Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139342e302f32342d3234203d3e20313432323430.roa
File: 3137382e3133322e3139342e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: 1tVTQ+2aIh5/Vu9xVe+cenxXb9IrlBFNf/WzUfLsjXA=
Subject key identifier: 01:6A:7D:79:8A:9A:2F:B4:95:9F:11:28:7E:50:9C:A5:04:16:0F:37
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 67C9B3E13B1BA2A1D1C02F6D6F21799F07F15646
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139342e302f32342d3234203d3e20313432323430.roa
Signing time: Fri 14 Aug 2026 14:48:01 +0000
ROA not before: Fri 14 Aug 2026 14:43:01 +0000
ROA not after: Fri 13 Aug 2027 14:48:01 +0000
asID: 142240
IP address blocks: 178.132.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c9:b3:e1:3b:1b:a2:a1:d1:c0:2f:6d:6f:21:79:9f:07:f1:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 14 14:43:01 2026 GMT
Not After : Aug 13 14:48:01 2027 GMT
Subject: CN=016A7D798A9A2FB4959F11287E509CA504160F37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:5e:61:f8:fa:17:00:db:94:da:4f:8f:d7:
52:80:fa:7b:20:c6:44:4f:44:8c:43:55:b8:7f:e5:
a6:cc:57:11:a3:68:14:6c:54:13:73:db:b9:22:e4:
05:fb:5a:71:da:5a:59:61:9f:cc:30:33:33:fd:a9:
c7:0d:af:10:87:7d:8f:1a:6c:91:c5:2c:1e:8b:f9:
a4:9f:cc:1e:55:02:b5:8f:55:f4:e8:67:18:d8:56:
95:41:4b:89:26:73:53:a2:e5:10:74:64:3f:c0:e7:
40:02:26:0f:e2:8c:b0:2f:a6:fa:94:8d:a6:e1:00:
de:28:f0:9f:1f:a8:6e:57:2c:aa:47:b3:5f:0f:2b:
28:6b:e5:86:56:a7:15:28:02:a3:af:d4:e0:2c:9f:
ca:9a:ba:50:d0:da:18:e9:ff:a1:78:2c:e5:ff:fa:
21:01:8e:b2:22:ca:2c:c9:2a:4a:4b:c8:91:e3:50:
fd:54:5b:a8:f9:c7:b4:f1:a2:42:5a:61:3d:3f:0f:
b0:1d:a6:21:5e:8b:3e:65:fe:6e:40:b4:fb:eb:d9:
3f:69:75:ac:14:7b:51:f3:f4:d6:2e:1c:c5:6c:af:
8f:ae:fb:fe:96:12:fb:c2:1b:ab:47:ef:09:73:6b:
8f:3d:97:7c:3e:45:0c:76:bd:2a:8e:82:20:7f:2a:
17:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:7D:79:8A:9A:2F:B4:95:9F:11:28:7E:50:9C:A5:04:16:0F:37
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139342e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ae:51:64:c9:24:d3:7c:17:91:23:5a:08:a4:70:d0:dd:45:
68:08:ff:01:23:56:7b:80:d3:72:dd:ff:d6:61:6a:2c:4f:7a:
4e:55:41:1b:11:e8:b2:ad:bd:3d:72:d4:8c:00:50:7e:c8:ec:
8d:cc:f5:6a:ad:f1:b7:08:67:9c:af:d4:5b:a2:2c:e8:66:67:
e1:27:9c:84:3c:85:73:56:34:bd:77:a9:ba:60:30:06:c5:7e:
46:d8:dd:bb:19:c9:c8:32:08:f4:f1:d3:f0:8c:de:3e:54:46:
49:23:d6:61:3c:d3:c9:43:7d:d3:a9:52:c4:c6:95:55:d2:0a:
a5:a1:84:cb:70:23:8d:ec:69:50:0d:e2:3d:ce:98:00:ca:5c:
c5:39:2b:d5:60:62:36:69:99:a5:eb:fc:a7:54:30:16:21:f7:
f9:fa:bf:af:65:f8:07:27:ec:98:c8:8b:db:01:67:ed:0f:92:
15:d0:8c:16:95:ae:87:59:f5:47:03:3b:e0:de:6d:5e:c1:9a:
e0:a0:8e:67:c2:ae:b0:70:f2:a6:08:fe:c7:fb:41:63:66:91:
8a:06:66:3c:d2:6a:19:8f:d3:75:b5:26:de:bd:68:72:dc:1f:
64:9e:76:5b:14:84:3d:91:7c:5f:be:7a:3d:13:72:b1:06:c7:
80:19:83:ed
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUZ8mz4TsboqHRwC9tbyF5nwfxVkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA4MTQxNDQzMDFaFw0yNzA4MTMxNDQ4MDFaMDMxMTAvBgNV
BAMTKDAxNkE3RDc5OEE5QTJGQjQ5NTlGMTEyODdFNTA5Q0E1MDQxNjBGMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBF5h+PoXANuU2k+P11KA+nsg
xkRPRIxDVbh/5abMVxGjaBRsVBNz27ki5AX7WnHaWllhn8wwMzP9qccNrxCHfY8a
bJHFLB6L+aSfzB5VArWPVfToZxjYVpVBS4kmc1Oi5RB0ZD/A50ACJg/ijLAvpvqU
jabhAN4o8J8fqG5XLKpHs18PKyhr5YZWpxUoAqOv1OAsn8qaulDQ2hjp/6F4LOX/
+iEBjrIiyizJKkpLyJHjUP1UW6j5x7TxokJaYT0/D7AdpiFeiz5l/m5AtPvr2T9p
dawUe1Hz9NYuHMVsr4+u+/6WEvvCG6tH7wlza489l3w+RQx2vSqOgiB/Khc7AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUAWp9eYqaL7SVnxEoflCcpQQWDzcwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMyMzQzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKEwjANBgkqhkiG9w0BAQsFAAOCAQEAc65RZMkk03wXkSNaCKRw0N1FaAj/
ASNWe4DTct3/1mFqLE96TlVBGxHosq29PXLUjABQfsjsjcz1aq3xtwhnnK/UW6Is
6GZn4SechDyFc1Y0vXepumAwBsV+RtjduxnJyDII9PHT8IzePlRGSSPWYTzTyUN9
06lSxMaVVdIKpaGEy3AjjexpUA3iPc6YAMpcxTkr1WBiNmmZpev8p1QwFiH3+fq/
r2X4ByfsmMiL2wFn7Q+SFdCMFpWuh1n1RwM74N5tXsGa4KCOZ8KusHDypgj+x/tB
Y2aRigZmPNJqGY/TdbUm3r1octwfZJ52WxSEPZF8X756PRNysQbHgBmD7Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:49:22 2026 by rpki-client