Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137302e302f32342d3234203d3e20383132.roa
File: 3136372e39342e3137302e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier: oHzSeP2PpUoa6IQgvHLBBzBCQLqhOSBXbzdll+dG7jQ=
Subject key identifier: C7:D3:66:B1:BB:60:AC:47:55:48:3A:79:77:FB:FD:B2:23:93:94:B9
Certificate issuer: /CN=a65febc1c46adfa57072286562c5b598165c67ee
Certificate serial: 60AE3E98599AB863A89F5DECAD01A18C2B28F118
Authority key identifier: A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137302e302f32342d3234203d3e20383132.roa
Signing time: Thu 29 Oct 2026 19:11:38 +0000
ROA not before: Thu 29 Oct 2026 19:06:38 +0000
ROA not after: Thu 28 Oct 2027 19:11:38 +0000
asID: 812
IP address blocks: 167.94.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ae:3e:98:59:9a:b8:63:a8:9f:5d:ec:ad:01:a1:8c:2b:28:f1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65febc1c46adfa57072286562c5b598165c67ee
Validity
Not Before: Oct 29 19:06:38 2026 GMT
Not After : Oct 28 19:11:38 2027 GMT
Subject: CN=C7D366B1BB60AC4755483A7977FBFDB2239394B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:c5:65:a0:ab:a6:3b:b3:bb:a9:2b:92:3d:
c4:cd:26:68:d2:d4:9f:45:47:46:be:b1:cb:88:e6:
38:b7:5d:dd:36:96:a4:eb:46:6e:8f:36:3a:48:49:
a2:a4:b5:15:65:a0:a2:67:3b:47:ad:6d:cc:df:14:
f6:38:8c:cf:4b:d5:14:68:bd:f5:0c:3e:55:80:b4:
14:e8:09:df:08:08:0e:3f:a4:63:77:04:61:da:85:
d8:fa:99:6d:da:bd:cc:eb:f6:d2:c8:03:d5:07:9a:
f9:99:67:25:96:29:b6:ee:de:9d:15:00:96:47:94:
43:de:e3:75:23:1b:b7:41:5d:4b:e1:08:9f:c5:3e:
67:f4:c7:21:16:8a:b7:6e:66:bc:19:06:a6:2d:5a:
ac:4d:06:93:16:ac:49:4c:94:25:10:de:0b:9a:ed:
ff:4c:f8:23:6a:99:5d:e3:60:35:6d:c9:43:6d:15:
74:b6:70:4f:26:90:c2:95:0d:b4:0e:72:19:78:c0:
ee:05:57:37:2b:e9:1d:17:38:41:a4:6c:b1:71:92:
a3:43:00:39:66:1e:95:86:55:c8:92:29:7a:20:0c:
75:7b:c0:3c:1f:2b:86:f1:b0:b5:6d:5e:3b:1b:a9:
82:0a:1d:17:38:bc:6c:f8:d3:fe:71:44:ad:91:13:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D3:66:B1:BB:60:AC:47:55:48:3A:79:77:FB:FD:B2:23:93:94:B9
X509v3 Authority Key Identifier:
keyid:A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137302e302f32342d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.170.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:99:8c:c4:df:cd:8c:ff:f8:b9:ff:67:7f:b6:c2:8c:d3:47:
ac:16:40:89:89:0e:5d:ec:06:12:a4:e0:07:f3:a4:2a:a6:5b:
32:85:ca:40:cf:ec:ae:58:e2:88:e1:66:32:85:8a:98:59:df:
a4:72:7f:fa:2d:b5:6f:f0:db:11:5d:5d:91:35:cb:11:9f:dd:
ad:5d:42:6d:7b:f4:69:99:25:8a:f6:54:21:f7:e4:d6:d4:21:
61:d9:ae:fc:e9:6e:8f:7f:19:61:46:79:f4:ca:82:0a:0e:4e:
f3:f5:23:d6:d7:e7:2f:53:ea:bb:1f:a8:1d:ab:36:04:ee:b6:
06:36:75:6c:f0:f8:dd:75:cc:c7:a9:02:46:9f:26:b1:a4:da:
06:bf:4e:c7:92:d0:ad:58:65:d1:4e:cf:6f:71:e0:68:f5:b4:
a0:ff:8f:8f:ad:f5:21:2f:5c:4d:be:6f:73:53:2b:78:49:2d:
68:0a:af:2f:f3:6e:d5:9f:7b:59:f7:fc:9f:1b:f3:37:fe:a2:
78:ce:a0:18:d0:79:79:ce:2f:0e:2f:ff:7a:08:f0:2c:0f:61:
9b:13:1d:6e:56:57:0c:31:2a:d0:84:76:fa:af:a3:a2:28:cc:
08:7d:8f:06:e2:1c:14:e8:b5:d2:29:f8:f4:8e:f6:ee:75:b2:
0f:81:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:07 2026 by rpki-client