Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa
File: 3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: Kzu9AijEtaMDzMw/4Xk47K37j84ocZpz0R373WBe8UU=
Subject key identifier: 71:1D:65:F0:18:03:B9:9C:8D:95:EB:4C:76:5A:29:5E:60:26:E5:2F
Certificate issuer: /CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Certificate serial: 5A845CD6DB2E87EE0C370747E364BC1EE8193696
Authority key identifier: A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa
Signing time: Thu 09 Apr 2026 08:44:53 +0000
ROA not before: Thu 09 Apr 2026 08:39:53 +0000
ROA not after: Thu 08 Apr 2027 08:44:53 +0000
asID: 16509
IP address blocks: 178.236.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:84:5c:d6:db:2e:87:ee:0c:37:07:47:e3:64:bc:1e:e8:19:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29ef21c1397ab4b2f08778305a37ffd1cc25c4e
Validity
Not Before: Apr 9 08:39:53 2026 GMT
Not After : Apr 8 08:44:53 2027 GMT
Subject: CN=711D65F01803B99C8D95EB4C765A295E6026E52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:4c:8f:0d:f2:82:75:86:27:f6:5b:1c:bb:
e0:a0:77:04:95:c3:72:4c:0f:1a:f6:49:37:ad:6e:
bd:15:2d:ff:ea:87:74:85:f5:3a:30:f9:a8:9f:18:
f1:2e:30:a2:d5:52:d9:fb:8d:b5:d9:9a:1e:ff:a1:
3e:38:c0:a3:36:55:43:23:e6:ae:ec:9f:4c:d5:aa:
38:47:69:12:50:cb:20:b4:5f:42:66:f8:93:e2:ed:
a6:6e:ef:63:91:d6:c4:04:91:2c:a7:63:7c:79:e0:
47:8b:9d:26:14:5d:e0:c2:58:a8:37:3f:7e:76:91:
55:11:ff:13:18:e4:ca:09:e5:e5:97:cb:f6:d0:9a:
9e:9e:23:62:9f:43:56:61:28:41:a5:8c:2f:ed:20:
7e:17:3b:11:e4:71:fb:e7:64:01:e5:96:d7:c0:9e:
db:66:b7:54:9f:18:a7:04:28:22:41:51:a8:99:72:
51:20:6b:ac:28:cd:54:f4:bf:b8:13:cb:57:70:81:
0f:ca:40:d2:45:ae:ce:62:de:33:ec:9c:d5:ec:71:
12:e3:d2:ba:ce:2f:85:82:82:49:25:58:2e:0c:36:
2e:69:63:20:bd:1f:41:cd:eb:61:2a:c9:c4:8c:fd:
5b:19:33:b5:4e:a8:9a:cb:35:f0:68:d2:de:d8:b7:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1D:65:F0:18:03:B9:9C:8D:95:EB:4C:76:5A:29:5E:60:26:E5:2F
X509v3 Authority Key Identifier:
keyid:A2:9E:F2:1C:13:97:AB:4B:2F:08:77:83:05:A3:7F:FD:1C:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/A29EF21C1397AB4B2F08778305A37FFD1CC25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op7yHBOXq0svCHeDBaN__RzCXE4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/2/3137382e3233362e3233382e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.238.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ce:00:2a:b0:9c:de:e5:5e:d6:ba:0f:47:5c:4b:4d:5f:44:
63:32:23:8b:a0:d4:e7:d0:70:3d:02:be:ff:8f:8c:08:a0:2f:
9f:61:40:fc:08:e7:b2:3c:59:f6:51:85:2d:61:ed:0d:d8:23:
40:44:55:36:a8:09:6f:93:3e:6e:5c:f6:fa:bc:1f:78:8c:61:
71:46:d5:64:fc:88:4a:13:f3:49:be:88:c0:ad:b1:39:ef:aa:
8d:c8:cb:1a:ec:83:6b:c5:13:28:65:82:c6:77:65:66:95:5a:
8f:cd:46:23:f9:fc:81:c7:e7:f2:13:24:96:3e:f1:f0:5f:78:
fb:8d:2c:6e:58:aa:69:2c:66:2c:bb:89:85:7a:01:ca:52:d1:
67:c6:7c:e9:71:6f:34:f3:3b:0b:f2:fa:66:e3:f1:8c:7d:f3:
eb:a7:1d:6f:d5:9c:f4:e5:8c:d5:6c:81:22:89:20:98:5e:ee:
74:b1:f7:08:1c:a7:78:cd:12:54:e6:93:5e:0d:fc:22:25:81:
e4:60:c0:b1:00:7b:92:18:1a:5a:19:0a:a8:41:e9:07:45:97:
3c:6c:c2:5c:3c:90:e2:47:74:a7:ab:45:67:18:fd:6e:f9:fd:
af:28:67:55:83:f5:07:44:c0:e1:50:05:3e:55:db:4a:c7:04:
24:60:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:30 2026 by rpki-client