Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e203630353432.roa
File: 3137382e3234382e37342e302f32342d3234203d3e203630353432.roa (raw, json)
Hash identifier: Xr5u/5dDUrYBdAYp0AhqinBp+MATOEXztLhHhfZwhws=
Subject key identifier: E0:AE:1E:3D:22:FE:B6:41:8C:BA:40:F4:E3:E5:AB:27:23:B0:EB:70
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 6FB6CD392D9D2FEF65B233A4E59409B4ACA2AFC5
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e203630353432.roa
Signing time: Mon 07 Sep 2026 02:59:38 +0000
ROA not before: Mon 07 Sep 2026 02:54:38 +0000
ROA not after: Mon 06 Sep 2027 02:59:38 +0000
asID: 60542
IP address blocks: 178.248.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b6:cd:39:2d:9d:2f:ef:65:b2:33:a4:e5:94:09:b4:ac:a2:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Sep 7 02:54:38 2026 GMT
Not After : Sep 6 02:59:38 2027 GMT
Subject: CN=E0AE1E3D22FEB6418CBA40F4E3E5AB2723B0EB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:2e:9b:80:e9:84:dc:10:a2:ab:ce:c9:74:
35:9d:69:4b:f4:b9:40:3e:81:e0:71:86:24:9e:96:
a4:33:62:a4:8d:35:52:f8:32:13:bf:ec:1b:b4:d9:
8c:59:7b:5e:49:99:b1:06:bf:a9:bd:6b:61:ea:c4:
c8:74:68:7d:45:a0:9f:1d:43:e6:a0:4d:62:d8:3f:
b4:77:e8:76:24:9c:b4:42:38:c1:85:39:9a:44:a3:
db:90:1d:63:9d:23:65:57:b1:a0:b5:ab:cc:1b:5a:
d8:df:dc:cf:03:1d:7a:5e:a1:5f:38:ec:e2:85:be:
45:a9:1a:ac:5b:a0:cf:cb:5c:32:d9:a8:00:f4:f4:
7e:1a:1a:97:62:a6:a9:27:67:9d:36:02:8c:64:5f:
12:20:c8:27:de:5b:1e:38:99:23:d8:0e:e8:0a:c7:
a5:bf:45:4f:46:d0:c8:9e:a3:b1:4b:b5:29:fc:a2:
7e:cb:1c:d0:8f:92:eb:8a:e5:d0:38:1d:94:e8:5d:
f5:b0:a2:22:92:60:9a:e7:dd:8c:9d:c9:97:a2:94:
55:77:73:ce:5c:17:67:49:fb:b4:a7:ff:fb:35:31:
8e:7f:2f:a0:a8:a8:41:de:db:c0:e1:a2:30:5f:00:
e6:7f:ae:e3:21:46:33:5b:67:50:39:32:38:65:a9:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AE:1E:3D:22:FE:B6:41:8C:BA:40:F4:E3:E5:AB:27:23:B0:EB:70
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37342e302f32342d3234203d3e203630353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ab:f8:33:f7:52:78:9b:cd:f6:4e:b5:41:2b:f9:b6:f4:82:
32:6b:60:2d:30:ca:71:07:54:06:0a:c5:72:31:b8:39:f4:d0:
b0:67:1c:a0:22:95:8a:a9:77:a6:2b:af:b6:96:b8:8d:e5:33:
ec:f5:8d:61:8c:97:34:48:07:6d:8e:95:b8:6b:06:8a:25:7b:
83:db:c2:cb:d1:4e:52:8a:0e:8f:73:cc:94:3f:17:3a:31:2f:
e0:32:65:ea:d4:1c:08:d4:03:21:ef:04:87:06:ef:65:10:d2:
16:89:6d:63:7e:51:df:f8:b2:7c:0b:97:2a:83:9f:be:8f:99:
25:0c:f1:7c:db:9a:f7:bd:f5:85:91:c2:b4:b1:b7:52:23:98:
72:76:2a:a8:1c:dc:60:57:d7:42:21:07:0f:a2:4b:8a:c8:83:
f4:51:96:67:de:d8:08:74:dd:2a:09:df:3a:d6:33:fd:a5:81:
da:13:56:7f:b5:8d:a7:59:39:80:88:1c:f2:e7:75:b5:93:b9:
4c:9b:73:4b:54:83:22:bb:19:48:d1:9d:3b:6c:16:23:40:51:
3a:75:cc:69:c9:d7:19:0f:74:78:aa:78:7e:47:8b:9a:68:59:
3d:b3:85:53:84:df:d7:da:ee:d5:ba:ca:12:c0:3d:c9:2f:3b:
4c:7f:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:31:17 2026 by rpki-client