Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32332d3234203d3e20383334.roa
File: 3137382e3230382e3139302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: DUxbzrw6hodYUjdzKO9Sj5d4rC1XhF5VAcb3vyyVifs=
Subject key identifier: 94:25:C7:81:3B:A2:65:47:36:9C:28:D1:2B:CF:9C:F8:FC:6E:8E:0B
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7B3A34619856D46C4C9E3911D92B7FCEF0EA26F4
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32332d3234203d3e20383334.roa
Signing time: Wed 07 Oct 2026 06:48:23 +0000
ROA not before: Wed 07 Oct 2026 06:43:23 +0000
ROA not after: Wed 06 Oct 2027 06:48:23 +0000
asID: 834
IP address blocks: 178.208.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3a:34:61:98:56:d4:6c:4c:9e:39:11:d9:2b:7f:ce:f0:ea:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 7 06:43:23 2026 GMT
Not After : Oct 6 06:48:23 2027 GMT
Subject: CN=9425C7813BA26547369C28D12BCF9CF8FC6E8E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:04:20:1e:55:b4:b8:89:69:37:96:a7:49:
a5:6e:42:66:b4:1e:24:1f:38:a5:54:85:f4:8a:5a:
63:6e:0c:71:bc:49:37:f8:a0:f0:5f:54:79:93:1a:
0e:f9:27:97:c0:52:65:81:5b:27:7b:e0:03:e0:0e:
de:e0:47:91:8b:ac:97:d8:6d:4c:cf:04:39:cd:b6:
5d:e6:47:bc:6d:ab:d2:a6:54:7b:21:ba:57:12:92:
b5:ea:d0:7b:b7:6c:85:ab:cf:0f:fd:79:f1:45:a8:
52:04:57:1b:ec:56:67:91:55:2e:6b:5a:6b:13:0d:
3f:28:16:08:c1:4f:4d:45:b8:db:a3:cf:e4:12:96:
86:f5:77:f1:19:63:3d:2d:f8:e8:b8:52:2c:55:68:
29:c3:f7:f1:3d:3e:8a:15:74:c0:82:f5:b8:9b:d0:
15:b3:39:f5:bd:12:b6:9d:9a:2a:11:58:4e:b3:93:
51:1e:b8:8e:54:5d:b3:c6:7c:67:70:82:55:52:60:
c7:45:8a:01:b9:71:df:ce:49:de:d3:fe:c5:dc:bd:
50:b2:f7:d2:19:6e:40:d4:c9:89:c3:36:f4:85:47:
38:ee:9f:47:32:1e:bd:88:33:eb:51:f3:6d:3d:7b:
54:5c:1c:fa:aa:d9:94:25:ff:2b:c0:f3:c5:a8:ec:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:C7:81:3B:A2:65:47:36:9C:28:D1:2B:CF:9C:F8:FC:6E:8E:0B
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.190.0/23
Signature Algorithm: sha256WithRSAEncryption
35:87:24:f2:cf:48:b2:97:93:cf:d2:c2:6f:3a:0e:cd:c3:4f:
00:9b:ab:44:c0:b6:8e:e2:77:83:38:1d:a5:02:a4:7e:79:82:
55:84:ac:ed:c9:e2:f7:49:1f:97:1d:45:69:bf:6e:ce:99:33:
c0:e6:68:89:62:d6:92:75:dd:4b:95:3a:54:a8:53:f6:78:f2:
2b:dd:6e:fb:9a:7c:2c:c1:4c:5a:c6:c8:df:31:1b:4f:37:9e:
4a:8e:c9:50:72:34:4d:50:bc:d7:d1:e0:85:35:fb:83:98:6d:
80:41:3b:ad:de:5b:bd:00:ad:ab:59:0d:4a:2e:11:c4:e9:89:
3d:78:f0:4a:7d:6a:6f:45:c3:f1:f7:4f:bd:b7:7a:6d:5c:93:
f0:a4:60:94:21:0a:7a:2d:d4:0e:5c:e6:65:16:8e:20:ea:f0:
66:6c:17:27:1a:ff:57:93:5d:45:77:b9:bf:30:61:f6:bd:df:
91:c8:48:c7:32:9b:0e:34:0b:1e:83:af:78:7f:65:83:61:af:
4f:ca:4b:f8:65:b6:a6:c0:a8:5b:07:2a:e1:3c:20:6d:6a:ab:
38:f4:46:51:32:82:c7:4e:05:ff:1c:b3:ea:1e:2c:f7:01:f0:
b7:64:4e:d4:e6:d0:e0:f1:b0:c4:e5:1d:61:61:6c:5c:4d:ee:
83:65:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:55:02 2026 by rpki-client