Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e20383334.roa
File: 3137362e3130322e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /XkGMBmCDEjz/QuH3EJzE2qCHas6PIE7Hmz6n29y7II=
Subject key identifier: 30:3E:55:45:7D:9C:02:EE:67:EB:85:00:A0:2D:41:3C:0E:45:DA:5B
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 1A7B472F0A8CF31EC6158148635B2163A48A1687
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e20383334.roa
Signing time: Mon 17 Aug 2026 03:38:50 +0000
ROA not before: Mon 17 Aug 2026 03:33:50 +0000
ROA not after: Mon 16 Aug 2027 03:38:50 +0000
asID: 834
IP address blocks: 176.102.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 09:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:7b:47:2f:0a:8c:f3:1e:c6:15:81:48:63:5b:21:63:a4:8a:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Aug 17 03:33:50 2026 GMT
Not After : Aug 16 03:38:50 2027 GMT
Subject: CN=303E55457D9C02EE67EB8500A02D413C0E45DA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:55:6d:5c:51:e2:21:be:26:68:47:29:6b:0d:
15:4e:f9:d4:12:b5:92:ff:67:39:61:aa:0c:91:ce:
f8:de:c6:cc:5f:b8:ff:cf:81:25:fc:e7:59:da:9c:
52:5f:d2:c0:e6:c7:e2:b8:47:b5:66:c5:69:c2:5a:
f5:4d:0d:b5:f7:7c:8b:6a:39:f2:cf:b4:e0:15:c9:
16:f4:f8:45:4e:44:40:2f:e0:80:35:b3:51:b0:d8:
e6:1b:50:7c:2b:d6:6d:48:7c:da:d1:6c:63:2f:80:
2d:e4:57:6b:1a:61:a8:72:99:f5:43:49:cc:17:8f:
d7:90:6c:d5:c2:f3:4d:60:ab:e1:6c:18:b1:46:8e:
50:9b:7a:14:eb:7c:04:d7:a1:8f:08:6a:52:15:8b:
39:f4:07:d1:b4:c2:18:22:88:ef:6c:c9:87:d6:b0:
e1:6e:a1:0a:1b:bd:5a:c7:a8:14:b7:69:c6:1c:2f:
26:81:3c:c9:cf:32:f8:35:14:35:ff:a4:e0:98:b5:
f3:d5:84:1c:08:81:48:94:71:ff:85:e8:3f:ac:d4:
cd:e1:6c:18:ca:ed:7e:1c:c7:f5:e3:ed:b8:7b:e7:
d6:ca:d5:5f:f8:f0:52:47:f0:ef:8f:55:a4:f1:77:
60:1b:55:be:cb:5c:1b:7a:4a:55:ef:55:4c:81:72:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:55:45:7D:9C:02:EE:67:EB:85:00:A0:2D:41:3C:0E:45:DA:5B
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:de:21:f3:eb:5e:f4:df:7d:02:c2:61:5c:d3:e2:a0:91:ed:
e4:dc:5c:b7:c9:52:12:cf:83:f8:ba:19:7d:8f:04:02:e0:5d:
80:ee:3b:a2:72:c3:c5:ce:c9:cd:9b:0e:0b:a9:47:fc:e9:09:
33:2c:7f:8c:3b:cd:94:fb:ae:86:e3:82:88:79:4c:84:17:6d:
0c:7e:9f:21:4f:68:18:d7:94:77:e8:16:16:ea:a2:ae:44:7c:
8d:d6:7a:89:b5:09:cc:09:f8:8f:1a:4d:ff:a3:a9:d2:55:f8:
fb:6f:88:8e:79:61:ac:6a:75:bd:a5:9b:0f:e2:9c:d8:81:db:
53:3e:dd:8b:9e:99:7e:a8:c5:3f:d4:38:ca:07:58:36:ca:bb:
97:45:23:13:77:0f:38:ba:97:1f:7c:01:b3:7b:ee:10:2a:b7:
70:54:ad:60:b2:52:7c:0e:8b:fe:0b:cc:59:c3:84:4a:3b:7b:
d3:79:17:9e:7e:fa:5f:b0:a2:85:a6:9b:93:d1:f4:84:13:2e:
8d:4f:05:1f:0f:25:ad:6c:ff:1e:d6:f0:b6:c4:c2:b8:dd:7d:
4a:67:46:20:4c:8c:5f:67:82:72:2f:8a:e0:ec:f2:5c:aa:e9:
36:36:43:e9:3e:ba:b6:54:e1:a3:4d:99:6d:b1:58:9c:f8:7d:
71:e0:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:37:50 2026 by rpki-client