Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/3139332e33322e3130302e302f32342d3234203d3e203537313936.roa
File: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (raw, json)
Hash identifier: wDspyvAFv0/8lKNsucjxa+vjBuKL8czWbdSSoLy0Lf0=
Subject key identifier: 27:80:EC:A4:F4:FA:8D:44:DA:6D:1A:01:11:C9:52:50:AB:64:8E:FD
Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial: 6663D2B5439B170986AAFA266143562F5DBFE467
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/3139332e33322e3130302e302f32342d3234203d3e203537313936.roa
Signing time: Mon 09 Mar 2026 09:31:34 +0000
ROA not before: Mon 09 Mar 2026 09:26:34 +0000
ROA not after: Mon 08 Mar 2027 09:31:34 +0000
asID: 57196
IP address blocks: 193.32.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:63:d2:b5:43:9b:17:09:86:aa:fa:26:61:43:56:2f:5d:bf:e4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Validity
Not Before: Mar 9 09:26:34 2026 GMT
Not After : Mar 8 09:31:34 2027 GMT
Subject: CN=2780ECA4F4FA8D44DA6D1A0111C95250AB648EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:3c:62:46:c4:16:53:5d:bf:0d:61:4a:db:
a8:b1:7a:6f:15:83:ca:1f:ad:63:37:cc:8e:71:55:
dd:40:e9:63:c8:2d:15:47:8d:51:79:86:5e:14:13:
69:fd:17:7c:5e:b3:04:34:f9:56:19:e2:da:68:57:
9e:e4:f7:b5:b5:8d:4a:67:e4:0c:30:12:a8:4d:12:
d1:a4:00:c7:ed:13:fc:5f:a2:c1:2a:fb:4d:72:98:
d5:b1:3e:f2:63:6e:90:f3:bb:55:a1:be:6c:16:12:
74:99:62:a0:e5:ef:95:2c:86:59:79:33:af:bd:59:
55:51:d2:48:d4:ff:af:a2:98:36:21:55:08:9d:91:
fd:54:78:1d:af:50:71:e2:de:39:c0:a4:9b:2e:ca:
93:f2:55:08:ae:99:aa:7a:14:8c:ce:70:a8:2c:d4:
11:9c:05:48:b9:88:16:e1:a5:a8:2c:5d:e0:9b:f3:
46:80:99:7b:9c:e1:0e:c3:2a:ac:c3:9b:7d:77:44:
c5:7c:6d:da:a8:a9:d6:73:2a:45:33:a3:2f:cf:b1:
9c:25:0c:76:84:c9:44:28:df:22:a3:c5:ca:e4:74:
66:0c:4e:a4:eb:39:17:d7:c6:b8:12:73:a1:99:7a:
11:1d:7d:39:97:8a:c3:6c:02:c9:bb:8b:5e:46:3b:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:80:EC:A4:F4:FA:8D:44:DA:6D:1A:01:11:C9:52:50:AB:64:8E:FD
X509v3 Authority Key Identifier:
keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/3139332e33322e3130302e302f32342d3234203d3e203537313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:09:eb:32:f9:6b:18:72:72:e3:37:14:e1:e1:74:8c:61:38:
5a:00:6e:11:a3:5b:9b:25:12:2d:12:ab:a8:8e:08:46:07:0a:
47:6f:e6:51:b0:cb:c2:67:0d:22:99:dc:0b:a2:84:81:ee:11:
a9:27:64:25:2a:1b:c4:3f:0b:23:b6:1b:b0:16:5f:af:b8:55:
77:13:18:8e:2e:57:78:2c:40:6a:4d:0e:fe:e5:b7:b7:22:5d:
76:0f:5d:3a:c0:b9:f0:7a:23:71:d3:d7:72:f3:da:1b:91:da:
bc:15:bd:b2:78:70:8f:7f:fe:7b:8e:33:c1:f1:32:ea:cd:b4:
fe:63:47:12:e5:d2:22:d6:71:7f:4b:d0:b7:5f:5f:81:66:38:
30:40:3b:d9:3e:65:b7:f9:42:7f:b3:19:83:59:23:c4:b3:72:
22:1a:87:e6:36:86:21:97:c0:63:6f:65:de:e4:55:de:1e:32:
46:f9:72:5e:de:4d:06:5a:aa:c3:28:41:fd:8d:27:01:0d:6e:
51:09:40:8d:ac:92:26:44:8c:3e:f4:e4:aa:b2:43:f9:33:83:
27:cc:dc:49:50:d1:7c:d3:ea:4f:65:7f:a3:b8:bc:e9:3e:70:
bc:ab:8d:ba:89:e1:c9:ab:f9:e9:be:8e:02:a2:33:47:b2:3e:
e8:34:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:09:31 2026 by rpki-client