 +0000
ROA not after: Thu 24 Jun 2027 12:22:21 +0000
asID: 0
IP address blocks: 176.102.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ce:cf:6b:2e:af:da:5a:a8:b5:b6:cd:9a:dd:fa:78:12:16:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jun 25 12:17:21 2026 GMT
Not After : Jun 24 12:22:21 2027 GMT
Subject: CN=F3D937D3D3EBA8F08ADEA95F05EA4CD695D1C64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:8b:ce:7c:97:c1:15:78:14:fb:bd:ed:00:
f8:bf:11:7b:50:53:77:85:34:2b:81:04:50:fd:2d:
b3:1f:58:e9:61:0e:6a:b6:d4:ac:c5:43:a7:6e:52:
26:02:18:9b:79:ad:37:05:f3:43:dc:8d:ca:ec:7f:
d1:69:62:46:a2:a7:04:35:8c:6c:9e:3a:24:fb:30:
a3:3f:a4:8d:d2:8d:c3:b2:df:b5:a4:85:e1:44:56:
c0:64:5d:20:ca:54:9a:7c:93:34:13:68:3f:76:83:
51:7b:5e:3e:a2:16:bd:59:04:01:4d:e0:a0:34:3c:
a6:87:35:f2:86:a1:c5:9f:e0:fd:3d:1e:7e:94:5e:
69:0b:a3:f0:fe:22:09:dc:89:97:72:17:14:84:68:
be:b3:c7:01:10:9a:b8:0d:7e:b0:de:d0:30:6a:b5:
90:e7:50:e8:2a:04:90:21:fc:c9:64:da:bb:4d:dd:
23:e6:c4:6e:87:ec:e1:1c:f1:aa:df:00:a9:d2:a4:
61:97:98:e5:91:98:86:1e:e3:ca:d6:e8:f6:9c:aa:
02:5b:60:21:7e:7e:f8:06:d8:a7:1a:7b:7b:ac:30:
a8:d3:10:19:9e:f6:1f:f4:ba:7b:23:dc:e6:8b:3f:
58:9c:81:94:59:b6:a2:98:14:b5:71:78:61:e2:fc:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:37:D3:D3:EB:A8:F0:8A:DE:A9:5F:05:EA:4C:D6:95:D1:C6:4E
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:80:75:4a:d4:c6:bc:32:f4:02:06:e6:75:d8:5f:8b:43:1b:
22:7e:5e:1e:f8:b2:3f:18:5e:98:f0:de:eb:3a:b5:99:24:01:
e6:a3:50:49:c5:b1:bd:53:b7:29:bd:1d:21:0f:ce:0b:16:6b:
1c:9a:35:f4:9a:e4:34:ac:b5:eb:a7:e0:b5:77:28:a9:0a:0f:
66:ee:9d:3f:ce:4c:8c:09:6e:f7:d8:8f:c5:0c:88:48:46:e1:
7f:e2:0f:b8:47:ba:e4:c0:2b:0f:8d:9e:ce:b7:c3:df:f6:2c:
b8:5b:8c:43:0d:53:14:52:65:b6:a6:0c:e5:d7:cf:09:f1:8e:
86:9e:a9:ba:d6:9a:7b:e8:48:8d:a6:f3:7c:5a:7a:ae:8d:14:
00:b9:8b:3e:39:d5:12:a7:02:ce:7a:e8:e5:fe:cb:46:c0:42:
0d:8f:0f:5a:92:6e:6f:30:6b:d8:0c:d1:af:81:e9:8d:1d:ec:
cf:ec:c5:9c:15:28:b9:10:99:b1:fd:bd:fb:16:ed:09:d6:b1:
05:ad:10:68:9a:28:e2:03:4c:75:b3:55:69:41:23:b5:a4:56:
66:c8:30:2a:3a:9f:84:17:3c:18:a4:76:16:48:9e:b0:37:8f:
97:df:88:4f:9c:3c:5a:b3:40:6f:29:06:10:e8:a7:61:79:f5:
6c:ae:09:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:21 2026 by rpki-client