Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa
File: 3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa (raw, json)
Hash identifier: a++fo1ZwWeohzZL4au1Gv3n+pN7wCIzdhg0ArbQ5nTE=
Subject key identifier: B4:4F:91:39:1C:21:9C:44:C3:6C:6F:BA:33:AE:5F:BB:D6:A3:B2:68
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 4C7C302FB2D4CB43EB1D638142CEF7272FACD437
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa
Signing time: Wed 08 Apr 2026 11:47:09 +0000
ROA not before: Wed 08 Apr 2026 11:42:09 +0000
ROA not after: Wed 07 Apr 2027 11:47:09 +0000
asID: 35916
IP address blocks: 178.236.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7c:30:2f:b2:d4:cb:43:eb:1d:63:81:42:ce:f7:27:2f:ac:d4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Apr 8 11:42:09 2026 GMT
Not After : Apr 7 11:47:09 2027 GMT
Subject: CN=B44F91391C219C44C36C6FBA33AE5FBBD6A3B268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:d0:dc:20:e4:56:2c:25:5f:a0:cc:eb:1f:
3e:34:f4:37:6e:bc:57:de:cd:12:34:a5:d6:a8:ce:
d4:56:ba:1c:06:75:bf:d0:4c:ab:f9:13:5a:b7:28:
38:ff:59:fe:21:64:d4:94:c5:42:ea:40:79:3d:b5:
c6:1f:aa:3f:a8:0f:b8:b6:d3:c7:f5:9f:04:ac:81:
ee:da:18:cf:00:1a:b0:1d:52:42:71:e5:84:16:d9:
d0:38:4c:29:7b:90:b3:cc:20:0c:f3:08:29:c3:0e:
90:e4:27:1f:f0:ab:d4:ca:56:6f:97:73:1a:80:55:
2b:b7:f5:17:a3:51:da:73:4e:f0:b0:17:a2:8b:a9:
0c:bd:30:46:1c:b7:75:00:3a:87:1f:cf:e3:36:ed:
0a:75:46:e4:d3:dd:51:03:a3:e7:11:5e:c7:51:70:
5b:17:5d:d0:12:e7:7c:09:ba:34:20:8e:f1:62:70:
43:44:42:cc:90:a0:e3:f0:38:9b:4f:71:ba:7a:11:
26:f0:0e:e9:93:db:60:f1:2e:8c:78:d1:5d:4b:55:
7d:76:b2:37:e0:36:43:db:04:48:c8:ce:2e:b2:00:
e4:6d:42:b2:82:fc:87:43:3a:ef:86:24:f1:5a:76:
22:6f:7e:d4:f8:da:85:40:52:89:15:f1:0c:f7:26:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4F:91:39:1C:21:9C:44:C3:6C:6F:BA:33:AE:5F:BB:D6:A3:B2:68
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3232382e302f32342d3234203d3e203335393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d8:5b:ab:85:39:ca:d7:eb:5e:1d:7f:62:7e:60:d1:1d:3f:
6b:c1:8c:97:cb:38:c4:14:98:d2:ac:60:a7:b2:32:cf:9d:ca:
ea:1c:3e:d8:10:ee:b7:84:0f:ba:f1:78:3c:05:73:8b:ff:79:
f3:08:1e:03:6e:2d:56:e8:b6:81:fb:93:d5:f6:e2:d0:57:72:
e4:b1:0a:56:64:b4:a9:08:71:e8:ed:e5:80:2c:f5:13:b6:bc:
17:66:dd:9f:94:67:c0:ed:be:80:fe:ec:f6:93:e3:a8:52:8f:
06:86:07:a1:36:10:ec:e9:a3:20:f4:56:c7:fa:09:0c:f1:38:
ea:31:21:5e:3e:e1:1b:d3:82:d5:b5:a2:d2:1b:22:79:92:c9:
de:3e:b3:62:39:56:1d:70:55:4c:fc:9e:d2:cb:7b:ef:b4:4d:
57:8d:1a:72:8d:68:78:ff:55:3e:7c:0d:4a:db:a2:80:5a:f8:
40:37:40:c2:17:bc:05:cc:b5:68:67:75:d6:80:3b:a7:d5:bb:
51:67:95:83:2d:4c:21:67:53:a2:7f:3e:8b:c2:b7:9e:ab:a2:
03:f9:50:77:94:45:86:c2:86:a1:0b:40:f4:a8:09:92:6f:62:
a5:6e:28:72:6b:3a:25:90:b6:29:7b:b3:28:d6:b1:bc:88:6a:
85:9d:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:32 2026 by rpki-client