Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7NxF3VAbgFc54bSmGnoiLFXudQPEKhOZFJyeyFfxV1A=
Subject key identifier: F5:F0:0B:BF:6B:A5:84:03:E1:BA:47:22:36:48:F0:12:60:38:5F:39
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1868DAFDF0F261C04A6CB646C09FA962D7E6BF93
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 11:10:59 +0000
ROA not before: Thu 15 Oct 2026 11:05:59 +0000
ROA not after: Thu 14 Oct 2027 11:10:59 +0000
asID: 834
IP address blocks: 178.208.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:68:da:fd:f0:f2:61:c0:4a:6c:b6:46:c0:9f:a9:62:d7:e6:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 15 11:05:59 2026 GMT
Not After : Oct 14 11:10:59 2027 GMT
Subject: CN=F5F00BBF6BA58403E1BA47223648F01260385F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:2e:2b:44:2c:a3:71:cc:4f:61:39:26:c7:
7a:dd:75:fe:ba:7b:e0:86:7c:56:d6:ae:4c:6e:4c:
9a:85:24:e2:32:2d:ce:3e:17:af:16:88:f4:7b:ef:
f9:68:af:42:51:51:04:85:b1:65:37:ed:5b:09:d0:
c8:8f:99:f4:1b:13:e6:51:27:4e:ac:38:fb:73:19:
19:37:15:00:7d:17:55:1d:4e:0a:06:5d:27:bc:20:
68:43:af:c4:e1:4f:20:76:89:ce:91:85:17:e5:28:
18:a1:cb:dc:e4:62:26:41:c3:6f:bb:f6:1e:ff:2d:
6d:a0:7c:9b:b3:fa:79:36:2b:6d:6f:72:1c:91:da:
80:0c:43:6e:2a:a9:af:ea:73:79:5e:8c:44:6a:f5:
bd:c8:f0:dc:87:02:47:2f:46:3d:23:17:ef:30:81:
a0:53:bf:d9:ea:3c:29:46:b4:0e:20:a0:b7:be:79:
6b:18:82:9a:91:be:07:09:3f:98:32:9b:e0:10:95:
d3:b8:6b:89:2a:1e:6d:76:27:29:a0:93:53:8b:97:
90:e2:2a:8c:2d:30:20:6b:e3:e0:aa:b6:25:81:91:
04:7d:36:81:9e:5d:bf:6e:55:be:7c:93:45:26:d4:
1d:d6:d8:b8:98:d6:59:59:9e:f6:7a:5b:26:b4:21:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F0:0B:BF:6B:A5:84:03:E1:BA:47:22:36:48:F0:12:60:38:5F:39
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fe:77:9d:88:0a:a1:53:1d:83:d6:a6:dc:83:f0:74:94:b9:
2c:ca:7e:83:59:c1:dc:79:e6:04:db:48:03:cb:b5:fa:b2:3e:
c5:c3:bd:4e:23:77:08:92:79:d7:8e:c3:b0:2f:48:71:3b:37:
42:f3:91:9b:1c:eb:28:a1:88:7a:c7:52:c3:98:39:d7:de:c6:
3c:df:51:89:6e:97:a8:7f:67:e6:d3:02:99:2a:a0:90:96:53:
f8:19:6e:51:c9:3c:f7:ec:d0:5d:82:bb:82:53:38:3c:a5:7e:
41:81:23:d3:ca:c5:2b:38:43:dc:22:d2:92:ad:49:a7:56:49:
86:83:6a:1f:bb:94:a9:1e:0f:4e:dc:b2:59:48:d9:f6:d0:a5:
ec:f8:8b:f9:a0:e2:f0:a8:db:5b:d0:bc:b3:8a:c1:a4:d7:5d:
3f:7f:3f:92:ef:d9:6a:ae:64:1a:10:bb:0f:c4:f1:f1:9e:7b:
ed:93:34:9a:60:6a:ce:e2:93:58:33:51:5c:4e:09:ba:21:db:
6c:88:4b:25:4f:48:96:16:13:50:1c:48:97:c5:a8:a7:44:8e:
ed:f0:59:49:20:86:a5:74:39:3d:3d:8b:a5:78:23:aa:75:3a:
fe:73:3a:67:f7:57:03:60:af:2f:d4:a6:a0:2d:fd:7d:7d:27:
e5:29:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:48:52 2026 by rpki-client