Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa
File: 3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: DODPiqmKWn4fEQV41JgzryXPssmZ8/IlY16gySvomeE=
Subject key identifier: F6:6A:7F:3E:5E:36:8F:5F:25:CA:66:33:CE:22:32:5C:21:73:5C:20
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 7BD95683CB23CE4E6F4E4E80355A8E6E78649B54
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa
Signing time: Thu 09 Apr 2026 08:44:13 +0000
ROA not before: Thu 09 Apr 2026 08:39:13 +0000
ROA not after: Thu 08 Apr 2027 08:44:13 +0000
asID: 16509
IP address blocks: 178.236.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 23:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:d9:56:83:cb:23:ce:4e:6f:4e:4e:80:35:5a:8e:6e:78:64:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Apr 9 08:39:13 2026 GMT
Not After : Apr 8 08:44:13 2027 GMT
Subject: CN=F66A7F3E5E368F5F25CA6633CE22325C21735C20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:48:c5:e4:ee:91:e0:55:04:4c:a9:af:fc:
e9:2e:1c:df:1a:27:3b:b0:bd:e4:f5:6c:93:f4:f7:
cf:25:95:6e:a6:f1:5b:9b:57:08:4b:4b:d4:20:0b:
49:51:d2:e5:f7:29:c2:5f:00:ac:ce:fe:c6:dc:33:
e2:00:a4:8b:0a:36:b2:87:ac:50:6f:e5:3d:57:01:
57:f6:50:5e:54:5e:ad:1a:26:1c:be:30:06:fb:e8:
df:a2:8f:09:a7:07:14:9f:31:62:b6:ca:7e:c2:ae:
b7:92:9b:33:80:b3:ad:41:59:c5:a6:84:44:fc:e2:
5e:d9:6e:13:59:5d:62:4c:cb:15:cc:af:c6:cb:48:
b8:81:1a:ab:e7:84:28:ae:8a:2d:06:71:90:5a:a4:
ee:a7:f1:24:a8:65:c8:2f:96:02:a8:c1:0e:db:4c:
29:b6:72:57:00:e3:6b:c9:51:d1:5f:c0:9b:b0:c9:
4e:94:9e:80:8c:a5:53:bd:2e:51:36:6c:53:dd:a4:
72:b7:d9:18:6c:d0:85:4f:80:39:b2:eb:48:35:02:
57:8c:07:de:92:64:2b:cf:8e:a1:5e:af:8b:0e:3c:
01:d1:48:f1:df:39:62:da:6a:ca:54:9d:42:06:98:
41:43:5f:01:d1:58:f8:84:98:04:5e:34:ac:af:d6:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6A:7F:3E:5E:36:8F:5F:25:CA:66:33:CE:22:32:5C:21:73:5C:20
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232342e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:b7:68:c1:e2:66:5c:8c:ae:0d:9d:bc:77:c4:15:d6:35:82:
e5:e8:dd:e4:41:fb:99:1c:69:03:4f:18:15:56:d2:2f:ae:8e:
b7:95:a2:28:07:ff:d1:71:c6:6d:d5:42:4e:b7:2e:42:6f:c6:
22:d4:80:e6:06:a3:a5:27:43:8e:40:c9:77:b2:3c:ec:b6:ec:
bf:d8:ec:ce:63:10:7f:bc:5f:76:8b:44:cd:b8:12:2b:47:9b:
14:45:e8:d7:9a:8c:7a:b7:f8:fe:12:cb:db:7a:98:27:ff:50:
28:2c:bd:15:38:89:6f:8a:e5:55:c6:10:9b:5b:5f:ed:4b:f6:
bf:0d:42:e5:b7:bd:66:8f:46:5f:7a:eb:4c:46:b8:d1:fe:25:
70:69:f3:bc:b6:f5:41:fd:02:1b:4f:5c:68:39:f9:e1:da:39:
02:d4:f8:be:89:f6:38:a2:ff:6d:db:6f:57:12:44:5a:73:c3:
df:9f:30:55:38:b1:fc:08:35:16:a2:db:11:98:30:72:e5:33:
d0:d0:c3:ff:bb:23:61:c0:12:ed:fa:34:22:56:04:25:5d:a7:
8e:ab:6c:92:6e:32:b4:de:a0:fc:ea:8c:ef:b6:c4:c9:ce:eb:
d5:42:58:5b:eb:64:94:69:9f:d6:28:85:e5:77:07:e3:ce:61:
1d:a8:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:08 2026 by rpki-client