Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa
File: 3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: CAMbXIY1N8VhXT+Q3NZkXi8aaoa4UsQXngYC7GnBD9g=
Subject key identifier: 0A:5C:4E:59:0D:19:55:6E:21:3B:56:F7:88:E6:70:D1:E7:46:81:B4
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 3A1E2C8202AADB09B69CDA436E40E0F466D3E42E
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa
Signing time: Wed 08 Apr 2026 11:45:15 +0000
ROA not before: Wed 08 Apr 2026 11:40:15 +0000
ROA not after: Wed 07 Apr 2027 11:45:15 +0000
asID: 17561
IP address blocks: 178.236.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1e:2c:82:02:aa:db:09:b6:9c:da:43:6e:40:e0:f4:66:d3:e4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Apr 8 11:40:15 2026 GMT
Not After : Apr 7 11:45:15 2027 GMT
Subject: CN=0A5C4E590D19556E213B56F788E670D1E74681B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:8c:a2:aa:3a:05:0c:9b:4d:b9:4c:18:c9:
b2:7f:8f:9c:fc:98:6c:15:70:d2:7d:d0:d3:52:2a:
12:a2:18:d3:7b:31:0a:f4:aa:6f:64:de:0b:be:a3:
76:33:d3:36:80:4e:96:97:7d:60:3d:15:08:c4:c7:
19:92:e0:22:10:46:c2:b6:f3:64:a9:07:91:f4:a3:
ab:c9:dc:b5:e8:25:27:c8:6e:6a:7e:10:c3:04:a8:
b2:d2:41:ca:39:08:3b:63:f3:6b:76:ae:3f:6e:ca:
5c:2a:97:ac:03:f7:9d:2b:bf:7d:58:ab:2e:74:6b:
59:c4:95:4f:b4:38:63:f4:55:fb:32:d8:0c:7a:c3:
4c:cd:e3:a7:8d:d1:e8:40:c2:24:f5:9f:d1:0e:e8:
de:ad:5b:ee:89:a1:8e:43:6e:50:9d:35:68:4e:c4:
cc:76:27:1d:1f:02:1a:56:32:59:6b:5c:fd:f6:8a:
1a:af:80:2e:cd:d7:d6:20:fe:3a:6f:15:6e:ba:d4:
e0:1a:6a:22:0f:e1:98:70:4c:b8:9b:b4:90:fc:67:
c6:fe:66:c1:34:8a:35:61:1b:05:bf:da:b0:ad:e4:
d3:f5:81:e2:e1:bc:a1:6a:b8:8b:9e:af:91:f4:b3:
c3:36:30:86:ce:64:3c:44:39:12:74:a8:03:3b:7b:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:4E:59:0D:19:55:6E:21:3B:56:F7:88:E6:70:D1:E7:46:81:B4
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232362e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.226.0/24
Signature Algorithm: sha256WithRSAEncryption
77:56:ce:a0:69:5c:c7:e3:72:02:b1:59:f9:ad:69:3e:86:e7:
3b:e1:1a:51:7b:9c:54:02:fe:16:bc:f2:55:d1:98:a9:c1:68:
6b:84:be:06:11:75:ca:6e:61:3e:c9:45:4c:66:ec:38:c2:3e:
16:e1:ad:5b:3c:21:a6:65:11:57:1d:17:a7:74:9d:9a:e0:45:
78:27:ac:03:81:25:4f:72:8f:f6:26:bb:0b:df:f9:7f:06:45:
36:f2:14:bc:8d:69:2d:35:8a:77:b2:25:a0:0a:c8:c6:16:a6:
8e:86:d6:b8:0a:31:e2:d7:47:c3:f2:34:b0:d2:78:b1:61:dd:
2c:56:e3:ed:39:90:71:ce:02:76:6a:d0:05:75:24:e6:14:43:
dc:b7:68:62:e7:0e:56:17:90:42:e6:5c:54:34:bf:7a:65:07:
e0:80:e6:03:eb:f0:2e:e6:94:c0:3c:70:28:ff:82:bf:9e:25:
db:80:89:15:2f:4b:62:b0:59:ae:9f:f6:da:94:bf:92:2b:51:
97:41:8e:59:92:2a:98:68:76:9c:23:df:54:7b:e0:26:3b:d2:
4a:9c:f0:93:7e:19:b1:3e:f6:54:62:1f:be:93:90:a5:bc:81:
54:19:7d:4a:69:2c:68:7f:5d:91:5d:7f:02:1f:00:c3:76:a6:
1a:97:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:33 2026 by rpki-client