Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323132323338.roa
File: 3137382e3230382e3138362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 50W3WFs+6pDsMMwxmggkQ4U0iiv+9BzzRf0GiKZQLA4=
Subject key identifier: B6:C6:BD:3A:CC:C0:5A:90:1C:5A:67:3B:0E:E3:4E:E2:05:6D:88:39
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 28ABB744E3D3C3E56270082B062B3A51559B1E82
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 28 Oct 2026 08:53:09 +0000
ROA not before: Wed 28 Oct 2026 08:48:09 +0000
ROA not after: Wed 27 Oct 2027 08:53:09 +0000
asID: 212238
IP address blocks: 178.208.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ab:b7:44:e3:d3:c3:e5:62:70:08:2b:06:2b:3a:51:55:9b:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 28 08:48:09 2026 GMT
Not After : Oct 27 08:53:09 2027 GMT
Subject: CN=B6C6BD3ACCC05A901C5A673B0EE34EE2056D8839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:79:e8:d0:5d:6d:0a:65:24:8b:dc:ed:61:
93:a6:45:8d:eb:8a:5b:9b:82:b4:d6:e3:82:97:d2:
d5:bf:4c:38:44:ff:9d:8a:ed:69:5c:54:1b:1e:84:
cc:52:48:c1:d2:ef:a8:d9:08:99:0b:44:98:a9:c7:
9f:b1:89:9b:95:40:5a:3a:3f:35:bf:d6:e9:ee:fc:
c9:99:5b:9b:d4:21:bf:5a:66:cd:36:76:44:d5:dc:
cc:de:21:e1:8a:8c:e5:f7:84:c4:a6:ad:5c:25:bb:
aa:48:91:21:f4:23:c6:cb:23:5b:88:44:aa:42:21:
e3:af:99:6c:1d:92:d8:57:c6:6e:26:15:da:97:d5:
d0:6d:05:65:9d:47:ed:ed:00:b6:ee:f9:4a:ea:51:
80:f6:a7:14:2f:06:38:13:ee:8e:2a:49:ee:81:5d:
0c:93:7b:1d:ab:ec:51:2a:3b:52:e8:4d:81:93:a2:
24:f4:55:f1:bc:7f:3d:29:8a:fe:08:ca:9d:69:d9:
36:24:fc:44:49:f0:71:31:af:2e:72:22:d4:45:34:
04:64:c7:c9:0e:ec:bf:88:6b:5c:d4:40:66:ca:69:
73:d1:2f:98:d6:1e:04:a0:01:a4:5e:32:fd:7e:6b:
3d:b8:d1:15:dc:77:5c:a6:03:f6:8d:40:e8:65:8c:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:BD:3A:CC:C0:5A:90:1C:5A:67:3B:0E:E3:4E:E2:05:6D:88:39
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a3:01:10:22:6a:d3:01:d5:8f:74:f2:e5:78:be:9a:17:32:
95:6a:d2:aa:56:af:f0:1f:a4:f5:f6:39:ac:07:1e:8e:93:8e:
91:6f:82:04:8a:77:59:08:7c:31:b5:f5:a5:f8:83:6b:82:2e:
90:79:39:a7:dd:08:31:d8:a5:a8:06:65:9c:42:9b:33:07:cb:
7b:7a:35:4b:69:39:b7:a5:01:d7:91:23:93:ec:23:33:19:de:
fd:c5:c1:b5:29:9f:8d:d4:c4:c9:c7:98:6d:80:f7:1e:04:ea:
da:40:1d:69:58:77:37:5c:01:06:38:c7:55:64:db:52:a3:12:
92:93:a5:d2:b0:a5:7d:3e:c6:2a:30:7d:5d:5f:ca:15:b7:9f:
69:7e:39:57:02:05:df:d2:11:de:a2:b6:78:bf:1e:2d:18:eb:
ea:5c:7b:30:a7:2a:24:b2:36:e7:7e:40:72:0e:e8:9c:cf:7c:
85:6e:4f:f0:04:c0:43:1b:f4:91:6e:b0:09:62:6f:37:f6:a3:
9e:27:bb:19:f2:66:67:b7:76:fd:34:16:dc:e9:d1:c2:b5:f3:
3e:08:4e:f7:d6:57:c1:2e:d6:47:d8:00:e4:67:ec:81:c4:1a:
73:95:5c:f7:e9:d4:0b:32:ef:1b:9b:da:fc:54:c8:17:26:3f:
d9:b8:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:01:41 2026 by rpki-client