Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e20383334.roa
File: 3137362e3130322e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: htqBX5xVmv8z6xUgxiiwHmJV6C5oPjjeGMryMjNnWZs=
Subject key identifier: FA:A1:55:02:07:89:06:11:C2:F1:D6:D6:4F:45:78:FF:84:6B:FA:6B
Certificate issuer: /CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Certificate serial: 103367BA1DF48F37343C1D5052A66DB5A4E26CB1
Authority key identifier: 19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e20383334.roa
Signing time: Sat 19 Sep 2026 16:59:20 +0000
ROA not before: Sat 19 Sep 2026 16:54:20 +0000
ROA not after: Sat 18 Sep 2027 16:59:20 +0000
asID: 834
IP address blocks: 176.102.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:33:67:ba:1d:f4:8f:37:34:3c:1d:50:52:a6:6d:b5:a4:e2:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199cdd14c27fbf6b005a0ada004d53cbcb9667ff
Validity
Not Before: Sep 19 16:54:20 2026 GMT
Not After : Sep 18 16:59:20 2027 GMT
Subject: CN=FAA1550207890611C2F1D6D64F4578FF846BFA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:12:9e:38:1a:7b:2e:dd:79:3c:66:ca:e0:
58:a0:db:93:d5:bd:24:3e:b1:c6:83:a0:1a:4a:17:
bd:4f:6a:17:46:58:f3:5e:60:ac:22:8a:f3:a0:7d:
91:af:12:4a:5e:bf:1a:99:f3:18:54:90:98:a5:1b:
fe:1f:75:b8:8b:d6:f3:96:e1:f3:3b:36:70:fa:8f:
8b:ba:7d:1b:33:89:83:fe:17:3f:ed:de:10:15:b5:
c6:25:cf:87:fe:96:4e:51:30:82:1a:29:3a:9e:12:
5c:8f:14:6e:a2:4e:fd:d8:29:ec:67:4c:19:59:39:
62:a6:69:90:34:d4:db:67:fe:41:60:99:71:08:4b:
a8:0a:88:9d:92:d7:4f:0b:8c:d6:cd:c1:a2:86:98:
3c:d5:8f:c1:63:dc:ff:f5:a6:30:7e:ff:32:64:57:
e6:89:d0:f6:7a:f6:60:a6:69:df:77:9e:e5:68:9e:
ec:c4:05:79:ae:de:aa:1a:1b:c2:a1:70:1b:6b:18:
f5:51:d4:01:a8:43:73:fc:87:5f:64:a2:7c:91:4b:
c8:3e:19:09:b2:67:9b:06:18:00:fe:21:71:4b:a5:
c2:d3:08:f1:1b:f4:c5:22:58:4a:bc:07:df:24:a9:
59:d6:85:dc:71:cc:ce:01:07:52:fe:3f:60:9b:ae:
9e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:55:02:07:89:06:11:C2:F1:D6:D6:4F:45:78:FF:84:6B:FA:6B
X509v3 Authority Key Identifier:
keyid:19:9C:DD:14:C2:7F:BF:6B:00:5A:0A:DA:00:4D:53:CB:CB:96:67:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/199CDD14C27FBF6B005A0ADA004D53CBCB9667FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZzdFMJ_v2sAWgraAE1Ty8uWZ_8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c2023c53-184b-484b-b676-598f64d88f22/0/3137362e3130322e3136392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:39:b8:88:3d:d7:1a:2b:6e:4d:5c:a7:1b:54:26:bc:60:73:
d0:68:9e:7a:8a:d3:57:45:ef:79:dd:d5:ef:24:6a:32:85:62:
40:f7:21:a2:cd:c5:99:d4:3e:06:8c:42:22:1d:c3:15:0a:39:
97:f9:16:fb:ac:b0:c2:f6:68:a8:c2:5f:70:7e:d4:79:77:c2:
31:3d:8c:07:a5:a5:0d:35:53:22:d9:4e:2b:49:dc:7d:4a:69:
89:da:b0:51:09:fc:6b:ad:00:ee:10:4a:93:e5:96:2c:be:4b:
e6:2a:a2:e5:08:a4:48:32:76:fd:2d:9b:d0:93:c2:c7:38:66:
d5:2a:55:4f:16:b0:31:a4:8c:47:38:3a:b8:77:a6:fd:fb:9f:
9d:35:3a:17:97:d4:0b:ae:f0:fc:78:5d:14:ad:84:7d:7a:bc:
8b:72:7e:5a:d9:a6:6e:de:aa:5d:5a:35:a9:b6:46:bf:35:5d:
f4:f7:03:ab:50:2c:93:af:ec:b4:62:f9:ce:de:ba:4a:ae:c9:
1e:11:75:89:2f:fa:2b:0d:1e:b4:64:bf:6c:93:b5:d1:7a:e4:
45:1b:c2:2c:20:87:b8:39:db:a0:7a:68:0d:9b:c5:46:73:93:
ff:f6:1d:8e:8e:70:41:bb:41:c7:18:2d:bb:37:3e:66:67:3e:
b0:8a:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:26:15 2026 by rpki-client