Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139372e302f32342d3234203d3e20313532363938.roa
File: 3137382e3133322e3139372e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: hA8cPcrbI9aiOxO/LyhsLHy3Y7htStp3QNllYHwtGlk=
Subject key identifier: 05:E4:33:6F:8A:0D:C4:79:53:7E:A7:83:9E:FD:8E:B6:AE:28:30:10
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 3419336F45384A553482578CB1B7A1D2301384D3
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139372e302f32342d3234203d3e20313532363938.roa
Signing time: Fri 14 Aug 2026 07:12:06 +0000
ROA not before: Fri 14 Aug 2026 07:07:06 +0000
ROA not after: Fri 13 Aug 2027 07:12:06 +0000
asID: 152698
IP address blocks: 178.132.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:19:33:6f:45:38:4a:55:34:82:57:8c:b1:b7:a1:d2:30:13:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Aug 14 07:07:06 2026 GMT
Not After : Aug 13 07:12:06 2027 GMT
Subject: CN=05E4336F8A0DC479537EA7839EFD8EB6AE283010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:39:4d:b9:9f:6a:56:bc:ea:f2:0b:92:b6:
f1:c9:d4:58:5a:db:a2:72:a0:d3:3c:28:90:6c:ad:
f2:95:3d:55:bd:0a:06:30:76:66:78:e4:13:8d:1e:
3c:97:e8:8e:47:a2:aa:a9:25:14:31:71:01:ef:e9:
fd:85:09:29:f5:52:97:79:cc:51:80:a2:60:f5:36:
8b:1b:06:7e:12:74:8b:0e:9f:72:b8:64:49:86:82:
51:03:f9:1b:56:b4:77:28:01:24:51:4d:32:a9:e5:
08:96:e4:51:ef:a2:15:1d:be:16:d8:5c:53:42:8a:
01:5a:a0:e0:16:35:c7:eb:a1:67:f5:b0:9d:d3:8e:
0d:26:3b:81:14:22:2c:03:d4:3e:4e:23:12:37:ea:
1a:96:d6:82:1b:10:ec:02:5f:a7:b4:e2:b4:9e:fc:
ad:ab:25:90:f2:3f:b4:bc:cd:09:57:e2:e0:c0:c1:
f2:4c:86:04:9e:39:dc:f0:a9:53:df:05:64:03:cf:
d5:97:77:1a:da:dd:ce:ec:c3:c4:a8:1a:95:9f:0c:
54:38:53:a9:87:a6:cb:a4:96:e4:bb:4c:d7:12:22:
62:bb:21:8b:d6:c6:35:45:69:42:32:dd:15:0a:d8:
06:05:d9:ba:62:d8:0f:27:54:dd:58:60:21:af:9c:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:33:6F:8A:0D:C4:79:53:7E:A7:83:9E:FD:8E:B6:AE:28:30:10
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139372e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.197.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8a:22:3e:ae:a4:9e:e0:d5:a2:6c:b2:1e:57:61:07:61:f2:
15:07:24:f1:c3:30:ca:6e:dd:7f:a4:c3:68:73:e2:c6:5a:14:
0d:62:5b:6b:a7:08:2f:cc:2b:49:da:e1:45:72:c7:22:c8:5f:
2e:bf:a9:29:91:28:e3:58:d5:c4:be:01:27:94:9e:b4:e3:51:
fd:72:1b:3d:91:20:94:bd:67:ee:47:80:d1:85:a0:5f:1f:7a:
4a:18:83:8f:6b:68:42:09:49:97:85:8f:9b:68:69:24:4d:4a:
d6:3a:0b:52:54:33:e7:df:0d:a6:15:d0:1f:36:68:2b:62:28:
0d:6b:07:6c:58:b2:fd:3e:7f:3b:c9:ba:f1:47:e0:9b:1f:77:
17:03:aa:54:b8:0c:4d:e1:f0:bc:4a:0b:ed:24:f3:d8:50:dc:
5e:3d:21:35:d8:b6:2e:af:b5:36:de:57:31:83:03:88:89:03:
82:c0:dd:12:a4:0b:a7:8c:97:35:ff:f8:48:ea:95:09:09:56:
79:77:5b:da:d8:6d:ff:e1:55:a3:c0:56:57:2f:1a:19:f1:a8:
ee:ba:e9:c5:74:70:04:a1:fc:be:e2:12:49:50:2f:c7:cd:d4:
91:5c:83:ce:ac:af:66:3c:4b:c8:e9:1e:74:78:7b:22:ca:32:
cb:94:90:33
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUNBkzb0U4SlU0gleMsbeh0jAThNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjA4MTQwNzA3MDZaFw0yNzA4MTMwNzEyMDZaMDMxMTAvBgNV
BAMTKDA1RTQzMzZGOEEwREM0Nzk1MzdFQTc4MzlFRkQ4RUI2QUUyODMwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2zlNuZ9qVrzq8guStvHJ1Fha
26JyoNM8KJBsrfKVPVW9CgYwdmZ45BONHjyX6I5HoqqpJRQxcQHv6f2FCSn1Upd5
zFGAomD1NosbBn4SdIsOn3K4ZEmGglED+RtWtHcoASRRTTKp5QiW5FHvohUdvhbY
XFNCigFaoOAWNcfroWf1sJ3Tjg0mO4EUIiwD1D5OIxI36hqW1oIbEOwCX6e04rSe
/K2rJZDyP7S8zQlX4uDAwfJMhgSeOdzwqVPfBWQDz9WXdxra3c7sw8SoGpWfDFQ4
U6mHpsukluS7TNcSImK7IYvWxjVFaUIy3RUK2AYF2bpi2A8nVN1YYCGvnMl7AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUBeQzb4oNxHlTfqeDnv2Otq4oMBAwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM2MzkzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKExTANBgkqhkiG9w0BAQsFAAOCAQEAJ4oiPq6knuDVomyyHldhB2HyFQck
8cMwym7df6TDaHPixloUDWJba6cIL8wrSdrhRXLHIshfLr+pKZEo41jVxL4BJ5Se
tONR/XIbPZEglL1n7keA0YWgXx96ShiDj2toQglJl4WPm2hpJE1K1joLUlQz598N
phXQHzZoK2IoDWsHbFiy/T5/O8m68Ufgmx93FwOqVLgMTeHwvEoL7STz2FDcXj0h
Ndi2Lq+1Nt5XMYMDiIkDgsDdEqQLp4yXNf/4SOqVCQlWeXdb2tht/+FVo8BWVy8a
GfGo7rrpxXRwBKH8vuISSVAvx83UkVyDzqyvZjxLyOkedHh7Isoyy5SQMw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:15 2026 by rpki-client