Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32342d3234203d3e20323138383837.roa
File: 3137382e3230382e3139302e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier: PvRe68gvDXmg0KqNGm0D6K8Y94R15kpu6z77PxR+1PE=
Subject key identifier: 68:51:26:B7:CC:21:E9:83:55:83:1C:E8:4C:2F:E9:B5:EE:34:42:FF
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0B5763C68B8AFB254DF6E1298448C81647388BC9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32342d3234203d3e20323138383837.roa
Signing time: Mon 07 Sep 2026 09:32:52 +0000
ROA not before: Mon 07 Sep 2026 09:27:52 +0000
ROA not after: Mon 06 Sep 2027 09:32:52 +0000
asID: 218887
IP address blocks: 178.208.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:57:63:c6:8b:8a:fb:25:4d:f6:e1:29:84:48:c8:16:47:38:8b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 7 09:27:52 2026 GMT
Not After : Sep 6 09:32:52 2027 GMT
Subject: CN=685126B7CC21E98355831CE84C2FE9B5EE3442FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:f5:7d:fb:72:95:4c:ec:30:51:90:d1:54:
9a:66:dd:ff:70:20:02:92:ca:b4:9f:c6:f0:4b:0f:
65:be:6d:45:b0:99:c1:d5:0a:cd:4b:16:f4:b2:32:
f8:af:a6:fc:de:c5:9e:11:f6:6d:e1:76:94:d8:cb:
27:f0:14:d3:ad:63:e1:76:08:03:39:63:2c:8f:be:
4d:c9:57:2f:ce:16:b0:cc:ee:6c:84:7c:e6:12:d9:
e7:7e:98:99:d8:7d:ed:0c:02:29:21:8c:54:2a:bb:
76:60:a0:c7:bb:15:88:f8:97:8a:ba:2b:e4:a4:98:
c3:3f:6c:d8:1e:33:10:4d:e6:83:ec:ce:a6:e8:de:
42:f7:c7:7a:1e:eb:a8:8e:e0:47:2a:49:cc:81:62:
08:a9:a4:78:9e:2c:a7:c3:26:46:eb:36:0b:d0:1d:
91:54:6b:85:3f:2b:25:5e:db:ab:e7:0d:7e:ce:33:
d4:f3:3a:5c:4a:97:67:a0:31:8f:4e:1c:02:0f:10:
71:1b:9e:cc:8c:16:47:4b:bc:d7:b6:3d:60:f1:70:
64:b1:39:9f:b1:1a:f2:96:03:50:55:93:23:f1:82:
ad:e1:77:bc:ba:29:25:5d:a7:d3:e9:3d:e0:17:0c:
58:94:04:4c:94:ba:25:94:47:42:1f:54:a2:a0:1a:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:26:B7:CC:21:E9:83:55:83:1C:E8:4C:2F:E9:B5:EE:34:42:FF
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139302e302f32342d3234203d3e20323138383837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6e:e0:e3:50:3a:17:60:62:22:8c:9e:a2:b9:e6:f0:9c:3f:
3d:51:3b:7a:30:2a:64:6d:79:d6:11:ac:94:3c:32:41:05:aa:
cc:a5:b6:b7:90:fa:1e:40:6c:be:31:e9:da:62:76:cd:22:8f:
e2:2d:8e:c9:e3:2e:40:7c:18:e5:e2:a8:db:6f:22:83:94:04:
08:09:16:8a:aa:d6:d3:f9:56:aa:b7:18:bd:5c:b8:2c:0c:8f:
e6:e5:ec:e0:95:5e:2f:67:ab:82:52:35:c2:80:b8:83:7d:86:
d5:c2:a7:72:89:0d:e0:26:71:20:9c:e8:29:3c:fc:5a:cb:c9:
9e:2b:73:9e:62:4d:7d:2d:42:17:ac:1e:a2:8a:10:09:2f:0b:
05:2a:cc:72:d6:e5:de:f8:4c:e0:b8:92:37:63:fa:22:55:b1:
42:c1:ce:14:93:65:4c:a1:05:c8:22:a1:7a:19:30:83:37:73:
c6:e1:a4:1f:6e:88:06:c0:ca:e5:ef:ff:55:6c:50:a2:e3:ed:
71:ae:13:fb:3f:61:35:d4:d1:8f:77:97:16:38:93:33:64:6b:
51:e5:47:e5:03:64:bd:5c:fc:8f:d6:20:24:f0:1d:f0:2a:f7:
98:af:42:b1:d4:df:e8:49:01:11:2f:ce:e3:3f:ff:50:e0:53:
75:98:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:33:16 2026 by rpki-client