Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JU8wuqiw1vQqHjhiErz+TuXqKOfyDTd1xkbl6XrTEjc=
Subject key identifier: 3E:EF:1D:8E:62:9B:90:6B:45:7C:47:69:78:76:CC:89:BC:F6:20:F3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3AFCA60EB62BE8F9CF58097E2ADBA96521805D7F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
Signing time: Sat 29 Aug 2026 17:07:18 +0000
ROA not before: Sat 29 Aug 2026 17:02:18 +0000
ROA not after: Sat 28 Aug 2027 17:07:18 +0000
asID: 834
IP address blocks: 178.208.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:fc:a6:0e:b6:2b:e8:f9:cf:58:09:7e:2a:db:a9:65:21:80:5d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 29 17:02:18 2026 GMT
Not After : Aug 28 17:07:18 2027 GMT
Subject: CN=3EEF1D8E629B906B457C47697876CC89BCF620F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2a:78:df:ad:ed:14:92:a2:bf:a9:92:20:88:
be:59:5d:09:89:35:85:28:2a:92:a8:b4:5b:10:ba:
fc:3f:11:75:a6:a4:a7:2a:3a:40:75:a1:4e:c5:8e:
ed:c6:36:29:43:ee:1a:b2:b1:b4:b8:90:59:97:88:
74:25:39:18:a4:1c:38:a5:b8:58:9a:13:b3:5f:a2:
54:33:fc:50:47:f6:b0:a9:53:4e:e8:af:74:2c:0a:
37:d5:65:5c:f6:94:57:d8:79:32:88:53:23:e9:0b:
2e:32:f6:57:45:7b:cb:48:ad:37:10:9e:fb:42:c6:
fb:1d:f5:af:02:f1:01:9b:2a:72:c8:4a:bc:4c:ab:
32:e2:52:d0:34:3e:b0:ac:6c:d9:e1:99:d3:1c:4c:
33:65:b2:d1:e6:3f:74:34:73:90:6d:c8:8f:79:01:
99:72:58:f8:01:8d:c1:fd:cf:6d:82:86:4f:72:b6:
66:7a:a1:50:19:1d:c0:8c:85:1a:df:32:61:4b:9b:
b3:7c:62:5f:5c:be:e9:01:b4:6f:ee:17:08:a6:52:
0d:3b:0e:23:40:0b:0c:39:06:ea:55:0f:c1:77:18:
87:9e:c9:82:fb:53:3c:b9:4c:1a:11:a4:dd:4f:76:
aa:0a:79:a8:5d:11:4e:99:9f:25:20:20:a6:66:0f:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:1D:8E:62:9B:90:6B:45:7C:47:69:78:76:CC:89:BC:F6:20:F3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7f:87:9e:b7:df:dc:16:5a:24:2b:66:32:61:3e:d9:6e:4a:
2d:36:89:c5:a9:a4:04:f7:51:35:15:65:e0:c9:42:a0:1c:f5:
21:31:d4:63:74:d4:76:33:38:49:fb:e7:26:e3:29:94:ec:5b:
ef:61:32:ec:4a:05:d0:cd:ac:b3:aa:ef:0d:ab:b3:9e:f5:4b:
24:d0:80:3f:10:a9:bd:46:9c:82:3c:14:9a:d5:16:aa:fa:6d:
bf:f2:27:5f:40:d8:8f:c6:ca:e6:8e:25:b0:e8:92:3f:84:04:
f8:41:0c:6f:f5:42:e4:21:a4:b3:c0:00:f6:e6:5c:07:7f:89:
4c:dd:78:55:08:58:e8:70:0a:5b:92:ad:7a:5f:91:4b:3d:a0:
ec:2a:b4:18:40:8d:f9:7a:2b:49:32:cd:8b:b6:86:35:7e:02:
01:97:20:0f:fb:9c:f1:e4:a9:d3:0d:8f:a6:4c:a6:40:29:2a:
31:8f:aa:9a:b5:02:94:1d:7f:5f:2b:d1:cd:70:a9:68:d7:47:
bc:cf:03:de:d6:24:b8:95:b4:12:66:1a:42:07:10:b9:00:c1:
da:73:78:2c:5b:13:82:48:e8:ef:5a:b8:2d:14:35:66:8f:5e:
82:dd:bc:cf:6a:81:af:aa:2f:fb:25:3b:ae:2c:ce:00:5e:7a:
05:0a:ca:e0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOvymDrYr6PnPWAl+KtupZSGAXX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA4MjkxNzAyMThaFw0yNzA4MjgxNzA3MThaMDMxMTAvBgNV
BAMTKDNFRUYxRDhFNjI5QjkwNkI0NTdDNDc2OTc4NzZDQzg5QkNGNjIwRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNKnjfre0UkqK/qZIgiL5ZXQmJ
NYUoKpKotFsQuvw/EXWmpKcqOkB1oU7Fju3GNilD7hqysbS4kFmXiHQlORikHDil
uFiaE7NfolQz/FBH9rCpU07or3QsCjfVZVz2lFfYeTKIUyPpCy4y9ldFe8tIrTcQ
nvtCxvsd9a8C8QGbKnLISrxMqzLiUtA0PrCsbNnhmdMcTDNlstHmP3Q0c5BtyI95
AZlyWPgBjcH9z22Chk9ytmZ6oVAZHcCMhRrfMmFLm7N8Yl9cvukBtG/uFwimUg07
DiNACww5BupVD8F3GIeeyYL7Uzy5TBoRpN1PdqoKeahdEU6ZnyUgIKZmD6HbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUPu8djmKbkGtFfEdpeHbMibz2IPMwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLQ
tjANBgkqhkiG9w0BAQsFAAOCAQEAfH+Hnrff3BZaJCtmMmE+2W5KLTaJxamkBPdR
NRVl4MlCoBz1ITHUY3TUdjM4SfvnJuMplOxb72Ey7EoF0M2ss6rvDauznvVLJNCA
PxCpvUacgjwUmtUWqvptv/InX0DYj8bK5o4lsOiSP4QE+EEMb/VC5CGks8AA9uZc
B3+JTN14VQhY6HAKW5Ktel+RSz2g7Cq0GECN+XorSTLNi7aGNX4CAZcgD/uc8eSp
0w2PpkymQCkqMY+qmrUClB1/XyvRzXCpaNdHvM8D3tYkuJW0EmYaQgcQuQDB2nN4
LFsTgkjo71q4LRQ1Zo9egt28z2qBr6ov+yU7rizOAF56BQrK4A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:08 2026 by rpki-client