Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137322e302f32342d3234203d3e20383132.roa
File: 3136372e39342e3137322e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier: G8x+fUzXcLwiY+ROUXSWk+wDyXKPyyI0mWKRwK9o2m0=
Subject key identifier: D4:B0:0B:7A:BA:A0:A6:4D:88:44:9A:45:4F:6D:FD:3D:8B:9B:9C:D2
Certificate issuer: /CN=a65febc1c46adfa57072286562c5b598165c67ee
Certificate serial: 1B59A8226C4FA72619E294E616FFDB1DAD3953FE
Authority key identifier: A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137322e302f32342d3234203d3e20383132.roa
Signing time: Thu 29 Oct 2026 19:13:06 +0000
ROA not before: Thu 29 Oct 2026 19:08:06 +0000
ROA not after: Thu 28 Oct 2027 19:13:06 +0000
asID: 812
IP address blocks: 167.94.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:59:a8:22:6c:4f:a7:26:19:e2:94:e6:16:ff:db:1d:ad:39:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65febc1c46adfa57072286562c5b598165c67ee
Validity
Not Before: Oct 29 19:08:06 2026 GMT
Not After : Oct 28 19:13:06 2027 GMT
Subject: CN=D4B00B7ABAA0A64D88449A454F6DFD3D8B9B9CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:b6:8e:1b:10:0c:26:13:85:f3:c1:71:30:
80:00:c5:ab:12:3b:75:df:a8:59:bd:70:db:94:73:
5a:99:32:04:5f:c8:5a:c5:8e:14:c4:3c:74:89:8c:
01:4d:fb:91:44:9c:98:f3:83:84:b9:31:15:a1:e4:
26:c4:da:d8:a7:7b:13:b7:cc:c5:ab:af:ae:67:b5:
f1:32:cd:f9:2b:93:26:52:a5:bc:4a:87:05:3d:5d:
77:65:a5:c0:56:b3:39:c1:eb:2e:34:e8:20:ec:a4:
2d:20:0a:41:48:3b:ab:e5:b6:0b:0d:50:da:bf:c3:
60:25:71:68:ee:98:9a:fe:82:82:da:13:e5:7a:9c:
0a:c6:30:ab:5d:6f:d8:51:b4:6e:4f:67:e9:a0:7d:
4f:2b:b2:81:e8:46:18:66:56:62:4a:96:52:94:30:
e8:03:b1:78:fe:4e:4d:8a:6c:d5:ea:4e:b1:64:ae:
3f:4f:f5:e9:40:ae:0f:af:bb:11:0f:01:e4:ac:56:
10:18:1c:61:e0:b3:ab:e4:fb:c9:04:73:90:ef:f7:
c9:8f:54:45:ed:7a:a6:28:74:ee:e1:eb:ce:2a:d4:
b3:6b:74:19:6b:89:f8:26:24:ff:46:9a:c4:b4:36:
d5:2e:1f:a3:bb:20:88:72:b7:a1:d9:08:3f:d8:57:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:0B:7A:BA:A0:A6:4D:88:44:9A:45:4F:6D:FD:3D:8B:9B:9C:D2
X509v3 Authority Key Identifier:
keyid:A6:5F:EB:C1:C4:6A:DF:A5:70:72:28:65:62:C5:B5:98:16:5C:67:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/A65FEBC1C46ADFA57072286562C5B598165C67EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl_rwcRq36VwcihlYsW1mBZcZ-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/25c81eb0-1521-4005-86c8-332ef2c869cb/0/3136372e39342e3137322e302f32342d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f2:8d:6b:f4:6a:8f:ff:68:2f:60:84:6e:a9:8c:c7:22:cf:
36:56:dd:09:92:bb:ad:eb:e1:0d:fe:eb:14:f0:bb:ed:2c:5e:
39:2f:f1:27:1e:ae:35:45:df:83:24:ed:d1:16:38:06:7c:67:
52:19:58:2c:1c:98:02:0b:e9:11:1c:ab:3d:9a:49:56:1d:9c:
23:99:8f:26:ce:2d:bb:cb:02:a6:cc:d5:6f:67:31:b2:69:6c:
e0:05:49:c0:1e:36:34:29:29:06:03:54:74:7b:ba:b5:3b:aa:
78:73:e7:b3:94:8b:b5:59:56:66:c8:35:bf:38:8a:52:e2:93:
8a:36:53:68:55:d0:4c:01:49:4e:0a:71:7a:75:9b:55:f4:7a:
38:a1:b1:e7:21:48:bb:c1:1e:fc:6e:83:fb:c1:d2:79:d8:d9:
eb:eb:be:40:ff:16:96:a4:77:06:4b:10:38:8b:41:9d:96:f5:
fb:73:fd:37:7c:8f:ae:08:e6:89:39:84:af:28:df:7b:53:10:
cf:9d:8c:69:a3:b2:85:b5:76:a5:8d:8f:10:b9:1c:5a:65:4d:
17:b6:a2:70:41:85:c8:4c:95:f1:25:aa:80:6b:df:04:cc:84:
f3:12:78:78:dd:13:d4:73:bf:b7:f7:86:fa:41:f5:0f:c1:5c:
38:29:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:58 2026 by rpki-client