Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa
File: 3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: dUWRnvNQrG03cFGRKewLSEVSnqrlP2WFLU1i5zJtdMs=
Subject key identifier: C3:D6:82:19:ED:1C:00:9D:E8:32:79:8C:97:B1:FF:6D:35:FB:1F:48
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 2DC958A887F0399BAF7817473939881D8890BEA3
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa
Signing time: Mon 17 Aug 2026 03:37:46 +0000
ROA not before: Mon 17 Aug 2026 03:32:46 +0000
ROA not after: Mon 16 Aug 2027 03:37:46 +0000
asID: 3257
IP address blocks: 176.102.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 09:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c9:58:a8:87:f0:39:9b:af:78:17:47:39:39:88:1d:88:90:be:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Aug 17 03:32:46 2026 GMT
Not After : Aug 16 03:37:46 2027 GMT
Subject: CN=C3D68219ED1C009DE832798C97B1FF6D35FB1F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:f3:27:ea:98:1a:a5:d4:98:02:4e:7a:07:
ff:aa:74:f1:cc:a0:fd:1c:c2:8d:f4:7e:9a:d2:d0:
54:45:fa:7c:41:6b:a4:f1:d3:ed:6b:fd:7c:6a:bd:
f4:2f:55:a4:32:78:8b:57:c7:16:ae:d4:fd:6a:69:
af:95:a2:53:11:8f:6d:19:a2:7f:65:65:32:84:82:
dc:99:49:1e:0b:5e:5a:05:dc:85:63:d1:5b:6f:dc:
2f:69:49:21:5a:e7:ae:21:46:9c:e7:28:55:7b:97:
42:7d:69:4b:2d:a0:1d:45:63:58:e7:ea:57:34:ca:
29:de:43:84:47:a4:53:8c:4c:c8:32:eb:a3:a6:78:
07:94:0d:62:e4:d3:5b:fc:2b:7d:83:e6:22:2d:c6:
4a:b1:9e:23:16:d1:35:42:50:b9:10:85:3a:0e:c9:
fd:7a:0c:72:2d:f4:1e:17:b0:b6:d9:28:95:1f:46:
19:cd:d1:fd:55:d8:e9:97:d7:9a:2c:8a:67:c5:6f:
4e:52:0b:17:4d:dc:e6:c4:46:62:e7:3e:e8:c8:9a:
e2:d9:fd:2e:bd:1e:cd:2d:4f:49:96:0f:a6:aa:90:
e1:ac:83:9b:90:6b:e8:4c:21:65:1f:2d:75:c2:ae:
ee:a5:2d:de:c1:f4:bf:09:07:ae:c7:06:f8:87:81:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:82:19:ED:1C:00:9D:E8:32:79:8C:97:B1:FF:6D:35:FB:1F:48
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137312e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.171.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e1:1d:45:a6:0d:91:d3:7c:62:94:20:b2:08:dc:ec:14:34:
8a:ea:10:0b:6e:e9:eb:93:25:9c:da:6c:b0:53:dd:81:a2:e4:
ab:a0:24:59:2e:3a:06:38:1b:84:1e:fa:bb:e6:63:08:ec:29:
44:32:37:00:f6:62:66:d1:e4:87:11:10:6b:46:76:41:9f:97:
0a:8b:3f:59:0a:be:a0:ff:06:9a:e6:bc:67:54:f8:03:7e:7d:
55:ef:33:23:8a:74:12:2e:57:05:75:3d:0a:4f:a2:f5:ae:dc:
6f:a5:70:b0:a1:a6:a8:73:0f:98:74:b3:f6:f2:54:14:ca:50:
ff:10:63:f2:fc:a0:60:e7:09:9d:82:91:10:00:d8:3e:90:70:
74:74:5d:70:a0:e8:5d:6c:8a:3e:b7:59:97:11:96:d7:b1:e6:
56:56:81:67:82:04:f6:c3:45:6c:c4:2a:73:fd:38:bc:b3:14:
2c:ce:e4:39:78:21:86:6c:8d:37:be:b8:73:13:71:08:0d:3f:
5a:24:5c:a7:87:24:d3:8f:79:a4:ce:1a:15:73:a0:8f:79:ee:
ff:68:8a:b4:4f:2f:12:7c:d1:2d:12:c2:03:d6:c4:8a:3f:5b:
55:d9:89:a6:35:27:f8:b6:57:ba:b0:f9:15:fe:5a:25:0d:a3:
21:a2:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:38:47 2026 by rpki-client