Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa
File: 3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: mNF7clo5W3ireyDeKmkbcMvndMx7pUSyNE80BGvqiZw=
Subject key identifier: 6F:D0:C8:7D:18:BC:8F:36:76:F0:4B:F7:E9:96:BB:47:73:EF:2E:D8
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 37D237336A17A26FE0BD9B3F5E6E3A1F61850676
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa
Signing time: Fri 13 Feb 2026 12:55:38 +0000
ROA not before: Fri 13 Feb 2026 12:50:38 +0000
ROA not after: Fri 12 Feb 2027 12:55:38 +0000
asID: 3320
IP address blocks: 185.172.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d2:37:33:6a:17:a2:6f:e0:bd:9b:3f:5e:6e:3a:1f:61:85:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 13 12:50:38 2026 GMT
Not After : Feb 12 12:55:38 2027 GMT
Subject: CN=6FD0C87D18BC8F3676F04BF7E996BB4773EF2ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:34:c6:9c:fc:1d:6f:80:0b:59:d8:dd:25:
a8:c4:65:71:c9:43:1c:3e:46:ad:27:c4:8d:69:d8:
b9:00:2d:6f:5f:a2:4a:cf:cb:d0:0a:d1:f6:2a:ea:
a0:8f:8f:f6:15:7c:00:75:98:37:b6:03:83:06:38:
89:48:3c:11:62:7f:e6:95:9c:78:32:aa:a2:5d:b0:
3d:ad:52:97:5e:5b:1f:b1:2c:78:e3:b6:11:8d:a0:
7b:1d:3e:36:a0:23:59:11:8b:1b:dd:d1:fb:47:48:
8c:35:95:5a:f6:d0:d2:d6:10:a9:0a:a2:ff:56:d6:
14:99:04:d0:86:66:f9:ab:ff:97:2e:23:b0:b1:03:
93:bb:96:da:b1:42:4a:be:91:bc:71:ff:22:7f:5c:
a8:c6:a9:26:2f:dd:c2:0c:90:c1:aa:25:41:83:02:
71:c6:8f:a2:33:b1:84:ec:04:43:93:bc:14:88:25:
95:7f:9e:cc:2f:b0:de:17:cc:48:36:8b:6b:71:ab:
c3:bd:a5:22:0c:82:af:a0:67:7b:39:20:a8:6e:29:
48:c6:b9:7a:1f:b1:6b:37:65:d2:1b:5a:30:cb:43:
24:e5:e4:68:67:2e:9a:e0:b6:d3:aa:ed:da:f3:8d:
1d:d2:9c:37:74:32:03:44:06:b2:69:93:d4:6c:85:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:C8:7D:18:BC:8F:36:76:F0:4B:F7:E9:96:BB:47:73:EF:2E:D8
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137322e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.172.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5f:49:3c:16:32:af:c8:06:f5:82:2f:a0:52:2d:0e:ed:52:
86:eb:06:e5:d3:88:6c:d4:e7:7f:2f:c5:3c:e9:e1:ef:11:7d:
9e:17:56:3b:70:59:86:8c:b5:97:c5:7e:20:c2:be:15:19:2f:
39:89:70:93:31:57:f7:e9:e9:4f:87:7e:a1:9b:23:a9:7c:0e:
4b:f8:87:fc:c2:6b:1b:4a:07:27:2f:8c:26:e0:28:ce:4c:08:
72:fc:33:1d:b0:c6:5e:5d:56:14:db:90:2a:a4:c1:c7:17:4d:
b0:5a:c8:e0:fb:0e:54:81:f9:68:b2:f5:58:bd:24:aa:b2:67:
5d:f1:d3:9c:92:d6:0b:82:26:e1:f4:db:f3:c6:8c:5d:da:bc:
6d:e0:ca:47:3e:8e:c5:db:ff:09:b2:3a:ed:bb:5b:06:1b:42:
58:40:c2:de:c5:0f:da:0b:08:ce:cf:68:38:44:7b:30:da:77:
ed:30:95:16:91:08:24:e8:10:aa:58:00:ca:f7:37:12:fa:88:
d9:3c:69:72:e6:84:7a:92:ea:9b:49:31:1c:70:7e:a9:04:c6:
c7:ae:6b:e0:69:74:cf:84:a6:0d:25:0f:e5:6e:f3:58:b5:33:
3c:9f:f1:9b:75:bb:51:8b:e6:4c:8a:33:60:da:e3:b6:87:27:
1a:c0:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:11 2026 by rpki-client