Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa
File: 3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier: qLaDwBI1BZ2zG398ZRVTsFr0j0hBs/moxNHBTZQAZ1w=
Subject key identifier: 40:E6:DD:A7:67:28:F9:D5:C5:AF:86:FE:34:BC:41:3A:4D:2A:E2:BF
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 66F73B38A13A23B1F9CD16DEB304077DB58EAAB5
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa
Signing time: Sat 05 Sep 2026 06:59:11 +0000
ROA not before: Sat 05 Sep 2026 06:54:11 +0000
ROA not after: Sat 04 Sep 2027 06:59:11 +0000
asID: 218829
IP address blocks: 178.132.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f7:3b:38:a1:3a:23:b1:f9:cd:16:de:b3:04:07:7d:b5:8e:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Sep 5 06:54:11 2026 GMT
Not After : Sep 4 06:59:11 2027 GMT
Subject: CN=40E6DDA76728F9D5C5AF86FE34BC413A4D2AE2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:41:b6:e6:ea:2a:78:9f:5d:e5:4d:bb:26:
5d:1a:a9:fc:7c:44:40:41:75:3b:bd:c1:01:5b:54:
f4:e8:c7:4e:06:77:57:f7:ce:5d:1e:60:a9:6c:bd:
7a:66:af:f2:d2:bb:54:52:85:c5:00:b0:3d:01:dd:
12:ab:46:ea:d2:e8:45:67:00:e8:46:07:9c:69:28:
8b:44:c6:74:17:23:bd:08:f4:00:f0:c0:18:33:74:
0f:3e:fb:98:ec:75:3e:fc:fd:87:f3:95:15:98:17:
6e:b2:68:01:82:cd:e0:e0:0e:ac:cf:98:f0:22:c0:
a3:62:51:ca:8e:15:d6:c0:9e:b8:16:ed:97:36:43:
7f:63:6e:9a:2a:11:b0:89:23:82:d8:ef:85:52:07:
c8:06:4a:ca:e7:ec:91:8b:01:49:74:cd:1c:3b:26:
4a:c4:bd:84:ae:47:e2:6f:70:7b:3c:7b:b0:90:c1:
22:b0:ff:4b:9b:2f:f8:95:2a:94:fd:83:82:37:09:
f4:dd:90:85:0f:1f:06:93:40:7d:b9:ca:fc:19:6b:
f3:8e:08:d9:f2:78:c5:9f:54:b8:9f:ac:e2:1a:81:
86:8d:3a:86:a4:f7:74:24:22:f3:d1:8a:8a:c8:38:
54:01:18:18:25:97:76:9f:21:7e:ec:01:f1:34:7c:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:DD:A7:67:28:F9:D5:C5:AF:86:FE:34:BC:41:3A:4D:2A:E2:BF
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e20323138383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5f:f9:cb:b5:71:ee:f6:c0:91:6b:5e:3c:02:d3:bc:f1:15:
0e:c8:0d:bb:27:fd:1d:0b:38:a9:49:38:45:11:99:e1:71:ed:
fb:9f:e0:f3:03:e2:bf:5c:87:7d:50:61:57:c7:89:e3:76:f7:
93:25:90:31:a7:3c:5a:24:bf:ff:23:75:c7:b4:de:5b:51:67:
6c:e7:92:03:55:77:a0:f9:d4:55:09:c0:c1:d8:e7:8e:db:f7:
c8:eb:3f:b9:ab:2c:b4:bb:ea:ee:20:c3:45:b2:ff:e5:b7:21:
c2:91:88:80:7a:bc:ee:de:da:ca:7e:7c:a2:fb:32:25:f7:d8:
15:f2:f6:1d:b3:3b:53:8a:ab:2e:a7:f1:0b:23:66:d7:ca:30:
7e:7f:7b:fa:3b:37:94:b5:e9:22:75:0b:09:ec:d0:1d:ea:c8:
6f:d4:8e:7c:cd:7f:2a:e8:f2:f6:8e:65:03:a9:40:5f:62:7f:
8a:41:75:68:df:18:52:e7:99:43:6f:e7:75:d0:5d:1e:39:93:
59:cb:d3:fe:34:99:c2:da:9c:b2:e3:e1:22:94:46:c7:8f:30:
58:50:78:e1:d0:b0:f7:da:c6:c2:a5:95:81:e1:bc:4c:b8:fe:
00:31:8d:11:1b:80:37:47:33:b4:37:89:c9:4f:55:f3:a9:3a:
61:e1:27:bb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZvc7OKE6I7H5zRbeswQHfbWOqrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA5MDUwNjU0MTFaFw0yNzA5MDQwNjU5MTFaMDMxMTAvBgNV
BAMTKDQwRTZEREE3NjcyOEY5RDVDNUFGODZGRTM0QkM0MTNBNEQyQUUyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi90G25uoqeJ9d5U27Jl0aqfx8
REBBdTu9wQFbVPTox04Gd1f3zl0eYKlsvXpmr/LSu1RShcUAsD0B3RKrRurS6EVn
AOhGB5xpKItExnQXI70I9ADwwBgzdA8++5jsdT78/YfzlRWYF26yaAGCzeDgDqzP
mPAiwKNiUcqOFdbAnrgW7Zc2Q39jbpoqEbCJI4LY74VSB8gGSsrn7JGLAUl0zRw7
JkrEvYSuR+JvcHs8e7CQwSKw/0ubL/iVKpT9g4I3CfTdkIUPHwaTQH25yvwZa/OO
CNnyeMWfVLifrOIagYaNOoak93QkIvPRiorIOFQBGBgll3afIX7sAfE0fM1DAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUQObdp2co+dXFr4b+NLxBOk0q4r8wHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM4MzIzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKEwTANBgkqhkiG9w0BAQsFAAOCAQEAfV/5y7Vx7vbAkWtePALTvPEVDsgN
uyf9HQs4qUk4RRGZ4XHt+5/g8wPiv1yHfVBhV8eJ43b3kyWQMac8WiS//yN1x7Te
W1FnbOeSA1V3oPnUVQnAwdjnjtv3yOs/uasstLvq7iDDRbL/5bchwpGIgHq87t7a
yn58ovsyJffYFfL2HbM7U4qrLqfxCyNm18owfn97+js3lLXpInULCezQHerIb9SO
fM1/Kujy9o5lA6lAX2J/ikF1aN8YUueZQ2/nddBdHjmTWcvT/jSZwtqcsuPhIpRG
x48wWFB44dCw99rGwqWVgeG8TLj+ADGNERuAN0cztDeJyU9V86k6YeEnuw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:49:23 2026 by rpki-client