Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32332d3234203d3e20383334.roa
File: 3137382e3230382e3139302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: O/HgA3Vl+iTuOoGEHSyje1mKpMdP5KX3rFT7WY9V1/s=
Subject key identifier: EC:E2:B6:BF:3E:CA:85:95:2C:0F:F7:1B:AD:C6:59:17:04:B0:BA:59
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 325DE42A3CE1F8BCC157C9B5D58C4318631D9365
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32332d3234203d3e20383334.roa
Signing time: Thu 03 Sep 2026 00:05:06 +0000
ROA not before: Thu 03 Sep 2026 00:00:06 +0000
ROA not after: Thu 02 Sep 2027 00:05:06 +0000
asID: 834
IP address blocks: 178.208.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5d:e4:2a:3c:e1:f8:bc:c1:57:c9:b5:d5:8c:43:18:63:1d:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 3 00:00:06 2026 GMT
Not After : Sep 2 00:05:06 2027 GMT
Subject: CN=ECE2B6BF3ECA85952C0FF71BADC6591704B0BA59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:e1:e7:33:71:73:ae:3b:df:21:c2:dd:f6:
5c:15:82:d8:12:0b:e2:42:fb:b9:3c:4e:4e:3f:a8:
f5:6a:1d:29:fc:3a:bd:e2:60:02:bd:7b:89:93:da:
7a:44:12:92:af:d9:25:de:27:78:0d:81:45:9b:3d:
5f:52:e6:52:6c:6c:83:4a:63:9b:8e:d5:01:8a:81:
99:5b:ff:cb:a6:5e:27:d0:c2:c3:bf:99:0e:10:c8:
4f:ab:3c:38:e0:5d:bc:53:b1:a3:5b:73:85:8f:87:
e6:93:1b:76:d0:eb:fb:70:d1:5e:bd:19:e7:da:da:
3b:32:9f:c3:e0:d3:b3:c8:24:82:87:d4:23:8f:e8:
b4:ba:f7:dc:f0:ca:f1:d8:72:ae:3e:db:24:e0:69:
54:0d:a3:0e:7c:53:6e:a1:71:29:66:03:d0:2d:c0:
2a:c1:b2:02:08:d6:fd:c3:25:8a:e7:65:7b:f4:42:
18:17:c1:a1:dd:cb:0e:c0:e8:07:20:eb:c5:80:6c:
fb:23:37:e6:fc:65:09:dc:a4:bb:ec:ba:49:70:cc:
c3:6f:19:b5:72:69:aa:17:d9:a8:91:c8:60:8a:1d:
28:1c:3e:13:9b:0e:7d:06:50:b1:f6:20:f2:55:c1:
bc:c2:15:1b:31:cf:49:64:6b:0d:de:62:2b:40:db:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:B6:BF:3E:CA:85:95:2C:0F:F7:1B:AD:C6:59:17:04:B0:BA:59
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.190.0/23
Signature Algorithm: sha256WithRSAEncryption
70:c0:05:b2:bf:e1:51:71:79:fc:99:a1:8f:28:81:62:c3:4a:
f8:c2:cd:f7:03:45:84:f5:76:9d:85:66:24:d7:ce:c6:34:7b:
34:e6:1b:02:52:25:58:af:64:50:e2:72:d8:07:a8:1f:6c:c1:
f5:29:e9:27:cc:92:79:65:7c:c0:3a:e3:90:3d:60:c8:5b:96:
ee:0a:b0:70:c2:66:6c:9a:7c:48:a7:76:1b:96:b1:ff:2c:11:
9d:6d:05:a4:07:97:f9:a0:20:8b:f8:26:34:12:d8:27:69:80:
36:97:d3:ec:5e:fd:1f:6c:b3:23:ee:61:fc:11:e2:58:29:17:
22:e5:ab:3e:0d:b3:ea:d0:7d:0a:74:cb:d8:58:2e:62:e8:37:
ca:0c:d5:d7:d9:fa:42:bc:18:73:95:68:4d:9f:7e:3a:0f:ae:
54:00:39:b9:8a:8f:4c:84:de:a1:73:de:e5:64:81:2b:91:49:
e7:a1:dc:fb:da:d2:58:c6:e9:f6:b9:93:16:22:76:91:79:c3:
71:01:a7:30:c1:38:a6:c2:fa:62:39:f6:0f:9b:33:65:7d:3a:
e0:6a:54:df:02:7e:68:fc:4f:75:77:59:0e:66:fa:9b:f2:46:
04:13:b2:5f:69:fb:f6:c3:19:84:2b:f7:84:27:b2:f9:18:3e:
40:4c:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:31 2026 by rpki-client