Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137312e302f32342d3234203d3e20383132.roa
File: 3136372e39342e3137312e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier: NlQDMZYh+ngjbmQHGyVQcsSwU1CBlfu7kANaaWPP2jc=
Subject key identifier: EB:41:69:2D:E6:AD:37:8E:EB:52:BD:AB:31:6E:AD:5A:21:11:46:1A
Certificate issuer: /CN=a65febc1c46adfa57072286562c5b598165c67ee
Certificate serial: 4F64E9BFF43BC38B4ADC869AA00B85C24361BA4E
Authority key identifier: A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137312e302f32342d3234203d3e20383132.roa
Signing time: Thu 29 Oct 2026 19:12:26 +0000
ROA not before: Thu 29 Oct 2026 19:07:26 +0000
ROA not after: Thu 28 Oct 2027 19:12:26 +0000
asID: 812
IP address blocks: 167.94.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:64:e9:bf:f4:3b:c3:8b:4a:dc:86:9a:a0:0b:85:c2:43:61:ba:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65febc1c46adfa57072286562c5b598165c67ee
Validity
Not Before: Oct 29 19:07:26 2026 GMT
Not After : Oct 28 19:12:26 2027 GMT
Subject: CN=EB41692DE6AD378EEB52BDAB316EAD5A2111461A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:8b:fb:ac:84:db:df:e2:e5:09:8f:d0:dc:
2a:e6:8d:a9:37:97:78:aa:97:db:d6:7d:79:10:f4:
fe:cf:16:b8:7d:af:80:65:e6:a1:60:93:9b:e3:b6:
9e:20:ef:2c:e5:0a:9b:f4:98:b8:71:63:0e:da:eb:
cd:5b:a3:f7:ae:68:63:63:66:65:a9:52:16:5b:b4:
a5:99:45:58:71:4b:5a:77:57:2d:9d:fb:1c:60:aa:
3a:f3:bb:3e:48:78:85:07:af:a5:8b:53:61:f9:64:
ac:e4:db:96:bb:63:2f:43:27:fe:95:19:fb:5e:4d:
f0:20:e2:59:1a:d4:2a:04:ed:74:af:b9:a1:93:07:
6e:3c:d5:e9:02:63:01:7c:7b:d6:c8:26:6c:26:30:
7d:57:c6:57:b0:85:e3:02:26:91:bb:22:da:ba:e7:
fc:c3:9a:53:7c:af:1b:f1:86:e4:97:25:06:0a:6f:
6d:d2:e1:27:45:98:45:1e:af:1f:51:65:0d:cd:39:
ae:9f:12:76:f2:3f:03:46:6b:c8:63:35:e5:95:1d:
dc:13:57:82:be:f3:71:0a:6c:a0:d4:f6:51:d5:4e:
6a:fa:72:87:d1:2f:c5:8f:09:18:0d:d9:9e:9d:25:
ae:48:c6:ad:cc:13:ae:22:65:8d:53:7e:03:b2:9b:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:69:2D:E6:AD:37:8E:EB:52:BD:AB:31:6E:AD:5A:21:11:46:1A
X509v3 Authority Key Identifier:
keyid:A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137312e302f32342d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.171.0/24
Signature Algorithm: sha256WithRSAEncryption
25:61:64:46:4d:ca:b2:96:3b:a0:cb:9d:af:6d:2c:64:be:e0:
b6:a4:20:bc:5e:2a:f3:04:9e:64:ee:78:52:d3:a9:f0:99:ad:
f8:a9:61:ec:b8:99:c8:3d:f6:9f:14:9c:cd:29:c8:a6:a9:99:
dd:c1:d2:71:3c:89:77:0d:f1:df:b8:ef:a4:d0:dd:80:02:2e:
a4:48:23:82:7a:a3:64:eb:1f:bb:88:f3:0d:03:ab:bb:66:8e:
04:ac:08:0f:c5:50:e8:65:6c:97:78:c1:5e:e0:77:02:32:74:
e9:17:99:76:dd:e8:e0:d7:a4:d2:d9:b6:57:cf:5f:ab:1d:6d:
6e:ba:e9:10:36:22:68:d4:32:77:0a:ef:0b:08:f5:d6:7c:b2:
5d:8a:78:a4:d2:c8:8b:d5:37:f2:d4:e7:9d:77:b7:63:5d:e2:
96:2b:a1:9e:a5:f7:6f:34:ee:b6:4d:76:00:8d:c4:7f:9e:6f:
e0:74:43:9f:32:ca:3b:7e:03:fa:7c:66:cc:09:24:ff:eb:3c:
75:4f:e7:e5:28:86:74:fd:66:35:f7:e0:7e:32:9f:da:f8:a0:
fe:89:3c:9b:34:26:db:cb:28:46:06:be:78:c8:81:79:e5:8b:
af:1a:a1:69:43:d2:f8:06:ce:41:e4:3f:75:7f:2a:cb:5d:16:
46:75:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:52 2026 by rpki-client