Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32342d3234203d3e20323132323338.roa
File: 3137382e3230382e3137382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: DACx3SNZoVCrlcWHt4q+fZ7UO90RLB4WQvjf27OluxI=
Subject key identifier: AB:7E:C8:59:07:63:98:BE:06:0D:8A:D7:4E:6A:D1:2F:8F:9D:44:D1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1DBCC17360359AFD6F2A7609CEA9C648EC6D16E4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 28 Oct 2026 08:53:10 +0000
ROA not before: Wed 28 Oct 2026 08:48:10 +0000
ROA not after: Wed 27 Oct 2027 08:53:10 +0000
asID: 212238
IP address blocks: 178.208.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bc:c1:73:60:35:9a:fd:6f:2a:76:09:ce:a9:c6:48:ec:6d:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 28 08:48:10 2026 GMT
Not After : Oct 27 08:53:10 2027 GMT
Subject: CN=AB7EC859076398BE060D8AD74E6AD12F8F9D44D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:36:e5:2a:81:9e:d7:45:fe:11:16:0e:e0:
93:aa:3b:ec:45:94:b7:26:36:13:cc:ee:99:12:40:
58:fc:4b:fc:42:38:e9:c9:8d:0f:66:73:5f:b8:1d:
d4:ec:98:a3:8d:a4:e1:87:4e:e7:69:4a:15:f9:ce:
13:6c:9f:f2:80:22:fa:3c:49:cd:56:9f:fa:c7:c6:
60:4a:a5:fa:c0:b7:3a:3f:0d:ab:63:53:f8:d3:8c:
99:e9:71:b6:1a:f0:17:bd:dc:fe:0b:ff:b3:8e:06:
25:45:8d:53:cc:04:08:a3:eb:ab:6b:77:dc:d6:5e:
9b:4f:9e:c1:73:fb:e9:ce:b0:39:82:d6:50:42:00:
d9:d8:b0:31:0e:34:55:fe:07:ff:ea:92:2e:b4:ba:
c9:e0:d8:8b:c4:22:09:38:5c:e6:6e:d9:7d:f5:c2:
78:60:0d:26:67:61:e9:c2:bc:1c:50:12:43:6b:f4:
41:91:46:5c:db:a0:97:bc:23:f3:bc:33:84:06:4c:
05:51:89:ab:f2:f4:bf:1c:be:be:3e:37:54:22:44:
48:bd:72:18:4a:66:78:75:77:ca:ec:b9:ff:d5:aa:
d1:fd:58:01:fc:98:99:d5:b9:29:f4:31:16:61:d0:
25:97:ea:6d:b5:71:ca:e2:a8:bf:cc:ed:9e:ec:4f:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7E:C8:59:07:63:98:BE:06:0D:8A:D7:4E:6A:D1:2F:8F:9D:44:D1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:62:ee:57:e8:e2:3e:55:9a:0f:d7:c2:ee:26:e3:18:2c:95:
bd:45:bf:00:8f:7d:75:51:0b:11:d5:2f:19:e7:4e:2c:45:4e:
08:a4:9f:ba:5a:1b:db:06:bf:95:dd:70:f2:c4:58:1f:1c:3d:
d1:0d:ec:82:40:be:10:4a:fb:72:02:2a:77:b2:88:61:4b:c9:
12:ea:16:ee:02:58:06:bc:e1:43:0c:28:64:da:d4:9f:82:e3:
2e:0e:f6:33:5b:8f:f3:31:a3:e9:8f:c1:87:b7:5d:72:8b:10:
60:0a:3d:99:14:48:fe:83:10:44:b6:47:e7:7b:1f:aa:92:2d:
e2:d6:eb:13:f4:13:ad:6d:a6:68:ce:a7:1b:f5:2f:1a:b9:c8:
5f:be:2c:10:ba:75:2b:f6:c6:7b:93:12:ec:fc:98:e8:03:7a:
2c:0c:79:00:a6:7a:9d:eb:8d:f6:b2:a5:bf:0e:3e:cc:f0:ee:
5f:af:cf:da:f6:2b:78:67:59:71:de:d8:fd:04:9c:b9:9d:fe:
1f:b7:35:c9:64:d0:78:3a:61:9c:99:e1:35:e6:c9:62:dc:1b:
a7:4a:45:cb:54:e6:37:8c:c2:61:f2:03:9c:df:60:e6:1c:53:
39:ed:5c:19:27:d2:81:b6:d0:91:38:90:d9:ea:31:dc:e2:20:
f6:ef:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 07:07:07 2026 by rpki-client