Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20313533353638.roa
File: 3138382e3230392e3132382e302f32342d3234203d3e20313533353638.roa (raw, json)
Hash identifier: JgCcCAQ8uOBnoEyu0E0I1vcG+eWu1g3ahW/lx2/GPCk=
Subject key identifier: CD:D3:9C:7D:54:6B:99:00:EF:96:FE:80:EA:78:98:A9:1F:2B:41:5F
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 5DF4E0C0C149213B2AE042381A99A7733E8467F1
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20313533353638.roa
Signing time: Sat 08 Aug 2026 02:45:40 +0000
ROA not before: Sat 08 Aug 2026 02:40:40 +0000
ROA not after: Sat 07 Aug 2027 02:45:40 +0000
asID: 153568
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f4:e0:c0:c1:49:21:3b:2a:e0:42:38:1a:99:a7:73:3e:84:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Aug 8 02:40:40 2026 GMT
Not After : Aug 7 02:45:40 2027 GMT
Subject: CN=CDD39C7D546B9900EF96FE80EA7898A91F2B415F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:a5:04:b7:2d:9b:53:af:29:b7:31:7f:f8:
79:39:bc:c8:e7:33:28:6f:58:29:29:95:1b:1e:8a:
00:cc:be:10:6a:ec:62:67:58:33:d9:d6:25:eb:f4:
9c:78:88:2b:37:ad:20:1f:dd:ec:c0:97:90:d0:ab:
47:08:c6:df:75:62:95:d1:bd:14:ad:21:a0:6d:35:
a6:68:58:92:0c:f4:f4:16:ea:1a:81:92:5f:00:94:
ef:82:96:7c:cb:5d:69:15:af:2f:88:cb:53:33:3f:
86:71:34:70:28:80:35:2c:fc:6d:24:50:cb:39:10:
96:64:16:02:00:92:0b:7f:f3:04:36:52:ed:a3:bd:
13:79:98:56:22:0e:a9:fe:39:a1:a7:f2:64:1a:d9:
45:1b:49:05:e5:36:cc:ab:34:e6:d5:ee:ef:26:20:
52:c0:98:54:36:b7:f3:91:ac:e0:65:7e:cd:ae:2d:
bb:91:5b:df:c5:66:be:42:93:12:a2:60:51:18:f0:
eb:0d:7e:8a:79:2a:a3:84:62:6c:ec:c5:60:22:37:
46:fd:4f:f7:f2:89:e5:ec:31:d5:23:67:fa:d9:2a:
55:7e:5b:b3:14:71:37:29:26:f7:ce:bf:56:b6:fc:
64:dc:ec:59:11:77:b2:ab:35:0c:d1:c5:18:51:92:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:9C:7D:54:6B:99:00:EF:96:FE:80:EA:78:98:A9:1F:2B:41:5F
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20313533353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2b:39:2c:2f:f0:26:f5:f2:97:c6:3b:00:24:bc:0b:1e:81:
07:00:15:ba:76:f7:4a:4b:ff:d7:af:5b:ed:9f:78:ba:91:53:
3a:43:e4:f3:89:dd:7d:e4:9b:2b:6a:69:d4:1c:30:e2:44:7d:
41:ea:f7:e8:67:0a:5d:06:55:fd:bf:ad:cd:c3:e5:00:b7:43:
19:a1:cc:48:e8:ac:9e:0f:04:64:23:98:e0:ba:95:8d:88:b6:
3c:54:7b:ca:8d:40:41:c9:17:07:fc:57:61:09:b0:15:37:23:
cc:7c:4e:be:ca:b4:91:4d:ae:cc:15:2b:02:9a:44:b9:82:ee:
24:1d:2e:fe:58:7f:ad:61:cb:dc:f7:9b:9a:9a:e5:a7:c0:4d:
2e:4b:95:d3:ab:3f:c2:16:39:b8:d0:15:88:5a:07:a7:66:3e:
53:21:eb:98:14:11:f1:7a:01:69:a5:b6:d7:2d:3e:f5:02:5f:
a0:93:ab:ed:6b:b6:95:b1:35:cb:ac:0a:61:13:d3:08:c2:e7:
d4:b5:25:91:bc:c4:57:ad:a4:41:e4:c2:b4:fc:06:51:eb:d0:
96:6e:d1:fb:89:3b:2f:36:1a:e7:7e:5c:5c:62:41:c9:09:bf:
12:19:c2:e9:42:ff:41:1a:50:23:f7:3d:ff:5b:ec:91:ff:f7:
11:a8:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 19:31:41 2026 by rpki-client