Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137332e302f32342d3234203d3e20383334.roa
File: 3137362e3130322e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Z/nJGSE22QL9O5tVdcBp5BJ8vuIQ/nDu589KsU9W7vk=
Subject key identifier: AB:68:6F:DB:24:5B:F8:33:EE:34:71:6D:DF:34:62:29:E8:78:8A:B0
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 45FD9984B37F528F7759D23738488AF0AC076D72
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137332e302f32342d3234203d3e20383334.roa
Signing time: Sat 04 Jul 2026 19:29:29 +0000
ROA not before: Sat 04 Jul 2026 19:24:29 +0000
ROA not after: Sat 03 Jul 2027 19:29:29 +0000
asID: 834
IP address blocks: 176.102.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fd:99:84:b3:7f:52:8f:77:59:d2:37:38:48:8a:f0:ac:07:6d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 4 19:24:29 2026 GMT
Not After : Jul 3 19:29:29 2027 GMT
Subject: CN=AB686FDB245BF833EE34716DDF346229E8788AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:e8:ee:42:e8:85:f9:11:f9:5c:64:41:40:
f0:9b:64:25:2e:c5:09:a8:c6:8e:2f:05:06:2b:d4:
14:3c:82:9f:01:b7:37:66:6c:f5:cb:f0:ed:67:1e:
bd:a0:fa:7d:56:fd:65:96:95:29:05:36:40:ad:0d:
17:f0:67:3d:74:bf:db:eb:90:2a:73:13:a0:7c:e4:
d2:14:cb:54:e7:c8:ec:d4:a8:fd:6f:06:61:11:cb:
0e:28:ff:c6:88:a8:13:9d:9d:05:5b:df:3a:07:83:
aa:2d:87:a6:0a:da:6b:80:2c:f8:22:2e:84:bb:5f:
15:96:ed:a3:a1:7a:c1:36:c2:95:63:bb:5f:51:d7:
14:68:e5:0a:01:90:85:ec:75:c4:a5:ce:29:5c:ac:
97:04:00:c2:df:4d:c3:49:cc:f7:cd:c9:d7:6e:7e:
4f:9f:63:cc:1e:7c:30:98:ef:ef:bf:da:84:9c:ed:
e4:5f:26:b1:95:ab:e2:08:fb:75:40:ac:7e:e5:f5:
92:01:7f:f0:a7:b7:06:0c:bf:28:e9:93:f6:52:30:
6a:83:de:b3:5b:a2:e1:1a:25:0e:75:e6:12:f6:64:
52:25:96:7f:bd:8f:35:cc:f2:0e:cf:5f:c9:c9:47:
e1:06:b3:af:bb:8c:f2:58:48:a3:00:d5:21:88:1e:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:6F:DB:24:5B:F8:33:EE:34:71:6D:DF:34:62:29:E8:78:8A:B0
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.173.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:82:5a:02:e7:d6:ec:ea:8d:af:78:9d:19:8e:96:9e:cf:
3a:74:f2:c3:bf:65:23:8b:55:a6:1e:81:92:39:58:b6:d6:a6:
75:f8:06:18:b0:93:15:51:46:1c:15:a2:b3:f3:ab:45:b8:a6:
46:4e:f6:19:23:e1:b1:a9:1c:48:db:b0:e4:24:6f:f7:70:20:
ed:0e:8e:11:bd:76:ba:c0:cb:92:c2:ac:bf:58:31:d1:60:4f:
3c:fa:64:c1:a9:bf:bd:69:17:ee:cc:4c:7f:ad:28:24:a4:44:
c5:89:fc:de:7c:b3:3c:2a:af:d2:f8:b9:a8:44:83:83:05:d9:
76:b0:f1:81:54:6a:d4:cc:6c:3d:6d:a8:0b:1c:97:36:8b:51:
ed:3f:f0:81:d3:84:ef:de:00:7d:e3:60:1a:b4:23:be:23:45:
49:08:22:6f:72:bc:17:dc:73:23:c5:f3:cf:cf:7e:e7:fa:0b:
c6:e1:69:54:fe:b7:f8:68:42:c6:b1:4e:e4:ea:9d:c4:b4:d8:
b7:98:ea:98:0d:ef:40:44:39:42:cd:2a:99:8d:b1:09:e5:1e:
90:c7:47:c7:14:7e:ce:8b:ba:0d:de:b4:79:e3:2d:28:d0:2e:
39:0e:36:ae:aa:e2:84:10:2d:ce:56:ba:18:0b:eb:b2:5e:40:
82:49:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:02 2026 by rpki-client