Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20313436383133.roa
File: 3138352e3137322e3137342e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier: Ymk/qQUpV/Qt5bowyZCtJDk1eLbI3qXFT6r9ynN3LWE=
Subject key identifier: E1:55:48:E2:72:8C:F5:B6:DA:21:63:75:01:18:C9:0C:D4:44:4F:6C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 307FB9C2B0653EADF30EA6524D6EA789FF4619E0
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20313436383133.roa
Signing time: Fri 25 Sep 2026 05:54:59 +0000
ROA not before: Fri 25 Sep 2026 05:49:59 +0000
ROA not after: Fri 24 Sep 2027 05:54:59 +0000
asID: 146813
IP address blocks: 185.172.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 18:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7f:b9:c2:b0:65:3e:ad:f3:0e:a6:52:4d:6e:a7:89:ff:46:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 25 05:49:59 2026 GMT
Not After : Sep 24 05:54:59 2027 GMT
Subject: CN=E15548E2728CF5B6DA2163750118C90CD4444F6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:50:bc:10:d8:e7:2b:34:8b:d3:1c:7e:f1:
e6:54:7d:f1:e1:9c:ab:dd:09:38:7d:3e:41:c3:d2:
09:9e:3f:91:1f:96:1a:75:4a:f2:f1:7d:ca:3e:ad:
8a:7d:d3:b0:6d:a2:04:95:ab:05:c8:55:e1:d5:37:
7f:92:36:52:59:19:f3:4e:5a:36:37:67:c9:bc:44:
c6:34:ed:6d:2a:16:33:ea:4c:b3:80:2b:68:b3:b5:
d0:3b:36:e3:59:cc:90:9d:31:84:28:37:68:4e:a8:
33:07:ea:fa:3c:b7:c1:03:a1:ce:7d:6c:43:1d:f1:
18:20:31:61:68:4f:66:e4:5b:81:6b:3b:f3:da:37:
e3:f4:e3:2a:e6:04:7e:12:66:9e:9c:56:9d:2c:2d:
53:e2:50:65:24:39:3d:05:46:53:48:31:f5:6f:ba:
31:4a:a1:98:11:58:b4:fc:f8:28:e5:b7:d0:ed:2b:
29:59:72:2f:08:22:d7:fd:bb:22:85:38:e9:69:b4:
1d:85:cf:de:da:45:83:a8:67:4d:3a:7e:62:0d:f7:
89:72:37:74:e1:7a:10:9c:ce:39:28:e9:52:f1:d1:
0a:d8:26:42:5c:02:37:05:18:34:c4:76:50:b5:69:
a2:71:65:ef:3d:b2:77:6c:3c:56:87:e3:e1:f2:60:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:48:E2:72:8C:F5:B6:DA:21:63:75:01:18:C9:0C:D4:44:4F:6C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20313436383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6e:bd:cc:fc:4a:09:c3:4c:04:ba:2a:5c:4d:6d:fa:cf:cf:
ef:bf:fa:ea:43:d3:53:6c:f1:cc:39:71:65:0f:3e:7e:b9:84:
7a:6b:01:4f:d4:23:eb:97:3d:09:68:b7:d5:52:db:f2:12:60:
6d:0b:ce:ad:72:8d:af:bf:de:4c:29:10:b4:b7:07:23:ca:6f:
b7:55:36:e7:0b:aa:49:f3:e8:50:a2:e6:f7:b0:b1:a7:0c:8a:
9f:95:8a:fb:a4:52:ed:eb:93:64:a0:75:d8:a6:a3:c1:f6:57:
f8:ae:46:c3:08:5d:32:d8:1a:92:60:d0:8f:79:09:5c:02:7f:
bb:80:2a:61:bb:1f:4f:2b:d5:55:70:ec:5e:2c:dd:df:9b:3c:
ea:c3:a6:44:9d:e5:4d:e3:ef:ec:43:0c:0c:ad:29:f7:4d:eb:
3c:fa:ff:35:65:a0:41:f6:76:a2:56:d4:d8:8b:3f:c5:33:04:
3e:00:6d:fc:33:a1:31:79:f1:b1:6a:eb:94:c5:18:f5:58:38:
9a:c2:f3:0f:c3:4e:99:11:a9:e1:58:e5:4f:04:76:84:f6:87:
d2:c4:9f:75:c5:2a:e1:36:87:1d:8d:c6:90:67:dc:87:d0:b4:
3b:2f:6e:32:42:c3:c1:a6:09:be:06:62:33:a6:4b:a6:37:46:
47:4d:d0:9c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUMH+5wrBlPq3zDqZSTW6nif9GGeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjA5MjUwNTQ5NTlaFw0yNzA5MjQwNTU0NTlaMDMxMTAvBgNV
BAMTKEUxNTU0OEUyNzI4Q0Y1QjZEQTIxNjM3NTAxMThDOTBDRDQ0NDRGNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRiVC8ENjnKzSL0xx+8eZUffHh
nKvdCTh9PkHD0gmeP5Eflhp1SvLxfco+rYp907BtogSVqwXIVeHVN3+SNlJZGfNO
WjY3Z8m8RMY07W0qFjPqTLOAK2iztdA7NuNZzJCdMYQoN2hOqDMH6vo8t8EDoc59
bEMd8RggMWFoT2bkW4FrO/PaN+P04yrmBH4SZp6cVp0sLVPiUGUkOT0FRlNIMfVv
ujFKoZgRWLT8+Cjlt9DtKylZci8IItf9uyKFOOlptB2Fz97aRYOoZ006fmIN94ly
N3ThehCczjko6VLx0QrYJkJcAjcFGDTEdlC1aaJxZe89sndsPFaH4+HyYJsbAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU4VVI4nKM9bbaIWN1ARjJDNRET2wwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzODM1MmUzMTM3MzIyZTMx
MzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALmsrjANBgkqhkiG9w0BAQsFAAOCAQEAfG69zPxKCcNMBLoqXE1t+s/P77/6
6kPTU2zxzDlxZQ8+frmEemsBT9Qj65c9CWi31VLb8hJgbQvOrXKNr7/eTCkQtLcH
I8pvt1U25wuqSfPoUKLm97CxpwyKn5WK+6RS7euTZKB12KajwfZX+K5GwwhdMtga
kmDQj3kJXAJ/u4AqYbsfTyvVVXDsXizd35s86sOmRJ3lTePv7EMMDK0p903rPPr/
NWWgQfZ2olbU2Is/xTMEPgBt/DOhMXnxsWrrlMUY9Vg4msLzD8NOmRGp4VjlTwR2
hPaH0sSfdcUq4TaHHY3GkGfch9C0Oy9uMkLDwaYJvgZiM6ZLpjdGR03QnA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 13:13:31 2026 by rpki-client