Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137322e302f32342d3234203d3e20383334.roa
File: 3137362e3130322e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lR0P/b2pLESvfEtW69Jl1aeQ0nMgaZVWJylK7oc6PxU=
Subject key identifier: F6:5E:9B:24:25:74:74:B7:4F:A4:99:5D:98:27:21:1B:C0:6C:8A:D1
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 2A483596241E5D0AEC0BC276ECA891AFC0A1CB0D
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137322e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Aug 2026 19:17:05 +0000
ROA not before: Tue 04 Aug 2026 19:12:05 +0000
ROA not after: Tue 03 Aug 2027 19:17:05 +0000
asID: 834
IP address blocks: 176.102.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:48:35:96:24:1e:5d:0a:ec:0b:c2:76:ec:a8:91:af:c0:a1:cb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Aug 4 19:12:05 2026 GMT
Not After : Aug 3 19:17:05 2027 GMT
Subject: CN=F65E9B24257474B74FA4995D9827211BC06C8AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:01:58:c2:70:86:a3:73:8c:0a:1e:ed:2d:
01:91:07:a0:16:e7:70:23:e0:c3:38:eb:09:13:b2:
07:1c:3d:ae:c0:d3:f2:39:11:b5:86:5b:3c:93:4d:
67:d8:e9:fd:3e:2d:33:9f:76:df:ff:45:73:32:c0:
60:ec:ea:37:bf:ed:f9:b2:4e:e8:cf:e1:64:97:22:
db:18:7e:53:a3:7f:13:03:ab:65:ea:92:8a:57:76:
86:52:59:4c:da:63:ff:e2:96:a0:9d:be:20:30:97:
99:93:d3:27:a1:df:47:46:64:db:83:c0:96:01:b9:
c0:b9:16:56:4c:8a:e5:a4:7a:ef:cb:9d:81:06:33:
51:07:a9:19:10:37:01:41:a1:b7:be:66:dc:a0:29:
2b:95:a4:ca:4c:51:7a:99:0b:56:e0:dc:aa:e0:f8:
e7:d3:0d:21:f9:57:2a:4c:0e:d5:17:f1:6e:91:8f:
e8:93:04:b1:5f:35:d0:14:51:3e:ef:30:8f:07:5f:
04:7c:7c:b9:d7:53:6e:6c:6a:46:76:ff:20:42:b1:
28:0c:36:2c:7f:5c:22:3e:84:f6:35:cc:d6:35:02:
ba:31:9e:ed:95:07:1b:77:5f:e6:33:94:61:90:ad:
66:66:e2:3d:8e:1a:62:07:33:cd:60:98:9f:62:b3:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:9B:24:25:74:74:B7:4F:A4:99:5D:98:27:21:1B:C0:6C:8A:D1
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.172.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bb:de:4c:47:19:61:de:a5:8c:a7:a2:d8:f9:e5:d4:61:04:
41:74:c0:a6:9d:85:94:1e:5c:af:41:e6:4a:da:ee:b1:9b:25:
6d:23:25:f3:a1:b1:fc:8c:04:9f:70:bf:f5:c3:b0:64:9a:62:
e3:e9:35:c8:ab:c9:a4:6c:cb:94:38:0c:a7:aa:da:de:5a:c7:
0b:73:b0:ce:f2:fb:4f:a6:e4:37:89:3f:22:4f:68:55:08:7e:
59:a4:01:44:10:7c:ea:04:16:ba:82:dd:b7:50:00:87:85:68:
16:b0:fc:b6:b3:33:49:a3:08:a2:02:11:b5:44:e4:91:16:2e:
d6:4c:c5:c1:57:ed:6e:d9:a4:f7:04:bc:95:d5:a2:42:73:a5:
4f:d3:4a:5a:8f:a7:96:6f:29:ce:bd:a3:13:39:f4:aa:19:8b:
4f:3b:06:dc:2c:f9:ff:3f:1b:39:af:51:95:b0:b6:8d:07:81:
71:5c:7c:cd:d9:5f:c4:ea:36:98:06:72:ea:33:5b:48:3a:71:
93:40:c7:e2:f8:43:f5:71:b5:3d:7a:bf:28:63:5e:cf:7d:c2:
2d:23:7c:17:b1:7a:95:d9:c2:69:3d:4d:ba:b7:0b:77:7e:30:
48:37:ad:bb:8c:2f:88:de:5e:c7:9a:f4:48:5b:44:3b:78:e8:
ae:ec:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:31 2026 by rpki-client