Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20343032323135.roa
File: 3138382e3230392e3132382e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier: IJimoYttDY+GpEwYAyqyyCIC1f+GOWxwiNVgpUcIOkI=
Subject key identifier: 33:0A:5C:8B:19:1D:1A:ED:8B:10:94:29:91:76:F1:EF:AA:EF:03:4D
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 595D1EF193AB5FB11160AEB1DF558384E30A8B45
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20343032323135.roa
Signing time: Sat 08 Aug 2026 10:46:22 +0000
ROA not before: Sat 08 Aug 2026 10:41:22 +0000
ROA not after: Sat 07 Aug 2027 10:46:22 +0000
asID: 402215
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5d:1e:f1:93:ab:5f:b1:11:60:ae:b1:df:55:83:84:e3:0a:8b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Aug 8 10:41:22 2026 GMT
Not After : Aug 7 10:46:22 2027 GMT
Subject: CN=330A5C8B191D1AED8B1094299176F1EFAAEF034D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:3b:32:e6:dc:bb:dd:56:7e:57:59:4a:d1:
ef:76:2a:d1:59:66:b6:73:cf:72:ed:2b:eb:e2:a8:
91:ae:f0:db:d0:0e:45:43:76:c2:38:03:df:18:9d:
3d:97:6a:cd:1e:03:60:8d:f8:48:72:aa:64:98:59:
7a:ed:98:47:cd:00:cf:82:8b:1a:c3:25:ae:65:5d:
1d:fb:cf:80:c3:d3:d2:93:5c:72:2c:9f:e1:65:9c:
10:e8:81:a2:dd:28:2a:29:f1:ef:85:e2:99:10:04:
52:f6:42:50:8c:d8:fd:4d:b1:97:9d:5a:b6:f6:1e:
50:c8:42:8c:40:2f:75:a7:81:93:73:ba:13:7f:2f:
f4:87:e3:66:e6:18:47:9d:79:c8:43:b4:bb:c1:c1:
90:de:4a:94:45:45:7e:ef:bc:3d:37:b6:9a:4b:7d:
80:1c:90:ee:1e:19:a3:80:6e:7f:3d:76:85:09:4d:
b4:d0:88:ea:6b:6f:58:87:24:c3:f5:bb:38:4c:cb:
d4:c0:dd:8d:87:4f:b0:57:06:4f:da:53:12:68:42:
82:ea:70:0d:94:cf:18:f9:01:41:27:59:1d:bf:07:
d9:b9:3e:15:65:56:68:32:ae:58:a3:7c:da:1f:f8:
a9:09:11:bd:0d:66:5a:7c:86:0c:87:70:03:90:6d:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:5C:8B:19:1D:1A:ED:8B:10:94:29:91:76:F1:EF:AA:EF:03:4D
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20343032323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f0:a4:ca:fe:0c:fb:cd:e9:1d:71:00:8d:bb:4e:98:a9:78:
32:5a:56:8f:04:83:6b:5e:d1:03:b9:b2:bf:52:f9:73:cd:c2:
f1:ab:4f:48:cb:55:6f:60:da:c0:40:e6:6f:6c:ac:0f:59:fb:
ac:ec:cd:7a:eb:dd:b7:bc:fd:d8:5b:99:32:9a:f1:d8:0c:a9:
52:6d:82:4e:e2:d5:30:f0:e8:8b:3b:2b:12:f9:27:d7:d7:ab:
93:97:cf:d2:4d:43:56:79:c4:d5:0a:7c:9b:31:5a:a9:f1:31:
92:e6:58:cc:ad:95:3b:db:f1:1d:8b:fe:ab:4d:91:f5:f1:17:
0f:f4:29:54:50:9f:27:8d:7a:fb:cc:6c:5d:a5:cd:2f:01:cf:
28:40:0d:ee:db:1b:ae:38:6e:b4:f0:37:a2:bd:22:ee:60:a7:
fb:f7:45:d0:f8:16:c1:4e:b0:a8:f6:c3:86:7c:33:5e:a5:47:
74:61:f8:91:45:12:6f:dd:8d:2e:30:38:03:b8:4e:0c:fa:6f:
17:43:ae:fe:ec:7b:ee:c8:3d:83:fd:bc:d0:e4:2c:02:00:aa:
8e:d6:ff:d2:c5:25:a7:0b:6c:c3:2c:cd:c6:96:a7:98:c1:42:
11:06:dc:76:ee:33:9e:b7:71:4e:e9:72:38:54:da:81:cd:50:
39:42:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 19:31:36 2026 by rpki-client