Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20323134343833.roa
File: 3137382e3133322e3139362e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: T+iZECI6Nf8vhVyjHs4Cq+4DAetjvDN8JYaeWCDcmBw=
Subject key identifier: 8D:E1:D9:DC:2B:01:5C:17:DB:62:00:3E:58:3A:2C:9D:AD:75:60:2D
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 618DF975CCF8A886F380D6BA1B496B62BAD667CC
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20323134343833.roa
Signing time: Thu 27 Aug 2026 07:25:17 +0000
ROA not before: Thu 27 Aug 2026 07:20:17 +0000
ROA not after: Thu 26 Aug 2027 07:25:17 +0000
asID: 214483
IP address blocks: 178.132.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:8d:f9:75:cc:f8:a8:86:f3:80:d6:ba:1b:49:6b:62:ba:d6:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 27 07:20:17 2026 GMT
Not After : Aug 26 07:25:17 2027 GMT
Subject: CN=8DE1D9DC2B015C17DB62003E583A2C9DAD75602D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:e8:3f:b1:b4:af:4e:27:63:da:4b:32:36:
e1:cd:9c:62:34:da:b7:f9:27:d5:46:16:5e:28:df:
e0:87:b6:8e:c1:fe:76:b7:00:ee:4c:a5:66:dc:22:
3a:09:43:f0:f6:34:30:20:61:ba:55:21:de:cc:db:
22:04:8c:75:35:2b:b4:ec:3e:e7:b9:fa:4c:9c:46:
52:9c:f8:1e:a8:ea:4c:84:b8:4d:a7:17:5c:3d:53:
a8:73:81:0c:31:d7:40:15:bd:a3:91:fd:b8:9b:fb:
3b:fc:9c:f6:06:e8:35:8c:58:83:0e:be:97:d1:88:
63:e1:35:47:91:8e:bd:f3:ed:0f:c7:00:b4:3d:1f:
e4:a1:00:a3:aa:9c:14:30:62:f7:2b:37:7b:b5:15:
1c:53:7c:de:d6:fc:2a:51:35:33:71:9f:1a:a0:92:
ba:ba:ed:18:bb:3d:76:a7:14:94:a7:04:1c:f9:a2:
0e:eb:bf:d6:fd:46:74:1b:c6:f9:df:ce:ef:d2:1f:
00:89:d7:70:5b:fe:48:7d:ac:34:c0:c8:39:3e:12:
53:7e:27:7a:39:48:2b:25:18:c6:89:b2:2e:72:6d:
2b:29:9e:f2:22:ae:31:13:6c:17:15:57:a9:62:38:
72:5f:2d:f1:86:4a:42:23:ca:cd:c4:30:57:57:7e:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:D9:DC:2B:01:5C:17:DB:62:00:3E:58:3A:2C:9D:AD:75:60:2D
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bb:22:ec:b9:8f:0b:a6:d4:68:f2:cc:1d:44:43:1d:fd:77:
07:56:fa:f2:8d:e7:57:b2:c4:0d:58:a1:62:9e:ef:d5:9d:78:
22:2a:98:09:6e:be:d2:b9:5d:8b:4f:ce:a9:b9:11:7b:48:59:
ee:a9:86:9b:57:b4:ed:a7:e4:d7:60:f1:7d:c2:46:8e:d0:38:
e8:d3:75:6d:a8:df:83:58:35:df:a6:97:35:4f:d6:94:27:bc:
cb:7d:8d:6f:c7:0a:7c:7a:12:fe:4c:fb:d8:58:45:b1:0a:6a:
12:6f:d9:b0:93:f1:a4:fc:73:f1:d2:2c:9f:b9:07:6f:df:df:
13:45:b2:5d:f3:03:f1:40:06:d4:86:4d:fe:b7:62:bb:8a:34:
36:5e:03:52:ca:a1:35:30:3e:e5:90:a8:39:37:74:5b:80:7f:
1a:14:0e:18:96:fe:64:0c:12:c4:55:58:e0:0d:9e:48:f6:a5:
22:f3:11:fd:69:01:da:e0:35:f6:c6:a1:11:29:5b:f0:0b:74:
45:a0:c4:95:d2:6e:85:f6:a6:c5:8d:3c:3c:a5:a9:90:a1:35:
17:a7:42:e4:6a:ff:ca:14:1e:e4:4f:be:3a:71:33:37:7c:24:
19:71:f8:dc:78:85:17:d1:cc:f3:65:13:37:25:c8:b6:b4:9f:
00:9b:84:af
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUYY35dcz4qIbzgNa6G0lrYrrWZ8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA4MjcwNzIwMTdaFw0yNzA4MjYwNzI1MTdaMDMxMTAvBgNV
BAMTKDhERTFEOURDMkIwMTVDMTdEQjYyMDAzRTU4M0EyQzlEQUQ3NTYwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48+g/sbSvTidj2ksyNuHNnGI0
2rf5J9VGFl4o3+CHto7B/na3AO5MpWbcIjoJQ/D2NDAgYbpVId7M2yIEjHU1K7Ts
Pue5+kycRlKc+B6o6kyEuE2nF1w9U6hzgQwx10AVvaOR/bib+zv8nPYG6DWMWIMO
vpfRiGPhNUeRjr3z7Q/HALQ9H+ShAKOqnBQwYvcrN3u1FRxTfN7W/CpRNTNxnxqg
krq67Ri7PXanFJSnBBz5og7rv9b9RnQbxvnfzu/SHwCJ13Bb/kh9rDTAyDk+ElN+
J3o5SCslGMaJsi5ybSspnvIirjETbBcVV6liOHJfLfGGSkIjys3EMFdXfm1fAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUjeHZ3CsBXBfbYgA+WDosna11YC0wHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzgzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKExDANBgkqhkiG9w0BAQsFAAOCAQEAMrsi7LmPC6bUaPLMHURDHf13B1b6
8o3nV7LEDVihYp7v1Z14IiqYCW6+0rldi0/OqbkRe0hZ7qmGm1e07afk12DxfcJG
jtA46NN1bajfg1g136aXNU/WlCe8y32Nb8cKfHoS/kz72FhFsQpqEm/ZsJPxpPxz
8dIsn7kHb9/fE0WyXfMD8UAG1IZN/rdiu4o0Nl4DUsqhNTA+5ZCoOTd0W4B/GhQO
GJb+ZAwSxFVY4A2eSPalIvMR/WkB2uA19sahESlb8At0RaDEldJuhfamxY08PKWp
kKE1F6dC5Gr/yhQe5E++OnEzN3wkGXH43HiFF9HM82UTNyXItrSfAJuErw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:05 2026 by rpki-client