Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa
File: 3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: cAakJn9uvoUMXZcUb5f3QeJYFtOG/tvLTFzKc+z86q8=
Subject key identifier: 0C:65:C7:BA:7D:FA:41:7A:9F:5A:6C:3C:D3:08:BA:8F:BA:D6:87:C0
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 2A76D1CDDF7AA6B8662EDB3C397D64BCFE29F3EB
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa
Signing time: Thu 20 Aug 2026 07:03:09 +0000
ROA not before: Thu 20 Aug 2026 06:58:09 +0000
ROA not after: Thu 19 Aug 2027 07:03:09 +0000
asID: 211373
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:76:d1:cd:df:7a:a6:b8:66:2e:db:3c:39:7d:64:bc:fe:29:f3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Aug 20 06:58:09 2026 GMT
Not After : Aug 19 07:03:09 2027 GMT
Subject: CN=0C65C7BA7DFA417A9F5A6C3CD308BA8FBAD687C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:09:7c:05:2c:e4:19:ee:53:6f:70:86:96:
2a:f3:0a:8e:5b:57:a9:0c:48:ba:1e:29:c2:f7:28:
15:83:1e:71:6c:45:48:1b:60:19:ab:56:2c:e8:51:
32:b0:c6:36:64:23:f6:71:fc:91:f4:08:cf:21:6d:
2f:e6:83:86:03:2d:5c:f7:22:1a:12:26:f2:fe:01:
89:e4:53:20:7c:7e:0a:ec:b2:e8:06:7d:c3:3c:b0:
24:67:3c:b2:86:0d:3f:05:9b:55:08:06:36:4e:e8:
73:bb:93:40:e5:20:89:98:98:28:9a:40:b9:dd:14:
81:91:2e:39:8c:e3:74:bc:b5:49:7d:c1:bd:8b:c4:
5c:7f:8d:b9:a5:e7:41:37:04:88:6e:de:4e:7a:4d:
56:65:fa:37:d1:33:c1:eb:d6:f4:9d:d5:cd:8b:7d:
0c:88:dd:91:16:4d:c1:f3:f2:42:83:ca:c4:83:e5:
ea:1c:13:f0:ff:18:4b:1e:c9:5c:a3:b2:36:ca:97:
e3:97:ac:bf:d3:8b:4b:b1:26:8f:b6:7a:a0:e1:e9:
86:28:21:18:fd:ff:10:cd:f8:58:d4:9a:cc:02:67:
7c:17:80:ed:64:d8:08:11:84:98:d2:a2:52:38:d4:
29:c8:7b:e8:3b:41:50:0d:6f:87:44:00:df:5d:74:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:65:C7:BA:7D:FA:41:7A:9F:5A:6C:3C:D3:08:BA:8F:BA:D6:87:C0
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6b:36:d1:f7:d6:22:62:ed:a5:6a:71:7f:fe:54:0c:c6:15:
3e:16:c6:f6:4d:a6:eb:4d:6b:5a:fc:0e:03:bf:f8:43:e3:75:
ff:53:e1:49:44:f1:ab:e4:2b:00:74:8d:d0:f8:96:94:cc:58:
be:80:8b:e9:5a:63:7a:ef:3c:e3:4d:c7:13:cb:79:42:fc:bc:
2b:0c:8a:63:0a:41:a7:09:27:c0:29:7d:19:56:0d:31:da:3a:
1c:30:09:11:e0:93:6c:f8:d0:1f:5f:88:bb:b4:11:6d:5d:e5:
b0:bc:45:e7:fe:c9:3f:b9:b6:72:19:d0:f3:4e:50:3d:e0:e2:
ee:dd:22:8f:d0:1a:42:de:1c:5e:c5:62:06:76:55:e9:ec:cd:
03:9a:52:b2:ff:2e:8b:22:09:2d:70:3d:c8:eb:85:0d:78:db:
29:7a:a5:56:46:12:10:b8:c9:3c:a1:31:4f:e0:f4:e5:dd:cc:
3c:86:88:c8:32:f3:ea:99:72:18:6d:74:06:60:7e:07:a5:e1:
d8:e9:96:3d:00:03:1f:b8:65:c1:9f:d4:31:fd:02:17:f4:c4:
67:28:07:f4:55:b1:f3:a8:26:bd:63:da:11:bc:c1:cc:fb:b0:
bc:fd:c1:03:80:9a:d7:22:19:b0:32:fb:f5:ea:65:f7:96:82:
c7:bc:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:30 2026 by rpki-client