Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20313533383130.roa
File: 3138382e3230392e3132382e302f32342d3234203d3e20313533383130.roa (raw, json)
Hash identifier: sATKBM6FPHNjVHZ7QkvErNRl+v2Z49ik5It6KVqX3Hc=
Subject key identifier: 19:6C:BE:41:3C:FD:3D:F9:3B:AB:D2:1B:CD:39:D3:93:AB:CD:08:82
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 3D7258B2274B4E4196AFD4C4F49BA5D02030B02F
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20313533383130.roa
Signing time: Sat 08 Aug 2026 02:45:40 +0000
ROA not before: Sat 08 Aug 2026 02:40:40 +0000
ROA not after: Sat 07 Aug 2027 02:45:40 +0000
asID: 153810
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:72:58:b2:27:4b:4e:41:96:af:d4:c4:f4:9b:a5:d0:20:30:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Aug 8 02:40:40 2026 GMT
Not After : Aug 7 02:45:40 2027 GMT
Subject: CN=196CBE413CFD3DF93BABD21BCD39D393ABCD0882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:06:64:fc:82:df:cf:e0:31:48:dc:72:9e:56:
36:1c:89:b9:3a:b5:df:0a:39:f8:a7:93:40:4d:99:
e9:53:dc:2a:47:16:17:95:9b:e3:f2:39:de:2f:7f:
2f:f8:89:2d:39:68:de:ab:76:7b:1c:e7:58:b9:79:
14:1a:f7:65:10:aa:86:75:a8:4b:11:ab:80:1a:73:
0f:e2:95:c3:fc:89:58:31:14:d7:05:80:5b:35:b1:
56:58:8a:df:3e:bd:dd:1c:01:bc:91:61:97:f9:e1:
3e:c1:b2:53:27:db:dd:1b:1b:c4:b6:eb:93:9e:13:
ab:d6:26:64:90:2b:04:26:f9:94:49:22:c1:74:45:
0b:cc:80:b3:22:9e:83:c0:cc:a4:6c:37:6d:f7:fe:
eb:9c:77:75:e8:ec:e4:5f:a4:79:63:ab:dc:42:9e:
b1:ca:74:9a:7a:fe:e5:3b:d9:69:6d:9e:c0:c4:5c:
5b:2b:ac:7f:09:77:51:3e:50:e5:65:71:66:ad:6a:
10:3e:d2:20:47:89:66:3a:e5:75:5b:97:dd:9c:0a:
24:d7:5f:86:9a:38:00:05:ad:cd:84:02:62:c5:26:
43:e1:c8:7a:6b:77:a9:b1:03:88:72:02:b8:10:1a:
f8:70:0c:60:57:07:ef:b9:f3:15:ef:5f:7d:f0:05:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6C:BE:41:3C:FD:3D:F9:3B:AB:D2:1B:CD:39:D3:93:AB:CD:08:82
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20313533383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f5:33:5f:3d:41:d3:0b:cb:28:15:69:94:b0:a7:b8:44:51:
7b:6e:9e:35:ff:1e:60:a8:e4:92:6e:9c:0d:b4:4d:91:a6:45:
98:8b:4c:5e:e4:22:fa:51:72:f3:83:a3:03:87:78:d9:08:a1:
57:c3:d9:4a:fe:8b:dc:56:d5:6a:df:2d:30:75:6d:fe:e6:04:
f6:d5:55:2d:a2:09:30:10:ef:13:b6:aa:c8:00:5f:36:f5:7d:
5e:9d:f9:d9:36:3c:54:ef:7d:9e:51:cc:10:8b:b9:8d:b5:d0:
31:db:4f:0b:ca:0b:76:18:b4:4e:aa:9f:5f:18:ab:ed:97:58:
2a:d5:f6:ec:83:c8:b1:a6:62:07:de:12:bc:e0:83:aa:5e:30:
56:02:a9:d9:64:89:ad:17:04:4f:e4:3d:7b:50:6a:7d:c2:8e:
96:97:3e:c6:c4:32:e0:39:cd:e5:1c:a8:57:db:62:27:67:84:
5b:d0:9d:05:32:cf:ef:0d:4c:dd:01:43:6e:34:d8:a6:9e:fe:
22:11:06:8f:79:13:31:fe:6c:45:1e:02:09:60:03:c0:6a:dd:
21:c5:24:73:57:11:68:be:ac:3e:ec:15:51:d9:c3:3f:57:44:
98:0c:0e:16:73:b8:23:ab:ef:18:5a:29:96:fd:46:6d:74:0c:
88:24:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 19:31:38 2026 by rpki-client