Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3137362e3130312e3137322e302f32322d3234203d3e20333936333139.roa
File: 3137362e3130312e3137322e302f32322d3234203d3e20333936333139.roa (raw, json)
Hash identifier: Y2ZnZpTdo5GvSTGHmrJ+PNf4bDEZsoAMS7m8SAZRTPc=
Subject key identifier: C3:BE:3E:98:1D:61:6E:29:56:A6:50:6B:85:1A:4A:DB:EF:E6:3A:9D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0CD9E87AE310F2D9E0071A20826F58222D976475
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3137362e3130312e3137322e302f32322d3234203d3e20333936333139.roa
Signing time: Mon 29 Dec 2025 09:50:31 +0000
ROA not before: Mon 29 Dec 2025 09:45:31 +0000
ROA not after: Mon 28 Dec 2026 09:50:31 +0000
asID: 396319
IP address blocks: 176.101.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d9:e8:7a:e3:10:f2:d9:e0:07:1a:20:82:6f:58:22:2d:97:64:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 29 09:45:31 2025 GMT
Not After : Dec 28 09:50:31 2026 GMT
Subject: CN=C3BE3E981D616E2956A6506B851A4ADBEFE63A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8a:a2:77:e5:40:40:9e:85:71:ce:06:77:f1:
5e:32:1d:4a:d3:b5:8a:eb:b9:f3:89:9d:34:70:13:
4d:9c:31:47:52:6a:44:03:d9:26:e5:67:e2:ba:7e:
39:03:25:7b:ae:5c:81:d2:69:e7:ad:f8:22:ea:6e:
17:31:3e:55:f2:c6:9f:a0:3f:e3:0e:0b:90:dc:4e:
32:da:ef:5f:37:36:4f:bb:09:78:39:30:cc:47:6f:
0d:f1:90:2d:b9:9f:80:d1:4e:48:c7:5f:10:87:0b:
66:a6:34:49:cd:65:7e:90:83:bd:5e:00:8d:ae:1a:
dd:bc:2e:6d:fa:23:ca:53:ce:06:9a:93:10:2e:2b:
d7:44:14:d7:a5:c8:2c:6f:f1:65:7e:0d:18:50:f1:
2c:73:84:eb:60:7c:9a:b5:31:be:a9:a2:41:03:76:
a1:f3:fc:f5:4b:61:cb:71:a6:22:91:06:f7:5c:49:
e4:13:8a:84:71:f8:24:03:b4:45:2f:32:61:fc:d0:
e5:a0:c3:c6:8a:15:d8:0c:05:e1:22:02:bb:45:da:
c9:6b:4c:12:cc:56:97:fd:76:8d:3d:51:37:39:13:
0a:1c:5f:66:2d:17:b2:c1:fd:e0:78:35:24:82:d2:
66:bf:74:1b:60:0a:ee:36:38:ad:7d:11:aa:c8:fa:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:3E:98:1D:61:6E:29:56:A6:50:6B:85:1A:4A:DB:EF:E6:3A:9D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3137362e3130312e3137322e302f32322d3234203d3e20333936333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:84:e1:9d:ef:fd:17:97:36:93:01:0b:c5:a2:5a:a7:fc:26:
02:46:b9:40:f4:81:b6:89:4c:3f:21:8d:b8:4e:15:e6:60:61:
3a:b3:2a:53:4d:69:42:5f:03:fc:ed:8b:b2:4a:37:13:e1:bb:
0d:17:f7:98:f7:46:09:00:f0:81:cf:06:ce:c2:98:b4:fc:3d:
d0:5f:62:0a:0e:71:83:21:8b:87:31:22:9c:7a:96:86:24:9f:
4f:31:ae:d5:92:b6:19:ec:52:c6:fc:e7:07:c3:68:24:f9:3b:
b3:b6:3c:08:8c:69:7c:a6:24:d7:8a:35:0b:ea:e5:5e:fc:19:
4d:f9:bb:5c:e4:ae:83:f2:58:35:53:ca:d0:17:a0:25:7e:c4:
25:2b:41:43:77:b2:10:24:12:b8:b9:a6:32:1a:0f:de:eb:64:
fb:2b:7a:54:2e:70:c4:0a:e5:dd:89:a4:89:6f:45:0b:33:dd:
41:95:f8:40:c8:0c:60:38:67:18:2d:7e:c5:bb:5d:a8:5a:c7:
9f:90:ff:f7:7b:21:4e:56:fb:ca:09:6a:7b:e0:6b:bd:a0:af:
30:44:b7:e2:23:87:3d:79:a4:f8:a0:bd:c4:7e:20:53:c8:e4:
58:2b:62:f4:c0:6d:e7:25:6b:8f:22:f3:be:c0:33:8b:6f:66:
48:ea:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:17 2026 by rpki-client