Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20323134343833.roa
File: 3137382e3230382e3138332e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 6640dpI/m9UBkcPijJ+qxvfyfUk1YECH+EymxxxYJ38=
Subject key identifier: EE:14:64:0C:DD:A2:15:64:F7:62:8A:57:A3:76:FB:79:8F:92:6F:E2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 2B4FBBF8638A5A41EEDD78CA63354341862BD487
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20323134343833.roa
Signing time: Sat 29 Aug 2026 17:04:30 +0000
ROA not before: Sat 29 Aug 2026 16:59:30 +0000
ROA not after: Sat 28 Aug 2027 17:04:30 +0000
asID: 214483
IP address blocks: 178.208.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4f:bb:f8:63:8a:5a:41:ee:dd:78:ca:63:35:43:41:86:2b:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 29 16:59:30 2026 GMT
Not After : Aug 28 17:04:30 2027 GMT
Subject: CN=EE14640CDDA21564F7628A57A376FB798F926FE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:10:73:a0:c8:a5:2f:c0:05:f4:49:37:08:
19:91:47:8d:b1:fd:e5:4a:af:fc:c1:65:89:ef:80:
4b:42:d6:10:30:57:15:46:2e:5e:9c:2b:6f:61:4e:
33:0b:f6:7a:0a:8b:92:48:32:b5:f8:18:9f:4d:42:
8c:c4:d0:d3:3c:d7:e2:52:0b:f0:25:bc:68:1e:f3:
9a:21:54:07:61:62:70:5b:a1:7a:1d:77:8d:37:6d:
c1:3f:56:51:00:28:a7:19:bd:3e:f7:b2:13:69:6c:
a4:03:cf:ea:b9:ea:a9:88:d0:a5:ae:e0:19:4f:e8:
0b:f6:b6:0b:c4:18:35:4c:6c:01:6e:f3:33:dc:4b:
7b:7f:c2:c5:bb:1c:3f:50:7c:3d:6c:d0:f0:da:70:
17:53:63:dd:95:3f:97:7b:f1:40:28:3b:49:cd:ed:
7a:ce:6d:b0:db:83:10:4c:d0:9c:41:b5:af:0f:bc:
c1:d6:42:c1:33:b2:75:86:ac:05:15:e3:0c:9d:87:
f6:fb:be:97:74:6f:b4:b7:e9:d8:90:6b:ed:e4:ad:
58:51:4f:b4:b8:39:8e:d5:1b:d7:1d:83:ac:04:05:
66:de:03:b4:16:56:72:a4:bc:99:b6:f8:9c:ee:87:
be:ac:c6:56:57:bb:3d:79:c5:f2:e4:ac:b4:2e:19:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:64:0C:DD:A2:15:64:F7:62:8A:57:A3:76:FB:79:8F:92:6F:E2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.183.0/24
Signature Algorithm: sha256WithRSAEncryption
62:fa:ea:c7:72:92:2a:f9:98:34:50:6e:64:36:3b:ca:96:6e:
c4:15:e4:cc:52:92:e9:ad:76:c8:66:97:34:98:14:71:72:91:
5f:89:be:ae:4a:af:9d:33:6c:5c:dc:fd:53:34:bb:e3:7e:88:
ee:28:b9:aa:3a:f7:6a:91:f3:ca:e5:49:0c:50:b5:36:8f:b5:
56:f4:7a:19:36:a6:78:43:54:33:50:c4:1f:95:d4:37:22:2a:
37:00:5e:20:87:5b:ae:da:0b:06:b1:db:74:1d:22:2f:66:e1:
cd:5d:b7:36:6b:60:fc:1b:d3:aa:a1:3c:c5:53:84:90:5d:a2:
70:04:8f:78:1a:03:44:c4:21:ca:18:3a:fe:35:df:2b:d0:25:
ad:3d:aa:5f:c1:7c:e3:43:3f:72:76:3e:24:93:e8:92:2b:6a:
a7:0f:7a:fa:86:7c:49:f4:fe:23:06:bd:4f:da:90:49:be:09:
4e:d0:b8:b9:f9:9c:6a:c7:14:ce:84:5f:8b:ea:08:0c:bd:46:
2a:e7:7b:22:d8:fb:f9:89:ea:71:ff:53:30:88:5b:33:17:5f:
57:42:8d:1e:0e:00:3e:06:c8:01:0f:b2:08:be:6b:2f:cb:11:
31:89:0b:bd:c2:2a:f3:dd:e7:2b:cd:fa:cd:59:12:a0:e1:96:
00:d8:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:35 2026 by rpki-client