Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa
File: 3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: SpkY2STCdZ8E+lbDkkhjRWISKq958FvzWPMjUz7dAgc=
Subject key identifier: 70:E7:C3:3B:2F:02:9D:B6:10:14:2B:32:D5:C7:23:4D:65:5D:4A:22
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 2CF6C88ED76F79966121CA17137A97EBEA34DA74
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa
Signing time: Tue 12 May 2026 16:30:39 +0000
ROA not before: Tue 12 May 2026 16:25:39 +0000
ROA not after: Tue 11 May 2027 16:30:39 +0000
asID: 17561
IP address blocks: 178.236.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f6:c8:8e:d7:6f:79:96:61:21:ca:17:13:7a:97:eb:ea:34:da:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: May 12 16:25:39 2026 GMT
Not After : May 11 16:30:39 2027 GMT
Subject: CN=70E7C33B2F029DB610142B32D5C7234D655D4A22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:6c:c1:eb:41:42:9e:22:0b:47:71:bb:e4:
27:ed:e1:9c:8d:8a:80:52:1f:15:9d:ca:67:eb:82:
76:33:48:dd:f1:4c:fb:ed:ee:ad:b9:b7:96:80:7c:
49:0e:fb:30:5f:e9:31:47:54:a3:1d:f2:b9:20:de:
66:7a:1f:e5:e2:1b:25:fd:0b:03:af:4f:a0:79:c0:
c1:11:f3:11:78:bf:e3:5e:96:bd:72:cb:72:12:e2:
38:80:17:f2:72:37:66:f5:1c:fa:33:88:12:8a:da:
2b:30:a2:3b:59:04:ff:0f:71:fc:5f:c9:9c:dd:a9:
2a:3e:30:75:3a:dd:79:b6:f1:fa:a8:fc:bd:48:f0:
61:0d:f5:62:97:47:89:89:33:55:b6:99:1c:d3:2c:
9d:e0:20:e4:be:2b:b2:c3:f0:f3:ff:6b:5e:8b:6f:
24:18:8a:37:dd:60:b1:cd:d5:2a:96:2e:8c:72:b6:
6b:18:9a:d8:0d:b8:ee:57:c4:93:84:50:25:bb:21:
06:de:b4:03:22:1a:3b:c2:9f:44:44:32:18:27:19:
58:5d:8a:4a:2a:60:c4:c9:25:19:b2:18:4d:18:c8:
50:7f:54:df:d4:72:90:3b:38:eb:2d:77:53:a5:69:
06:7f:2f:fe:9f:97:05:c1:45:1b:e3:51:d0:66:d5:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:C3:3B:2F:02:9D:B6:10:14:2B:32:D5:C7:23:4D:65:5D:4A:22
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233342e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a2:60:7b:7d:ea:84:94:dd:59:9a:44:1b:6d:f0:4e:fc:84:
28:99:28:07:7c:d4:c9:6c:79:60:93:12:83:5f:c7:79:6c:04:
cb:83:b4:d1:a1:20:12:da:eb:a1:5b:d6:62:60:87:74:8d:2f:
fb:a9:a8:bd:9f:53:56:ad:18:0c:62:a2:22:7f:71:ce:eb:53:
d0:ab:2f:87:8d:9c:1a:77:ae:25:91:92:e1:65:a4:0f:dc:61:
d6:82:77:31:e8:d6:59:92:e8:53:83:5a:17:1a:96:cd:d2:de:
64:c8:a5:86:6a:32:52:5b:05:d2:e8:7a:75:4b:b1:df:2c:3a:
2c:78:7f:bc:1d:44:d3:f5:3f:e9:2c:42:f7:8d:13:17:de:e9:
4d:96:b0:a7:17:ee:13:7a:18:5c:ae:1b:f7:ef:90:34:ff:4e:
33:81:dd:28:1d:7b:c2:6c:6f:4e:73:ae:04:7c:b9:de:5a:0f:
3d:75:7e:d4:b1:20:25:17:c4:29:66:b3:57:62:89:cd:ed:0a:
e3:e4:9f:5b:d4:7a:9f:6f:1e:25:3a:3f:a3:4a:cb:20:c2:c8:
33:1c:56:6c:2e:f0:bf:78:fd:4b:ef:c0:ff:ca:71:ad:7e:77:
45:e7:c1:fc:23:91:79:e3:b7:2c:fd:4c:ce:be:1b:78:8d:f0:
72:54:48:32
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIULPbIjtdveZZhIcoXE3qX6+o02nQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTI5ZWYyMWMxMzk3YWI0YjJmMDg3NzgzMDVhMzdmZmQx
Y2MyNWM0ZTAeFw0yNjA1MTIxNjI1MzlaFw0yNzA1MTExNjMwMzlaMDMxMTAvBgNV
BAMTKDcwRTdDMzNCMkYwMjlEQjYxMDE0MkIzMkQ1QzcyMzRENjU1RDRBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoGzB60FCniILR3G75Cft4ZyN
ioBSHxWdymfrgnYzSN3xTPvt7q25t5aAfEkO+zBf6TFHVKMd8rkg3mZ6H+XiGyX9
CwOvT6B5wMER8xF4v+Nelr1yy3IS4jiAF/JyN2b1HPoziBKK2iswojtZBP8Pcfxf
yZzdqSo+MHU63Xm28fqo/L1I8GEN9WKXR4mJM1W2mRzTLJ3gIOS+K7LD8PP/a16L
byQYijfdYLHN1SqWLoxytmsYmtgNuO5XxJOEUCW7IQbetAMiGjvCn0REMhgnGVhd
ikoqYMTJJRmyGE0YyFB/VN/UcpA7OOstd1OlaQZ/L/6flwXBRRvjUdBm1RHVAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUcOfDOy8CnbYQFCsy1ccjTWVdSiIwHwYDVR0j
BBgwFoAUop7yHBOXq0svCHeDBaN//RzCXE4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYtNzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1
NmI2LzIvQTI5RUYyMUMxMzk3QUI0QjJGMDg3NzgzMDVBMzdGRkQxQ0MyNUM0RS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29wN3lIQk9YcTBzdkNIZURCYU5fX1J6
Q1hFNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmU0MTcwNGYt
NzgxNS00ZjJjLWE1MDMtNThhZTA4ZTU1NmI2LzIvMzEzNzM4MmUzMjMzMzYyZTMy
MzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNTM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy7OowDQYJKoZIhvcNAQELBQADggEBAB2iYHt96oSU3VmaRBtt8E78hCiZKAd8
1MlseWCTEoNfx3lsBMuDtNGhIBLa66Fb1mJgh3SNL/upqL2fU1atGAxioiJ/cc7r
U9CrL4eNnBp3riWRkuFlpA/cYdaCdzHo1lmS6FODWhcals3S3mTIpYZqMlJbBdLo
enVLsd8sOix4f7wdRNP1P+ksQveNExfe6U2WsKcX7hN6GFyuG/fvkDT/TjOB3Sgd
e8Jsb05zrgR8ud5aDz11ftSxICUXxClms1diic3tCuPkn1vUep9vHiU6P6NKyyDC
yDMcVmwu8L94/UvvwP/Kca1+d0XnwfwjkXnjtyz9TM6+G3iN8HJUSDI=
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:17 2026 by rpki-client