Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32322d3234203d3e20383334.roa
File: 3137362e3130322e3136382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: lsKgEvd0X56tIc1W7FgfOLqz5Dci/6tXpwN26SD9kjg=
Subject key identifier: AE:51:92:60:13:64:8B:FE:DA:43:0F:CF:A5:F4:88:95:6B:38:08:6E
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 68765B355259BEA5EBA5E638D924254F372E8560
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32322d3234203d3e20383334.roa
Signing time: Thu 23 Jul 2026 14:02:30 +0000
ROA not before: Thu 23 Jul 2026 13:57:30 +0000
ROA not after: Thu 22 Jul 2027 14:02:30 +0000
asID: 834
IP address blocks: 176.102.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:76:5b:35:52:59:be:a5:eb:a5:e6:38:d9:24:25:4f:37:2e:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Jul 23 13:57:30 2026 GMT
Not After : Jul 22 14:02:30 2027 GMT
Subject: CN=AE51926013648BFEDA430FCFA5F488956B38086E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:6f:22:bd:db:34:11:51:f2:75:95:97:45:
d4:e6:3a:70:de:97:cd:e8:6b:b5:e5:64:72:e9:bb:
32:3e:d5:02:38:c9:7a:57:c7:4b:70:20:a5:a5:71:
f2:9f:8c:0c:e9:85:4e:75:82:f6:c6:6e:e3:cf:66:
78:b9:b8:57:02:f1:a7:91:7c:f8:7b:3e:b7:8b:56:
ab:ef:2a:a1:dd:15:56:fd:ce:a7:82:c0:be:7e:26:
20:12:b9:46:d3:0e:9a:97:d0:04:49:fc:82:9b:9b:
a2:01:55:8a:03:1f:49:54:8b:b8:ae:b2:90:60:08:
08:e9:b9:8c:20:97:88:d8:11:d5:35:b5:13:40:ec:
cb:af:68:7d:49:59:0f:a5:8d:8e:47:04:a8:9e:6d:
0d:a1:ec:65:93:94:9e:44:aa:8b:2b:99:0d:3a:2b:
d6:a1:f4:93:56:ad:87:24:0a:df:88:f7:b0:d6:97:
5b:65:7f:f7:c2:94:71:f0:8d:82:e9:40:8e:73:36:
7f:5e:cd:93:c3:71:da:1d:ba:53:aa:79:59:92:e6:
5d:52:82:7e:29:9a:d4:c3:a4:58:08:17:ea:47:26:
68:2a:88:94:8d:ae:b5:b6:79:19:2f:6f:9e:44:b7:
34:78:81:11:bf:49:73:40:84:b9:c3:58:bd:16:01:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:92:60:13:64:8B:FE:DA:43:0F:CF:A5:F4:88:95:6B:38:08:6E
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:7d:4b:f7:8f:d5:96:14:b6:00:95:73:b0:6a:c6:bd:62:72:
f9:cc:54:77:65:e8:5e:a6:1f:17:fc:8a:07:fa:2b:51:32:a5:
e9:67:34:90:9e:95:5d:b6:98:cc:b7:05:51:6a:53:ea:7a:20:
d5:32:5b:be:c2:d1:a6:de:4d:69:7f:01:e3:05:2f:cf:c0:c4:
d0:87:30:50:1d:47:63:b3:2d:e5:9d:eb:a8:bd:e4:66:10:95:
62:a0:76:54:16:77:32:48:a8:e1:22:e9:f4:63:df:6e:f5:3c:
53:73:6a:c4:ab:40:3b:9e:3d:26:29:bc:49:94:d2:5a:10:42:
cd:64:7c:a4:b2:f9:07:b8:91:70:66:2b:c9:36:52:bb:e2:3b:
2d:6e:7e:dc:ce:97:4c:b9:f1:61:93:20:8f:09:a1:5f:30:e3:
53:13:9b:70:5b:6e:f0:21:ce:32:4b:89:9a:3f:28:bd:b4:e8:
f8:5c:c5:4d:6a:9c:7a:68:e3:1c:11:f1:e3:a0:b6:29:21:b9:
20:ca:49:01:8a:fd:c2:81:80:43:e0:d7:d5:d5:ca:57:99:81:
ca:bd:c3:1e:22:b4:be:a9:c6:d6:b0:2e:25:10:05:a3:30:4e:
0e:7a:06:11:5f:16:96:64:81:4e:ad:73:00:3c:70:9d:93:9a:
fa:1e:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:54 2026 by rpki-client