Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137352e302f32342d3234203d3e20323139313035.roa
File: 3137362e3130322e3137352e302f32342d3234203d3e20323139313035.roa (raw, json)
Hash identifier: K2Kgw6dfaKGLV4vvS+1P0LI6GcXhxz2mSPH8vu81cPY=
Subject key identifier: 9A:74:55:70:F3:9A:4C:42:01:BD:7D:27:B9:F9:AA:CE:5B:48:DD:D4
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 783D9225885C847FFF464638D73F7091A643BDCF
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137352e302f32342d3234203d3e20323139313035.roa
Signing time: Fri 11 Sep 2026 17:44:59 +0000
ROA not before: Fri 11 Sep 2026 17:39:59 +0000
ROA not after: Fri 10 Sep 2027 17:44:59 +0000
asID: 219105
IP address blocks: 176.102.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 14:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:3d:92:25:88:5c:84:7f:ff:46:46:38:d7:3f:70:91:a6:43:bd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Sep 11 17:39:59 2026 GMT
Not After : Sep 10 17:44:59 2027 GMT
Subject: CN=9A745570F39A4C4201BD7D27B9F9AACE5B48DDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:00:ff:e1:8f:df:da:49:eb:64:16:ba:15:
7b:7f:a6:df:f9:af:0f:a3:13:b9:a6:98:a0:a3:69:
02:7c:57:2d:e0:d9:f5:d0:dd:5c:4d:cd:e8:09:c7:
1d:10:df:83:94:34:86:8c:07:14:b5:37:4a:58:6b:
71:d2:db:97:1b:f2:0f:2a:81:ee:5e:bc:0e:e9:0d:
b4:95:23:ae:6b:22:98:df:b6:66:fd:1f:e9:bb:78:
8d:84:b9:2f:37:b1:6c:6a:74:cb:59:d0:3a:4c:95:
e7:14:b4:de:fd:63:02:cf:e3:7a:3e:43:8e:97:bb:
ea:f3:de:0d:a3:1a:16:7b:20:70:be:2f:f4:18:9e:
53:12:c7:21:cd:1a:dd:fd:24:61:ea:8d:ed:95:77:
50:67:7d:d3:33:2c:51:a5:3c:9a:c3:24:2b:5e:5c:
ef:6a:83:2f:e5:de:3b:22:a4:87:7a:87:4c:44:87:
1e:7d:1e:65:68:2d:8e:c2:ff:48:0b:83:52:dc:1f:
c4:d2:24:b9:95:d4:86:55:7f:bf:80:4a:6a:59:d7:
bb:cb:46:65:8b:16:b8:cf:30:c4:e4:93:76:34:c3:
23:ce:06:4c:5a:e3:65:df:43:7f:07:8a:2a:5e:7b:
ad:2d:30:8b:e6:3e:50:5a:16:c4:e0:eb:69:01:d2:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:55:70:F3:9A:4C:42:01:BD:7D:27:B9:F9:AA:CE:5B:48:DD:D4
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137352e302f32342d3234203d3e20323139313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:62:92:f4:1d:40:fa:2e:b8:b4:87:dd:e5:09:59:ca:05:8b:
5f:6d:bc:29:d3:7f:de:86:a6:86:23:a7:03:c1:11:67:49:56:
db:10:45:a1:f0:69:cc:2f:58:4e:70:85:34:b2:a2:c7:a2:86:
c5:e3:88:3f:f8:66:f5:8f:1c:16:a5:fc:24:b8:c5:0e:ce:20:
73:a8:2f:dd:d1:40:bf:75:c1:2c:73:f1:b7:ae:44:7d:f9:78:
ed:25:34:fa:4a:10:73:c9:b5:41:68:1e:ff:d7:55:58:08:c7:
62:85:36:8f:ca:7b:ae:4c:78:9e:92:8a:c4:e0:bc:ec:56:46:
35:b2:20:31:4e:84:fd:4f:87:cc:fa:fe:08:dd:91:c4:86:15:
e3:75:41:bc:ba:5e:4a:3f:52:4a:4c:b9:b3:50:da:77:a3:63:
14:1c:8f:3f:00:34:f2:c0:a7:fc:2d:b5:34:e9:11:00:8e:0d:
73:7c:fc:af:2a:86:2a:61:33:cc:21:6e:9f:6a:7c:04:b0:42:
40:e8:c3:06:de:c3:ac:7b:cd:59:f3:92:ea:60:b9:4d:03:57:
d4:89:02:a8:59:f0:3d:27:22:02:06:d9:7f:2f:94:20:d3:ad:
f8:1b:52:2f:62:f9:6c:71:0e:9a:7c:ce:e8:a8:33:09:30:ec:
c2:1d:a2:3f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUeD2SJYhchH//RkY41z9wkaZDvc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk5Y2RkMTRjMjdmYmY2YjAwNWEwYWRhMDA0ZDUzY2Jj
Yjk2NjdmZjAeFw0yNjA5MTExNzM5NTlaFw0yNzA5MTAxNzQ0NTlaMDMxMTAvBgNV
BAMTKDlBNzQ1NTcwRjM5QTRDNDIwMUJEN0QyN0I5RjlBQUNFNUI0OERERDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VgD/4Y/f2knrZBa6FXt/pt/5
rw+jE7mmmKCjaQJ8Vy3g2fXQ3VxNzegJxx0Q34OUNIaMBxS1N0pYa3HS25cb8g8q
ge5evA7pDbSVI65rIpjftmb9H+m7eI2EuS83sWxqdMtZ0DpMlecUtN79YwLP43o+
Q46Xu+rz3g2jGhZ7IHC+L/QYnlMSxyHNGt39JGHqje2Vd1BnfdMzLFGlPJrDJCte
XO9qgy/l3jsipId6h0xEhx59HmVoLY7C/0gLg1LcH8TSJLmV1IZVf7+ASmpZ17vL
RmWLFrjPMMTkk3Y0wyPOBkxa42XfQ38Hiipee60tMIvmPlBaFsTg62kB0tlFAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUmnRVcPOaTEIBvX0nufmqzltI3dQwHwYDVR0j
BBgwFoAUGZzdFMJ/v2sAWgraAE1Ty8uWZ/8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMtMTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4
ZjIyLzAvMTk5Q0REMTRDMjdGQkY2QjAwNUEwQURBMDA0RDUzQ0JDQjk2NjdGRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0daemRGTUpfdjJzQVdncmFBRTFUeTh1
V1pfOC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzIwMjNjNTMt
MTg0Yi00ODRiLWI2NzYtNTk4ZjY0ZDg4ZjIyLzAvMzEzNzM2MmUzMTMwMzIyZTMx
MzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzOTMxMzAzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALBmrzANBgkqhkiG9w0BAQsFAAOCAQEAHWKS9B1A+i64tIfd5QlZygWLX228
KdN/3oamhiOnA8ERZ0lW2xBFofBpzC9YTnCFNLKix6KGxeOIP/hm9Y8cFqX8JLjF
Ds4gc6gv3dFAv3XBLHPxt65Effl47SU0+koQc8m1QWge/9dVWAjHYoU2j8p7rkx4
npKKxOC87FZGNbIgMU6E/U+HzPr+CN2RxIYV43VBvLpeSj9SSky5s1Dad6NjFByP
PwA08sCn/C21NOkRAI4Nc3z8ryqGKmEzzCFun2p8BLBCQOjDBt7DrHvNWfOS6mC5
TQNX1IkCqFnwPSciAgbZfy+UINOt+BtSL2L5bHEOmnzO6KgzCTDswh2iPw==
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:22:43 2026 by rpki-client