Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa
File: 3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa (raw, json)
Hash identifier: m0zx/3GGh2HlM5LRBc4yB/so0SsNLiY/QBTVahMULeQ=
Subject key identifier: 2D:2E:7B:74:89:99:AF:39:77:C3:66:22:34:0F:EC:8A:D7:3B:F5:89
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 447EBB1D506B1B53DBE6EE9F037D27C65670453D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa
Signing time: Fri 30 Oct 2026 09:49:39 +0000
ROA not before: Fri 30 Oct 2026 09:44:39 +0000
ROA not after: Fri 29 Oct 2027 09:49:39 +0000
asID: 210538
IP address blocks: 178.208.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7e:bb:1d:50:6b:1b:53:db:e6:ee:9f:03:7d:27:c6:56:70:45:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 30 09:44:39 2026 GMT
Not After : Oct 29 09:49:39 2027 GMT
Subject: CN=2D2E7B748999AF3977C36622340FEC8AD73BF589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:7d:74:2b:9e:ea:5a:2c:da:90:90:69:4f:
10:be:e9:83:de:47:cf:32:8c:0b:cd:89:41:08:c1:
4e:97:cd:df:82:9e:e7:92:74:9e:cd:9a:8a:aa:c6:
54:f4:3d:95:de:6d:df:f1:9a:31:f7:2c:8b:75:1d:
32:6b:bd:9b:e9:f2:2b:ec:14:df:f5:4b:68:2e:43:
ac:1d:40:57:f4:83:c9:b5:92:ea:fb:36:b8:d7:33:
38:4c:63:a5:7c:95:e7:40:d8:5f:34:e8:37:8f:a9:
8c:df:6d:fd:75:73:e4:07:9f:b7:31:99:2d:d3:cb:
65:fa:e8:a6:9f:82:7f:7a:df:26:bb:39:e8:99:55:
c9:81:30:99:b8:1e:6c:2b:c1:b9:70:ae:08:df:ff:
55:9d:51:d8:d0:3b:d3:4c:d4:87:43:8c:89:42:5c:
1d:0f:f6:55:79:ca:06:31:87:b3:c0:6f:be:17:c0:
67:cd:71:ea:b1:5e:cb:ae:b6:b7:04:6d:ce:07:eb:
34:ed:1a:f3:7f:0f:bc:21:82:b5:8b:10:53:a3:7d:
b7:8c:cd:1c:6d:97:8e:c4:1b:fc:08:61:66:93:a4:
cd:d8:ac:79:1e:2d:27:3a:dc:44:64:bd:df:59:a8:
9d:2e:6e:3e:17:a5:96:3a:6a:27:9e:ac:b9:16:c9:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:7B:74:89:99:AF:39:77:C3:66:22:34:0F:EC:8A:D7:3B:F5:89
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138372e302f32342d3234203d3e20323130353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.187.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a7:cf:1a:11:6c:77:99:b7:7c:50:74:38:f9:30:ce:4d:e3:
7d:c5:25:6e:4d:63:81:ef:21:56:fc:40:d8:28:c4:1e:0a:62:
82:87:f6:ce:0e:f9:62:5b:cd:65:61:bf:95:e2:5e:ba:8a:c1:
e8:b9:69:38:67:36:b4:57:38:50:71:3d:a3:49:ed:9a:fd:12:
fa:5d:55:30:a8:d6:89:27:56:2a:50:99:fa:95:33:1e:85:e1:
80:18:9a:03:49:b4:79:69:ce:b1:6a:ad:08:61:dc:60:aa:72:
5b:9f:ab:a1:99:f2:da:fb:f8:a6:a8:0d:af:e9:c7:ae:be:73:
f6:b6:ea:52:c4:88:26:0f:c9:27:0b:5a:4b:83:62:50:fd:c4:
04:ef:b9:ee:34:88:f5:84:f0:a5:5b:c8:ea:ef:e2:62:db:27:
3a:d3:03:b7:de:33:2a:18:a8:0f:0e:17:1b:b2:73:85:86:6d:
f8:fd:b8:53:0c:66:f3:40:85:54:f9:0c:62:57:d4:a3:a2:ee:
44:89:f2:44:34:cf:62:1b:e4:43:ee:7f:1b:56:b8:b1:a4:4d:
9e:a7:c4:7c:98:53:bb:29:a2:20:6a:29:39:fe:01:d3:52:90:
c5:d9:98:e3:72:b3:cc:f2:eb:c9:fd:ab:11:26:e2:e7:50:cc:
c7:38:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:00:57 2026 by rpki-client