Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e20323035353434.roa
File: 3137382e3133322e3139392e302f32342d3234203d3e20323035353434.roa (raw, json)
Hash identifier: mpzkLlbjKRbHs5eRz67NFc2yPvT9nevIdOaUOeBAM1c=
Subject key identifier: 4B:4F:B9:92:82:5D:84:03:42:46:68:12:34:8A:02:09:7F:F1:37:29
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 5CB3112C55540813745996073D06A0CD8DBD12D7
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e20323035353434.roa
Signing time: Wed 21 Oct 2026 11:39:58 +0000
ROA not before: Wed 21 Oct 2026 11:34:58 +0000
ROA not after: Wed 20 Oct 2027 11:39:58 +0000
asID: 205544
IP address blocks: 178.132.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b3:11:2c:55:54:08:13:74:59:96:07:3d:06:a0:cd:8d:bd:12:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Oct 21 11:34:58 2026 GMT
Not After : Oct 20 11:39:58 2027 GMT
Subject: CN=4B4FB992825D840342466812348A02097FF13729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:93:3e:54:83:e4:f9:1f:2d:c5:98:fb:f5:
9b:94:e6:99:8c:95:17:f2:17:76:3a:e9:a3:ca:eb:
4d:25:85:78:39:09:7f:6c:b1:93:b7:86:48:33:e1:
02:1f:fc:97:88:2d:f1:35:ea:a1:38:9b:a0:61:9f:
4a:5b:9f:48:26:c6:1c:bb:04:fb:c5:23:5a:3b:bb:
f1:03:7a:08:a9:e3:c0:89:ee:d4:40:a6:39:17:83:
cd:90:b5:25:09:cc:52:60:3a:a6:d3:d1:9b:00:56:
2f:58:3d:db:b6:0d:cc:61:26:04:62:44:40:32:ea:
96:c8:a4:95:06:f9:f1:a5:c1:d4:41:7e:22:0f:a1:
a6:7a:5a:d5:70:2a:a9:ac:15:68:34:39:98:33:8e:
59:45:03:e5:39:44:a5:20:0b:e2:cc:a2:46:8c:24:
c9:8d:a7:c5:29:79:2f:55:80:78:bd:bf:3b:60:db:
60:e8:0b:e2:a1:c1:16:80:00:a1:b1:a3:83:cc:e7:
4e:aa:bd:6f:58:2a:8d:5d:30:47:36:0b:03:aa:52:
12:7b:81:2a:c6:f2:d2:e2:49:08:c6:09:8d:7c:b2:
94:01:5d:0f:b7:cf:2f:60:51:55:21:0c:c2:14:28:
89:c7:cc:78:27:19:d2:0e:5b:7f:46:fe:29:f4:19:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:B9:92:82:5D:84:03:42:46:68:12:34:8A:02:09:7F:F1:37:29
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e20323035353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:47:15:81:7a:37:36:e0:74:67:5f:c0:0f:9d:14:b2:e3:f0:
e2:33:ba:29:43:eb:bb:56:12:19:de:48:be:7d:ae:db:c9:13:
da:cb:ac:6c:89:92:f8:ca:a6:7f:f5:3e:f9:2f:d6:39:a9:09:
98:f8:41:ab:e1:d7:9e:68:75:21:28:ce:4c:68:1b:1a:e1:34:
42:fb:7f:56:d1:84:d1:7c:18:42:dc:66:9a:93:bc:3d:4e:8a:
25:7f:b8:b1:f5:b7:16:75:9c:45:7c:e3:7a:99:24:0e:c6:37:
c3:bf:1b:62:0c:0d:9f:a5:d4:c2:83:57:aa:08:ac:c3:d3:6b:
de:4f:db:da:6a:b6:2b:d4:e6:0c:59:f9:02:ba:a7:4c:6d:50:
a9:81:96:e4:1c:37:40:9a:77:bc:d8:f6:08:01:e2:73:37:2b:
9b:32:bf:af:23:c3:ea:6f:3b:f0:f4:41:26:22:ed:d3:f2:45:
b1:ca:0e:d5:c8:cb:c7:93:37:93:57:34:48:ca:c5:4d:3f:4a:
4d:7f:d9:9f:9f:b0:32:d6:4a:e8:d4:6e:1f:e2:5a:3b:63:e2:
7e:5d:ce:04:25:43:5e:cd:5f:ba:74:6d:b5:82:39:28:e0:f3:
3e:87:59:6a:5c:ac:04:df:db:1e:cf:b6:2f:85:ca:4f:43:42:
be:0f:09:a7
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUXLMRLFVUCBN0WZYHPQagzY29EtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjEwMjExMTM0NThaFw0yNzEwMjAxMTM5NThaMDMxMTAvBgNV
BAMTKDRCNEZCOTkyODI1RDg0MDM0MjQ2NjgxMjM0OEEwMjA5N0ZGMTM3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7ZM+VIPk+R8txZj79ZuU5pmM
lRfyF3Y66aPK600lhXg5CX9ssZO3hkgz4QIf/JeILfE16qE4m6Bhn0pbn0gmxhy7
BPvFI1o7u/EDegip48CJ7tRApjkXg82QtSUJzFJgOqbT0ZsAVi9YPdu2DcxhJgRi
REAy6pbIpJUG+fGlwdRBfiIPoaZ6WtVwKqmsFWg0OZgzjllFA+U5RKUgC+LMokaM
JMmNp8UpeS9VgHi9vztg22DoC+KhwRaAAKGxo4PM506qvW9YKo1dMEc2CwOqUhJ7
gSrG8tLiSQjGCY18spQBXQ+3zy9gUVUhDMIUKInHzHgnGdIOW39G/in0GXmtAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUS0+5koJdhANCRmgSNIoCCX/xNykwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM1MzQzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALKExzANBgkqhkiG9w0BAQsFAAOCAQEAKkcVgXo3NuB0Z1/AD50UsuPw4jO6
KUPru1YSGd5Ivn2u28kT2susbImS+Mqmf/U++S/WOakJmPhBq+HXnmh1ISjOTGgb
GuE0Qvt/VtGE0XwYQtxmmpO8PU6KJX+4sfW3FnWcRXzjepkkDsY3w78bYgwNn6XU
woNXqgisw9Nr3k/b2mq2K9TmDFn5ArqnTG1QqYGW5Bw3QJp3vNj2CAHiczcrmzK/
ryPD6m878PRBJiLt0/JFscoO1cjLx5M3k1c0SMrFTT9KTX/Zn5+wMtZK6NRuH+Ja
O2Pifl3OBCVDXs1funRttYI5KODzPodZalysBN/bHs+2L4XKT0NCvg8Jpw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:32 2026 by rpki-client