Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa
File: 3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa (raw, json)
Hash identifier: zLU5C7ZFd3sL4rq0O+Zjfawn4dfQU7CoZwTzCtuGRe4=
Subject key identifier: D9:20:B2:F2:FE:13:AA:FE:C6:A9:01:A5:F0:BC:D7:08:45:2D:D4:34
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 79CB3A9DF5933C7216F8146C42B165DA53531121
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa
Signing time: Fri 21 Aug 2026 23:49:30 +0000
ROA not before: Fri 21 Aug 2026 23:44:30 +0000
ROA not after: Fri 20 Aug 2027 23:49:30 +0000
asID: 9087
IP address blocks: 178.208.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cb:3a:9d:f5:93:3c:72:16:f8:14:6c:42:b1:65:da:53:53:11:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 21 23:44:30 2026 GMT
Not After : Aug 20 23:49:30 2027 GMT
Subject: CN=D920B2F2FE13AAFEC6A901A5F0BCD708452DD434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:1e:66:9d:af:83:25:fd:e0:74:49:a8:37:
de:ff:8b:7c:1d:21:d8:6f:65:d7:ab:8e:ab:a7:78:
1d:5e:a0:d6:1c:72:eb:ce:af:71:63:67:49:58:c9:
b1:e8:98:d9:42:89:43:3f:48:1d:38:ec:2c:08:cd:
8f:d5:e0:7a:77:6a:7c:09:76:ba:49:d1:f5:f5:84:
2b:bd:08:ae:5f:67:ee:3f:48:e2:2f:4c:0e:98:74:
c4:b8:97:c0:12:71:60:93:5a:a4:82:95:37:3f:42:
65:83:d8:4f:7c:be:6c:ed:fa:ea:4b:d0:d7:42:a1:
ba:c3:86:c8:b3:e4:6d:81:47:21:36:64:12:de:22:
79:e4:66:61:21:58:70:d7:4a:a6:77:c5:8f:f9:86:
41:10:19:58:5e:1d:a2:8c:87:21:7c:2d:88:54:a6:
45:52:04:a0:db:46:a2:b5:6a:85:a1:a3:50:36:e0:
a7:8c:77:97:0b:86:1f:7e:29:69:42:a3:53:2b:59:
67:ea:b5:96:4f:ff:0e:24:58:91:cd:d2:08:53:55:
03:5d:45:45:52:16:41:c2:67:b9:d4:c0:fe:32:15:
23:37:ad:d6:35:c6:b8:73:69:30:e0:a0:ed:b8:f2:
30:55:83:d8:8d:df:c5:65:1f:b2:b1:5f:81:bd:e0:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:B2:F2:FE:13:AA:FE:C6:A9:01:A5:F0:BC:D7:08:45:2D:D4:34
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:63:b7:de:af:cc:d5:93:b6:a4:93:e3:6a:34:b8:3e:da:8e:
37:73:01:8e:e1:8f:45:ed:52:cd:1f:f6:a4:9f:f4:dc:60:3c:
d5:f7:50:00:fd:0c:b3:30:a9:db:4f:90:8d:ed:13:75:29:72:
06:6a:5f:95:6c:dc:f6:10:99:1d:70:38:72:a4:0a:3e:7b:b4:
05:0c:46:39:cd:d6:24:6f:42:0f:b3:73:7a:0b:c1:9f:66:65:
16:a8:af:5c:b0:0c:60:01:d3:9a:48:1c:c3:f4:5f:f0:a9:dd:
8c:03:6b:78:a6:f2:4e:c9:82:20:5b:83:87:30:68:67:82:24:
e2:b8:09:48:04:12:52:9e:6a:5b:18:bb:0a:a7:7c:86:18:d7:
f7:46:c5:6a:db:f9:66:00:85:b4:26:1c:53:1e:f9:e1:62:b9:
2a:57:40:e8:89:cb:0a:a0:1e:76:d6:ff:f5:31:95:d4:5b:6c:
17:b6:0e:5d:f1:bf:47:58:22:79:cc:0e:4d:33:81:2c:bb:3e:
17:3c:96:d4:dd:90:0e:a0:84:4a:5b:87:bf:9f:25:23:f1:c5:
f1:b8:c3:c1:d2:5d:13:46:b4:b8:49:24:64:28:b8:2f:16:a9:
9a:de:2e:88:07:be:26:d4:1c:7a:f9:76:0f:96:e1:4f:e9:d7:
27:f4:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:30:06 2026 by rpki-client