Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
File: 3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa (raw, json)
Hash identifier: yq++ghl6JS/JO3MvBIYzD9iy1Eahb6BymyXC4tgOoEU=
Subject key identifier: FA:D0:6F:5A:EB:61:27:E9:01:74:7A:52:66:91:86:65:D2:CA:7F:C7
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 441951196C8704CCBBE0A0529874DC5407409759
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
Signing time: Fri 28 Aug 2026 16:49:30 +0000
ROA not before: Fri 28 Aug 2026 16:44:30 +0000
ROA not after: Fri 27 Aug 2027 16:49:30 +0000
asID: 9087
IP address blocks: 178.208.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:19:51:19:6c:87:04:cc:bb:e0:a0:52:98:74:dc:54:07:40:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 28 16:44:30 2026 GMT
Not After : Aug 27 16:49:30 2027 GMT
Subject: CN=FAD06F5AEB6127E901747A5266918665D2CA7FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:1e:73:79:9b:be:15:b1:ab:ef:ea:b7:1d:
10:36:51:05:d1:23:c9:a9:47:fa:3a:9c:15:c3:c7:
31:93:10:89:b9:10:9d:2b:fa:6c:fd:6a:8b:9a:39:
6a:80:0a:0a:eb:ec:44:bd:78:8d:ad:06:0f:41:f7:
a2:4d:2e:2e:d9:7e:dc:5a:7c:79:7d:f7:03:99:89:
9b:ff:8d:e5:4f:f7:97:39:15:4a:b5:b0:3f:f2:ea:
32:9f:a9:55:c5:d0:bf:f3:9b:84:3c:96:b0:66:d1:
bd:3d:5d:99:37:73:4b:4a:b0:1c:55:2c:71:36:cf:
d0:b0:ae:26:93:9b:1c:6b:e9:e4:c1:50:d1:3c:af:
f1:b8:4b:23:22:b3:db:06:d5:19:6b:29:7d:15:17:
c1:b5:0e:bf:34:35:c3:99:99:5b:1f:3d:8b:96:32:
9c:bb:0a:d6:61:19:09:cd:fa:15:32:54:a2:b9:0f:
38:df:f4:66:57:47:29:9e:9d:1f:a8:0b:c7:37:1c:
d4:12:69:23:59:2c:ca:be:db:4e:58:24:f1:7f:86:
79:62:a8:90:b2:cf:24:7c:82:72:89:65:03:7b:90:
35:24:31:4d:f8:e5:4e:fa:97:cc:c7:de:22:59:62:
94:dd:9c:eb:5e:f9:9c:72:12:8e:5a:c8:d3:d2:28:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D0:6F:5A:EB:61:27:E9:01:74:7A:52:66:91:86:65:D2:CA:7F:C7
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
38:5c:b1:98:cc:b0:18:d6:15:a5:53:b9:c2:85:d2:ee:78:d2:
3b:0a:b5:39:f0:38:0d:35:43:05:44:15:d3:b7:d0:f1:22:23:
b6:2a:92:d0:bd:7d:5a:fb:60:0b:16:4f:05:59:d8:75:d9:2b:
45:25:dc:70:e8:fa:35:e9:6e:24:57:cf:46:de:37:7d:ce:67:
a2:89:ca:10:12:68:9f:00:9a:30:6b:e0:67:9f:5e:aa:2a:13:
e8:ec:ce:bc:06:bc:9f:b0:7a:94:dd:82:bd:32:bc:cd:ac:1c:
3e:a7:78:7d:0c:6a:26:4f:b4:d9:51:87:65:d8:af:42:6b:cb:
13:12:a5:2a:46:16:65:f8:9f:0c:bb:6c:37:ef:64:d4:54:be:
18:8b:ef:69:3b:dc:f8:9a:f4:d0:5d:68:c3:53:a7:07:23:6f:
51:86:4e:45:b7:6e:5f:6e:dd:17:2b:ae:97:ed:27:61:5a:01:
82:99:1a:37:8c:75:22:f9:6d:40:6e:cf:8c:6f:b4:0d:cf:c0:
cc:a0:ab:d5:55:4c:32:d0:35:c9:9f:02:c6:d0:ad:3a:a1:c0:
aa:d8:97:9c:20:6c:96:7b:cc:69:3b:a7:d1:b6:de:a8:75:20:
39:19:9f:9f:cb:7c:1d:dd:46:56:be:7a:da:bf:f8:33:7a:d1:
3b:24:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:12 2026 by rpki-client