Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa
File: 3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa (raw, json)
Hash identifier: T/dMaaeSvp1LggvFA92KZdLKggY6N7VrSw4p19VRscU=
Subject key identifier: 00:7D:3D:FB:E8:1A:AE:9E:05:4C:60:86:8F:2A:1D:82:BD:C6:8A:B2
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 533CBCEE463497905644EF1921BA95DB89187C38
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa
Signing time: Sat 04 Jul 2026 19:28:05 +0000
ROA not before: Sat 04 Jul 2026 19:23:05 +0000
ROA not after: Sat 03 Jul 2027 19:28:05 +0000
asID: 133150
IP address blocks: 176.102.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:3c:bc:ee:46:34:97:90:56:44:ef:19:21:ba:95:db:89:18:7c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 4 19:23:05 2026 GMT
Not After : Jul 3 19:28:05 2027 GMT
Subject: CN=007D3DFBE81AAE9E054C60868F2A1D82BDC68AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:48:1d:8e:db:d0:e5:b6:86:2c:8c:16:74:
fe:d4:0c:84:67:e1:e9:71:39:77:0f:4d:14:ab:d5:
fa:40:71:b3:00:84:52:4d:6d:85:67:45:4a:4e:80:
6d:29:5b:bb:99:c1:9d:3f:b1:d5:7b:56:42:24:0b:
ff:cb:fa:fd:f4:0f:66:72:d0:7e:4a:72:d0:2a:c7:
58:58:74:1c:3c:76:05:4d:e1:8f:38:44:06:e0:6d:
5e:f8:90:5f:ed:c2:8e:80:47:98:3c:91:ce:b9:37:
f8:22:b3:da:b9:70:ef:02:80:76:70:0a:c5:0d:55:
52:eb:8b:5e:b7:4b:b4:3f:38:76:1a:06:8a:46:43:
4d:ac:d4:3e:8b:bf:b5:e1:33:82:53:6a:b5:1b:9d:
ff:e6:e7:1b:53:b7:10:7e:bd:27:74:91:51:01:be:
ea:89:a2:bd:ee:f6:2f:8c:ad:73:b5:ac:6e:d8:9c:
2a:b7:98:91:94:b9:1d:0e:1c:51:52:53:66:04:7b:
06:ac:02:da:71:fd:8f:98:37:df:f1:65:05:a7:a9:
92:73:77:31:f6:b5:54:2c:81:e1:46:d6:0c:fb:bd:
a1:64:86:7c:90:08:50:f3:e6:66:60:bb:2a:c1:88:
3f:72:6a:8c:49:75:0a:05:f4:97:a9:e2:57:8a:8a:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7D:3D:FB:E8:1A:AE:9E:05:4C:60:86:8F:2A:1D:82:BD:C6:8A:B2
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137322e302f32342d3234203d3e20313333313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3f:06:14:d1:89:7b:dc:15:5d:e3:28:66:0b:6c:62:ff:9c:
0f:96:79:c4:7b:cc:b6:54:f1:e9:ac:36:ed:3c:ab:8c:18:79:
1a:af:22:eb:99:eb:bd:fa:57:1f:66:a6:2b:b5:af:ac:85:48:
b4:a0:b3:d9:75:a5:63:44:91:ee:a5:02:e5:8c:23:e8:40:5b:
68:4b:89:96:0e:01:40:c6:05:91:cd:a1:9b:4d:e2:f3:0c:ab:
24:6b:8f:9b:5f:7f:cf:8b:89:7b:3c:6f:92:b9:f0:58:a0:8d:
8e:e4:48:1f:c4:4c:d5:bc:57:26:35:9c:1e:d5:68:75:0c:08:
56:29:66:a6:29:e5:97:d2:3c:40:7d:16:31:dd:40:6f:30:c6:
9e:77:73:99:ff:97:38:62:fc:ef:54:d4:c3:c3:63:cd:30:48:
3d:2f:45:83:2f:f8:34:ad:1e:6a:fc:07:3f:86:9b:ff:d0:77:
13:8d:c9:5b:b0:4c:6c:48:d5:26:6e:0b:f5:18:a6:02:ee:09:
f8:e2:19:9b:d6:ab:0c:a9:a4:3a:0e:0e:1b:b8:6c:d6:d9:e7:
bf:b8:dc:b8:fb:f3:88:44:4b:09:2a:f8:32:98:68:14:15:36:
37:81:de:be:a2:ac:e6:cb:18:d5:95:61:78:4e:e7:af:33:b5:
b4:fc:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:01 2026 by rpki-client