Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20313939313836.roa
File: 3137382e3133322e3139332e302f32342d3234203d3e20313939313836.roa (raw, json)
Hash identifier: L1/VFBsoy+R+FOcnUQO8BUFLYVQcBVy/Jhpm44L+CLA=
Subject key identifier: 8D:9E:C1:10:A1:1C:0B:23:D0:44:5E:37:AF:41:6F:A8:F6:BB:83:29
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 59FC99259C7F9985711B7AB990F0F1DC4790331D
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20313939313836.roa
Signing time: Sun 24 May 2026 09:09:48 +0000
ROA not before: Sun 24 May 2026 09:04:48 +0000
ROA not after: Sun 23 May 2027 09:09:48 +0000
asID: 199186
IP address blocks: 178.132.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fc:99:25:9c:7f:99:85:71:1b:7a:b9:90:f0:f1:dc:47:90:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: May 24 09:04:48 2026 GMT
Not After : May 23 09:09:48 2027 GMT
Subject: CN=8D9EC110A11C0B23D0445E37AF416FA8F6BB8329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:d3:23:60:39:e8:4b:8a:9f:ec:b6:3d:29:
71:2c:7d:58:60:18:48:d6:c6:8e:2d:e7:4d:c0:21:
d1:e7:2f:28:41:b2:cd:05:0d:4f:fd:05:0b:d2:89:
0b:59:26:37:2d:5f:84:71:0a:52:9b:c5:ae:31:84:
d6:87:6a:5e:44:69:74:e5:1d:3b:95:3c:29:9a:a2:
f9:c6:4a:8e:65:c6:30:7d:99:8d:47:e0:a3:83:71:
ae:54:5c:fd:64:33:4f:50:16:f9:f6:1f:94:58:f8:
2a:3b:89:cb:e2:c0:b6:8e:63:2a:d3:78:3a:49:34:
0b:a1:21:16:1d:d1:60:9f:19:44:a1:14:a8:d5:af:
b3:46:cb:2e:a7:32:0b:ff:17:ed:f1:05:68:90:71:
60:36:e2:8d:ab:a5:43:36:f5:67:41:91:1f:3b:f8:
4e:bb:28:45:2c:f7:af:e8:e4:9c:2a:e5:be:e3:0f:
2a:7d:a0:f2:92:9a:74:21:1a:c7:a6:85:20:c0:96:
6e:57:d9:ca:01:00:10:5c:cc:ed:36:5e:a0:90:73:
37:08:4c:ff:df:4b:ec:94:0c:e2:2e:02:b1:8b:a4:
13:c1:b2:bd:0a:96:08:d9:be:d5:e1:b2:64:12:91:
56:ae:c9:10:43:da:e6:de:d4:df:54:b1:6f:bc:54:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:C1:10:A1:1C:0B:23:D0:44:5E:37:AF:41:6F:A8:F6:BB:83:29
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20313939313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.193.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7c:54:b7:ff:4c:1a:05:e9:ec:e0:47:b2:2f:41:3d:21:eb:
5e:a5:47:84:58:42:84:f6:34:0c:7d:0d:97:d7:0d:d4:73:cc:
a6:76:ed:be:be:64:60:19:d3:d9:9d:e3:27:3d:b8:05:ca:9f:
5e:a7:ef:d1:49:e7:48:85:fa:5e:31:22:4d:74:9e:7f:4c:78:
ae:28:8f:df:c4:f4:d2:2e:4a:69:a8:78:f9:ee:ff:e5:f6:78:
fd:dd:0c:81:9a:42:8b:13:83:41:02:ec:f4:0e:55:bc:67:d6:
21:9b:e0:d1:d8:c3:e6:d9:a6:36:63:b4:33:c3:b4:99:dc:ab:
ff:3b:3c:37:6a:ce:87:04:f4:5c:bd:f1:5a:00:6e:b4:62:58:
c7:81:41:8a:39:a6:a7:a3:77:a9:d4:61:2a:a8:9b:aa:d5:59:
d7:5f:d1:6c:5d:89:50:90:e2:cb:ba:95:cf:e2:b9:8d:75:89:
82:43:25:55:ed:f8:f2:03:fa:fb:6d:57:a2:b2:74:48:24:6c:
79:e7:c6:b4:8b:35:f3:ed:8d:07:ad:29:2e:1a:aa:d0:41:fd:
2f:71:d3:70:31:4f:f5:2c:9b:91:bc:e3:18:72:68:bc:84:75:
7c:73:fb:26:8c:be:35:ec:19:28:56:6e:27:df:0b:43:0b:e2:
5b:c3:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:08 2026 by rpki-client