Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
File: 3138352e3137322e3137342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: x1VzCnHUKRIxy3mtPK9tNWo5Dj6SuiXbHaWimmfqceA=
Subject key identifier: 8A:80:9E:16:D2:77:3B:63:75:EF:87:8E:FF:40:FA:18:13:37:24:18
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3B0BD23BFEECB7D711F17E851E6C95B5FDC18361
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
Signing time: Sun 06 Sep 2026 02:32:59 +0000
ROA not before: Sun 06 Sep 2026 02:27:59 +0000
ROA not after: Sun 05 Sep 2027 02:32:59 +0000
asID: 834
IP address blocks: 185.172.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:d2:3b:fe:ec:b7:d7:11:f1:7e:85:1e:6c:95:b5:fd:c1:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 6 02:27:59 2026 GMT
Not After : Sep 5 02:32:59 2027 GMT
Subject: CN=8A809E16D2773B6375EF878EFF40FA1813372418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:69:d8:49:ba:00:2c:6a:7e:99:fa:ac:17:
fd:ff:76:ac:cf:4d:25:88:7c:c5:d1:b3:82:90:26:
60:ec:85:e4:c5:4c:a8:fe:31:21:d5:10:1a:c9:d1:
52:4a:33:ac:03:a4:e1:fa:d4:3a:1a:f0:75:0c:6e:
80:1d:58:bc:05:43:70:ee:f0:f7:f8:b1:2e:3e:65:
c9:67:8b:7c:f2:77:d8:9d:1d:2b:d5:99:f6:61:cf:
70:8f:81:f8:15:89:b7:7d:d1:8f:7c:20:d8:f8:52:
d2:92:2a:bf:f8:3b:75:ec:88:17:f6:ab:ad:cc:6e:
12:83:53:40:ac:61:42:93:92:fe:a6:20:7c:e3:0c:
37:3d:d4:24:e9:a5:c8:23:5f:cc:19:e8:55:75:3d:
67:95:01:aa:0c:15:ef:e5:f2:e4:00:6d:3c:2c:dc:
d0:51:31:7c:c4:3e:10:26:8b:30:05:17:bf:0c:8f:
40:7d:47:83:71:87:97:11:03:34:fd:b7:2e:c0:47:
51:a9:61:0c:df:a2:a6:03:e9:b2:96:b5:9a:9f:b2:
1f:ad:5b:95:7c:74:d2:de:55:5a:ee:60:8c:59:e8:
5e:67:66:9d:ef:de:d7:23:8b:1d:e3:9a:5c:90:25:
f2:3f:b1:fc:25:68:26:df:66:21:19:6c:16:cf:9b:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:80:9E:16:D2:77:3B:63:75:EF:87:8E:FF:40:FA:18:13:37:24:18
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.174.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b8:2c:0c:4b:32:ea:13:47:26:1e:99:08:c5:ae:77:80:e1:
5b:ca:b9:45:d7:eb:44:52:67:77:0c:e4:27:59:1f:96:72:54:
1e:41:05:01:d0:78:32:43:a5:4a:12:c2:ba:27:b8:37:9b:82:
65:12:8e:67:a2:f9:c8:cf:c6:c1:00:2c:6e:78:02:ec:e3:67:
41:e1:de:b9:49:65:16:16:27:8d:f2:59:d7:f8:9b:40:24:5c:
3e:90:1b:19:ee:72:32:3d:b2:06:be:0b:46:27:b5:ac:6b:50:
8a:e8:8a:ca:a0:5c:9f:48:38:55:55:8c:cb:ce:e7:97:1d:e3:
28:f7:54:b6:e0:d0:8a:23:16:ae:2b:f7:0b:1a:ea:27:71:36:
2b:05:cc:64:3b:df:64:a4:f1:28:d6:f8:31:b2:e8:2e:4d:c6:
78:90:be:aa:99:bf:9a:08:2e:12:0e:41:de:0e:67:78:0b:1d:
5a:51:a7:0d:dd:0e:4c:f6:eb:55:c7:c2:a3:8a:02:82:c0:d1:
5b:d7:99:17:45:82:b7:3b:31:7b:fd:7a:3f:2c:26:84:01:c9:
5a:86:26:58:f6:f6:de:c8:ed:55:75:a9:7c:73:56:04:a5:dc:
c0:39:b4:fa:16:67:a5:9b:94:75:e8:35:e6:45:6d:86:7b:d7:
0b:7a:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:41:36 2026 by rpki-client