Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa
File: 3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa (raw, json)
Hash identifier: KjqXi8WutHoDtcfgWO4eIZXy4bfZUhDCfps5/YiZVQw=
Subject key identifier: 82:38:75:14:00:5C:16:21:32:14:83:75:FD:1F:BE:CF:AD:B0:83:A6
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 523830E4F107D5FFC0C79B2F94A8B7A30B2EB6EB
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa
Signing time: Sat 19 Sep 2026 16:56:51 +0000
ROA not before: Sat 19 Sep 2026 16:51:51 +0000
ROA not after: Sat 18 Sep 2027 16:56:51 +0000
asID: 219105
IP address blocks: 176.102.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:38:30:e4:f1:07:d5:ff:c0:c7:9b:2f:94:a8:b7:a3:0b:2e:b6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Sep 19 16:51:51 2026 GMT
Not After : Sep 18 16:56:51 2027 GMT
Subject: CN=82387514005C162132148375FD1FBECFADB083A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:fe:84:ef:57:04:05:01:2d:81:cf:70:79:
a0:3e:e2:cd:35:e8:ee:f4:53:ed:12:c8:9f:14:22:
25:a9:6e:3c:ae:72:f4:a3:5f:99:d6:ff:e0:ac:7e:
21:2c:c6:28:f8:c3:d9:be:4a:a0:0b:6c:6c:e4:1a:
64:88:53:46:81:d1:2c:96:3c:5b:64:cb:35:75:84:
30:cf:bd:bb:64:e5:53:38:60:99:29:5d:29:65:ea:
da:24:e6:84:83:e6:88:d3:e6:cf:43:a9:4f:32:83:
99:6f:9e:f5:61:9a:bf:14:0d:72:96:3a:b7:d5:d6:
b7:79:7f:26:64:a9:88:b9:c9:69:8a:36:56:54:f6:
e2:c6:7f:df:b7:5c:78:dd:e2:f3:ca:f9:c8:e0:d7:
4e:b9:bf:00:2a:a7:52:c8:de:04:56:d8:db:a7:f0:
b1:c0:c2:c6:80:d3:bb:19:27:a9:09:11:86:15:9f:
bc:25:a2:09:5a:da:59:db:6c:f0:9a:67:a9:fc:c4:
51:11:99:c9:97:6e:51:98:6c:31:df:e7:b9:ca:b0:
a0:7d:69:6a:fe:53:19:78:09:57:8e:61:4d:ab:77:
17:ec:c1:60:b2:ef:5b:cd:58:27:8a:90:8f:58:63:
d8:d7:9d:2e:d8:3e:f4:ed:c0:3f:b2:24:06:73:5e:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:75:14:00:5C:16:21:32:14:83:75:FD:1F:BE:CF:AD:B0:83:A6
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136382e302f32342d3234203d3e20323139313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.168.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d4:14:63:ca:99:eb:db:75:d1:ff:bf:b1:7c:f8:5b:80:b2:
2e:d5:cd:68:3c:3e:85:97:e1:22:55:a6:bf:b8:56:40:13:45:
b7:e1:37:78:7e:cd:c6:62:af:b1:dd:ad:12:f4:45:fa:fe:78:
0e:89:3c:5c:3e:5e:15:bd:30:b2:f3:a7:ab:a9:70:30:66:80:
0a:b5:01:d9:22:0d:bd:99:72:a0:96:5d:89:f3:1b:bf:dc:a1:
f6:17:ae:d7:f1:66:5d:c2:f5:2d:d5:47:27:35:b4:df:23:00:
e3:63:d4:4e:a5:81:ba:e1:3e:58:ad:86:26:82:b2:99:b8:a1:
b6:cc:64:44:14:55:d6:a7:1b:0b:bd:c8:ee:9d:e9:d8:84:f4:
94:95:53:50:9f:87:ee:ee:0e:a4:cb:59:fc:e6:b2:91:a0:a8:
ef:77:56:38:4d:75:0d:ff:dd:8d:25:a6:fc:d6:d5:48:1e:3f:
62:f9:51:db:f1:c2:af:fe:57:e3:b4:66:25:02:63:78:93:ab:
40:91:3a:07:56:39:3a:a9:f6:8b:ab:d8:3f:a5:08:02:8b:0a:
02:64:e9:8a:7e:20:af:c2:d7:1e:4e:00:34:21:11:f9:13:e4:
0b:53:82:2c:da:7d:76:6c:35:c9:96:ad:36:ec:fb:a8:fd:26:
40:b2:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:16 2026 by rpki-client