Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203631333137.roa
File: 3137312e32322e37362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: s4P1O86YAefU8f8a9qPcfQZJrw6Vq1HRQx0FtzoVBuQ=
Subject key identifier: EF:9C:0E:5B:7E:20:6D:4A:B9:A8:5C:65:7E:AA:2F:D5:AA:AD:38:01
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 2190D080615E4DFFB519DC92DC3BB5CA2E7F6E28
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203631333137.roa
Signing time: Mon 23 Feb 2026 21:55:39 +0000
ROA not before: Mon 23 Feb 2026 21:50:39 +0000
ROA not after: Mon 22 Feb 2027 21:55:39 +0000
asID: 61317
IP address blocks: 171.22.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:90:d0:80:61:5e:4d:ff:b5:19:dc:92:dc:3b:b5:ca:2e:7f:6e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 23 21:50:39 2026 GMT
Not After : Feb 22 21:55:39 2027 GMT
Subject: CN=EF9C0E5B7E206D4AB9A85C657EAA2FD5AAAD3801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:fe:ee:c0:49:11:e2:73:d0:c3:0d:d3:97:
21:5c:bf:49:20:00:d2:a0:a8:29:ec:39:21:59:9f:
6b:30:04:cc:df:cd:0e:be:ee:b4:f4:17:ae:63:3c:
c6:34:04:bf:90:d9:58:d1:fc:7b:95:4b:3b:c3:c8:
92:38:16:63:aa:9a:3f:76:f8:4c:a5:29:7f:5c:e7:
9d:57:ef:18:72:b7:0a:17:bc:78:0b:3c:5c:e4:08:
4c:7f:19:c8:cf:17:9c:49:20:66:90:b9:dc:85:cc:
43:ab:9e:8a:28:ee:ec:b6:ec:09:59:a0:f6:a4:98:
04:fc:00:5b:66:9f:78:e3:fc:60:b0:84:bf:ab:f6:
ca:d9:12:da:a1:a5:d6:41:46:d6:6f:d7:44:86:b9:
37:41:71:04:eb:63:f8:90:4d:3b:0a:b0:1f:a8:75:
9d:98:46:f9:fa:1f:2f:6a:12:a9:ef:1a:39:6c:fe:
a9:be:0c:4c:50:ff:77:21:91:6b:e3:83:45:65:2f:
65:40:19:d3:6f:a1:bb:5a:12:5d:74:24:e6:cf:a1:
8a:b5:7a:28:fc:a7:43:0f:85:2c:53:d4:1f:32:bf:
d4:44:7d:d6:45:d3:78:af:e9:1e:68:3c:ce:14:8b:
39:1c:87:1f:d3:ed:75:c5:21:ec:b6:56:d9:d6:a9:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:0E:5B:7E:20:6D:4A:B9:A8:5C:65:7E:AA:2F:D5:AA:AD:38:01
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5d:5a:e2:0a:0a:cd:a8:18:67:64:5e:a3:49:ca:b5:4a:a0:
0b:af:cb:26:9f:1b:45:da:58:cd:43:0f:01:af:3b:4b:c8:2d:
c6:ac:85:f3:7c:56:39:fc:d1:f8:43:28:28:97:ab:5e:c6:b8:
c5:70:b1:c0:18:50:0f:74:59:90:ed:13:7f:f7:7d:92:49:74:
c3:11:76:a3:7e:9c:e6:9e:18:1b:72:7a:6e:85:9c:a5:16:04:
3b:c2:c0:eb:4b:f2:70:5b:d8:8a:d4:d7:f3:03:3c:71:9b:f7:
a1:2e:79:f8:31:3a:7f:23:7c:4b:0a:71:84:50:16:4d:b4:3d:
08:7c:db:36:7d:56:d7:9b:23:cd:76:78:dd:d6:a1:f1:c6:cf:
03:59:04:3e:33:23:a1:30:9f:f1:aa:4e:bd:99:7a:45:1a:b1:
45:58:2a:f3:12:1a:09:fb:29:ed:95:dd:a9:04:37:52:08:a6:
55:93:8d:8f:39:9e:bf:61:04:93:0c:1c:48:88:01:d7:d6:a5:
ab:1a:de:fb:6a:72:d1:a8:b3:da:63:27:6b:80:dd:51:5e:2e:
12:dd:80:c8:8d:6e:74:01:f8:c6:7b:dc:b4:1b:0b:d5:9d:d9:
ff:3a:e1:14:8b:47:2c:a3:b4:e1:67:8f:45:a8:ad:91:56:0c:
01:c7:db:41
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIZDQgGFeTf+1GdyS3Du1yi5/bigwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNjAyMjMyMTUwMzlaFw0yNzAyMjIyMTU1MzlaMDMxMTAvBgNV
BAMTKEVGOUMwRTVCN0UyMDZENEFCOUE4NUM2NTdFQUEyRkQ1QUFBRDM4MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXgv7uwEkR4nPQww3TlyFcv0kg
ANKgqCnsOSFZn2swBMzfzQ6+7rT0F65jPMY0BL+Q2VjR/HuVSzvDyJI4FmOqmj92
+EylKX9c551X7xhytwoXvHgLPFzkCEx/GcjPF5xJIGaQudyFzEOrnooo7uy27AlZ
oPakmAT8AFtmn3jj/GCwhL+r9srZEtqhpdZBRtZv10SGuTdBcQTrY/iQTTsKsB+o
dZ2YRvn6Hy9qEqnvGjls/qm+DExQ/3chkWvjg0VlL2VAGdNvobtaEl10JObPoYq1
eij8p0MPhSxT1B8yv9REfdZF03iv6R5oPM4Uizkchx/T7XXFIey2VtnWqcufAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU75wOW34gbUq5qFxlfqov1aqtOAEwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzEzNzMxMmUzMjMyMmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKsW
TDANBgkqhkiG9w0BAQsFAAOCAQEAZV1a4goKzagYZ2Reo0nKtUqgC6/LJp8bRdpY
zUMPAa87S8gtxqyF83xWOfzR+EMoKJerXsa4xXCxwBhQD3RZkO0Tf/d9kkl0wxF2
o36c5p4YG3J6boWcpRYEO8LA60vycFvYitTX8wM8cZv3oS55+DE6fyN8SwpxhFAW
TbQ9CHzbNn1W15sjzXZ43dah8cbPA1kEPjMjoTCf8apOvZl6RRqxRVgq8xIaCfsp
7ZXdqQQ3UgimVZONjzmev2EEkwwcSIgB19alqxre+2py0aiz2mMna4DdUV4uEt2A
yI1udAH4xnvctBsL1Z3Z/zrhFItHLKO04WePRaitkVYMAcfbQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:58 2026 by rpki-client