Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137392e302f32342d3234203d3e20323132323338.roa
File: 3137382e3230382e3137392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: M6uGzWZHZuZ4bswafBcCkdHxO/3DNFFbD5nOGcQqTzA=
Subject key identifier: 8D:02:43:0E:48:FA:C7:B1:A5:32:C8:70:D9:3E:D2:7A:FA:D8:93:EA
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 40723923540FEEB728668582406E082E8336FD3E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137392e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 28 Oct 2026 08:53:10 +0000
ROA not before: Wed 28 Oct 2026 08:48:10 +0000
ROA not after: Wed 27 Oct 2027 08:53:10 +0000
asID: 212238
IP address blocks: 178.208.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:72:39:23:54:0f:ee:b7:28:66:85:82:40:6e:08:2e:83:36:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 28 08:48:10 2026 GMT
Not After : Oct 27 08:53:10 2027 GMT
Subject: CN=8D02430E48FAC7B1A532C870D93ED27AFAD893EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:1f:ce:ff:98:d0:90:ff:56:1f:55:c5:a1:
40:37:48:75:7d:8b:f0:cc:5b:42:4b:4e:a8:dc:cb:
c6:c4:08:93:73:69:c5:67:47:8c:f8:c5:49:b5:d9:
31:46:ce:2f:c5:90:19:e7:1c:9b:9d:79:49:cb:20:
b0:7e:61:11:f0:56:4a:cc:a1:b0:cb:58:ae:2f:2d:
9b:3d:9a:eb:8f:59:63:f9:9a:fe:80:69:bd:87:26:
3f:91:e7:f8:6c:e8:b8:6e:b8:94:51:05:3d:c4:73:
54:cc:77:94:bc:fc:ea:47:79:23:3e:40:df:77:02:
46:51:5e:89:4b:6b:d1:b7:8b:ab:f8:c5:86:1b:b8:
e8:d9:cc:a6:63:56:34:26:02:d2:08:4a:04:b3:4a:
b7:bd:fc:2c:ce:a5:0c:e8:cf:c7:32:78:87:92:2f:
86:c2:94:2f:82:0f:79:ac:ab:21:00:3d:71:92:d3:
67:2d:44:57:76:ba:98:b8:1c:86:cf:90:a3:ee:b2:
ca:9f:50:75:0b:44:31:97:cc:2c:a9:a0:18:5d:bc:
d8:cb:58:55:59:ca:df:9b:7a:70:c6:fd:f8:26:99:
d2:be:9b:0c:98:52:e5:4d:76:70:1e:1f:3c:b1:c6:
ab:5d:45:82:b0:d5:91:54:43:75:5d:e1:19:58:45:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:43:0E:48:FA:C7:B1:A5:32:C8:70:D9:3E:D2:7A:FA:D8:93:EA
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.179.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d5:dd:db:af:0c:c3:db:b9:d6:dd:75:5b:df:99:f8:db:b6:
e8:90:45:bb:ca:09:37:e0:3c:86:74:6e:41:f0:73:31:e4:2a:
a3:6b:69:79:8f:e9:94:f3:66:bb:a1:77:39:ec:cf:b2:1f:fb:
9f:ae:1b:81:30:7c:75:2f:f6:60:1e:3a:88:6d:cd:c4:77:d2:
22:7a:bf:a2:34:d9:98:68:6b:ab:02:03:61:51:68:17:5e:f8:
23:6f:de:34:01:f8:35:5f:1f:f1:a3:40:0a:5d:d2:8d:70:b4:
72:d2:43:28:21:24:99:5e:f7:d0:27:a5:6c:3c:8a:c8:9f:79:
1f:96:14:dc:9b:83:71:21:91:f7:6e:7d:d4:78:a2:64:36:07:
0c:54:98:35:8f:08:b0:cf:2a:c1:63:8b:2d:28:0e:9c:0c:23:
5f:33:b7:76:87:cf:14:e3:db:78:6f:e3:44:38:ca:5b:d2:fd:
2a:85:e4:3e:32:94:6c:97:b1:54:7b:b9:f7:aa:20:89:a3:e0:
4f:fb:a9:a4:a4:b3:4e:6d:08:34:60:c5:57:1a:c2:4d:a8:09:
e9:00:61:6c:dd:cc:b4:7a:6a:3f:86:13:72:5f:97:0c:f0:36:
aa:c5:32:af:61:d4:74:2e:91:fd:c7:5e:b1:d9:7f:bb:15:27:
e2:70:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:03:55 2026 by rpki-client