Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20383334.roa
File: 3137362e3130322e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 65OmSL/XRblwi58rq1Ib5dzvN6lqu+6Iunx32cGOXWM=
Subject key identifier: C2:23:1C:9C:66:F5:74:CB:6A:A0:9F:70:68:4D:76:79:50:D0:29:F0
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 0694AF88F3B10604BD7749A6EEBFAD355AC77ECD
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20383334.roa
Signing time: Sun 20 Sep 2026 00:08:04 +0000
ROA not before: Sun 20 Sep 2026 00:03:04 +0000
ROA not after: Sun 19 Sep 2027 00:08:04 +0000
asID: 834
IP address blocks: 176.102.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:94:af:88:f3:b1:06:04:bd:77:49:a6:ee:bf:ad:35:5a:c7:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Sep 20 00:03:04 2026 GMT
Not After : Sep 19 00:08:04 2027 GMT
Subject: CN=C2231C9C66F574CB6AA09F70684D767950D029F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:85:3c:62:bf:5d:e8:c8:ad:7b:e9:c8:e5:
33:bf:57:ed:03:1b:b7:7f:3e:0d:a4:ad:7f:4c:e7:
08:7f:fa:6e:b2:6c:1f:11:bd:98:14:36:fa:02:51:
e9:18:fe:80:65:2a:a1:a9:5e:b4:9d:3a:b1:e6:f1:
c8:d4:fd:a4:4f:08:e5:54:f1:eb:a8:ed:01:a8:d0:
9b:83:bc:97:c5:cd:43:97:c9:f0:53:0a:33:8e:cb:
56:cc:73:7d:4d:f7:5b:53:40:da:c9:fb:2e:7a:5e:
d7:d6:50:dd:0e:9f:ff:81:2d:8d:e4:ff:ff:df:c6:
46:7e:4c:21:5c:08:e8:7c:8c:4f:6b:cf:e1:c3:44:
52:86:f0:d5:8b:5f:2a:d3:23:dc:66:51:4c:ca:ee:
7f:b8:a7:1e:cf:b0:14:e3:35:7c:99:75:78:98:f8:
72:87:40:3e:9b:1e:c7:e5:01:b0:bc:8e:60:f4:2e:
f6:97:7e:ce:eb:55:c0:61:d3:ef:1f:22:ac:57:91:
56:36:5b:75:18:6b:bd:3f:93:98:d2:65:53:15:18:
8e:e8:87:06:97:f6:27:21:4d:9d:a4:fd:18:e6:17:
93:c8:c9:be:af:1d:39:b3:f9:41:76:8a:32:ea:f4:
33:42:b3:8f:f5:16:54:a7:fe:ee:27:4c:d0:2b:c1:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:23:1C:9C:66:F5:74:CB:6A:A0:9F:70:68:4D:76:79:50:D0:29:F0
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.174.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cc:dc:b8:75:20:8e:69:b8:ce:3b:12:8d:fc:25:a7:05:00:
2d:d5:40:bd:73:49:6c:72:79:e5:08:bc:20:ce:41:5e:87:d2:
1a:70:bd:11:51:53:0e:39:4c:99:99:d5:2c:94:6e:7d:10:56:
04:c1:60:48:10:d9:83:7a:95:17:b7:da:6f:d1:ea:e8:77:0d:
48:2c:7d:5a:ce:94:38:f0:fc:65:13:c3:ff:1a:f8:21:15:db:
62:f6:dc:10:e7:64:e5:39:61:33:f8:80:5e:30:ca:1d:4a:2a:
d1:da:06:81:f7:2a:0a:7c:ec:6b:05:80:3e:8e:1c:84:64:b6:
27:e8:86:65:75:cd:a7:2f:a8:4d:b8:4d:15:18:13:4e:7a:5f:
34:64:81:9f:35:9f:eb:df:e4:c2:ff:c1:14:c1:aa:56:e9:95:
66:a0:bd:e2:37:6f:14:66:89:d4:11:45:da:16:8c:e1:5d:72:
8a:7a:99:3c:89:1e:e9:7f:52:de:41:26:8b:cd:31:47:f1:1b:
7b:7c:16:a3:34:d8:13:33:70:0d:51:34:6e:16:93:c3:c7:41:
6d:86:74:e4:bc:03:9d:89:47:77:c4:d5:f4:37:4b:92:29:ea:
86:05:19:20:d6:bf:36:e4:ac:68:2f:ef:1d:85:0f:a6:48:33:
b2:b5:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:43 2026 by rpki-client