Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20343031333632.roa
File: 3138382e3230392e3132382e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: 4j52WflTyM4gCvTwrRyYC+cisxREYUqsFuS3EuPUzqI=
Subject key identifier: 19:D9:74:93:09:CE:71:A1:09:91:D2:15:61:E1:CD:A7:2C:DB:97:68
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 64EB326977BA5CA1E3BA4F7226DF1CA123284B4D
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20343031333632.roa
Signing time: Thu 06 Aug 2026 15:09:35 +0000
ROA not before: Thu 06 Aug 2026 15:04:35 +0000
ROA not after: Thu 05 Aug 2027 15:09:35 +0000
asID: 401362
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:eb:32:69:77:ba:5c:a1:e3:ba:4f:72:26:df:1c:a1:23:28:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Aug 6 15:04:35 2026 GMT
Not After : Aug 5 15:09:35 2027 GMT
Subject: CN=19D9749309CE71A10991D21561E1CDA72CDB9768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:52:84:8e:44:2e:fd:fe:65:00:b7:e4:e4:
e7:3f:04:fd:0f:c6:9a:32:90:d6:63:87:60:30:6a:
b6:68:de:6f:74:eb:03:21:ae:c3:ea:6e:68:b7:00:
4a:08:9b:aa:b4:0c:51:4e:fb:00:33:25:7e:97:d8:
24:85:44:30:b3:94:80:8d:b2:8f:05:b5:4d:96:93:
6e:82:04:ed:bd:70:9f:fb:62:d9:aa:02:92:48:bd:
a3:f1:ed:14:2b:fc:09:e9:ee:2c:6c:25:03:ed:13:
e8:1d:43:29:7e:f9:3f:83:79:20:f5:e4:47:92:35:
ab:d9:d8:95:50:b3:c5:11:aa:69:2b:31:ea:2b:0d:
87:e1:d5:8d:27:b8:06:a7:d6:ee:3a:af:5c:14:7d:
1f:72:f8:29:aa:0c:bc:a5:8f:2f:78:7c:69:98:1f:
b5:03:d4:3b:a4:57:45:b5:3d:ec:a4:89:46:b6:8a:
4d:11:b1:25:e8:74:74:5f:e0:64:ff:b6:fc:ea:dd:
53:e0:91:3c:af:71:2e:af:c6:e8:8a:c8:81:12:70:
63:91:d1:28:68:2b:f8:a0:5f:32:a3:54:60:2a:e4:
04:ba:5c:84:3a:ad:77:fb:5a:fe:33:85:a4:64:fd:
4a:9d:d1:66:47:3f:90:4b:d0:00:03:2b:7c:e1:92:
13:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:74:93:09:CE:71:A1:09:91:D2:15:61:E1:CD:A7:2C:DB:97:68
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:16:39:32:60:4c:b1:42:dd:92:a8:45:88:4e:56:0b:fb:7c:
5c:d9:c5:8d:88:f5:e1:31:13:92:e1:ff:58:1a:4e:d7:22:f8:
f6:21:5a:98:ea:8f:2e:56:80:ad:33:f2:33:cc:ad:d8:db:b6:
b9:30:8d:ce:64:4d:8e:98:57:66:78:60:ec:46:0d:75:07:49:
1b:36:06:94:fd:1a:8f:7c:7c:7f:ce:99:18:b1:3e:b2:92:d0:
96:76:01:dd:68:98:6d:48:6d:2c:83:f4:49:49:95:0a:bb:03:
ee:04:66:5f:04:e0:28:5c:54:fc:9c:c5:85:03:c9:b7:5b:5a:
17:1e:5f:bf:5b:c1:7b:b5:ac:64:04:ba:57:5c:e1:dd:5c:9c:
64:3a:87:8b:37:f5:84:69:bf:e7:9f:e1:33:f6:7f:57:10:52:
76:da:c2:56:ec:15:67:ab:99:e8:af:9d:a3:19:dd:50:02:f3:
42:8f:27:f3:b7:90:ae:dc:d5:ef:27:1a:48:2f:65:27:6e:06:
1d:f0:15:a9:c7:db:86:9b:4e:e6:fe:54:62:9b:ac:5f:ab:f1:
7b:d5:d3:7d:ed:a2:aa:b1:76:dc:af:2f:d1:4f:40:e4:1d:df:
4e:37:92:46:b5:30:a8:95:98:82:40:00:4f:fb:31:f9:ec:0c:
ee:dd:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 19:31:38 2026 by rpki-client