Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20383334.roa
File: 3138382e3230392e3133372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CXYi19/A7ZTQC57L2zxdH59yu7pkxt1qbRwdlQHcR50=
Subject key identifier: 7B:55:AE:65:E8:2A:7F:52:96:2F:32:94:DC:63:FE:13:6D:F6:B8:00
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 6DD96F8672C78037645BFF376DBD32B9C790A15D
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20383334.roa
Signing time: Mon 30 Mar 2026 04:22:38 +0000
ROA not before: Mon 30 Mar 2026 04:17:38 +0000
ROA not after: Mon 29 Mar 2027 04:22:38 +0000
asID: 834
IP address blocks: 188.209.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d9:6f:86:72:c7:80:37:64:5b:ff:37:6d:bd:32:b9:c7:90:a1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 30 04:17:38 2026 GMT
Not After : Mar 29 04:22:38 2027 GMT
Subject: CN=7B55AE65E82A7F52962F3294DC63FE136DF6B800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:11:df:29:27:4d:24:77:66:56:38:5e:16:c8:
05:a5:39:72:07:9d:00:9f:bd:4c:63:68:f8:aa:6f:
80:aa:f6:71:02:94:ca:10:bd:04:19:a8:d0:f9:7d:
7f:61:45:6b:35:da:09:66:a7:14:36:73:0a:0c:8a:
b8:47:6c:c8:95:23:e2:8f:93:10:d3:b2:7c:a3:0c:
ee:60:ca:f3:1b:3b:1d:5c:8a:3f:cf:c7:ea:81:84:
59:c7:da:75:34:07:bf:82:98:02:c5:4d:65:1c:b1:
6e:13:a1:f0:d8:37:58:60:b8:cd:13:e7:cb:dc:c5:
05:9b:3a:8b:07:6a:c3:86:ea:09:95:37:e8:a9:19:
0e:43:e7:ee:d2:ba:b0:dd:08:9a:b1:60:77:c6:e6:
b8:6c:c9:14:d9:76:25:9c:f1:59:d1:3c:f9:33:f3:
d4:0d:bb:d4:cb:18:f1:c1:3d:4f:d5:ad:c6:61:80:
49:24:58:c3:f3:a8:fc:cb:f7:d2:9a:c2:77:3c:ef:
58:55:f5:b5:a0:8d:a1:5a:e1:2b:2b:8e:7a:d0:5f:
b3:f6:9e:14:8e:12:bf:24:09:90:da:4b:e1:4b:fc:
bf:b1:e6:d5:4f:7e:c9:fa:b0:47:67:df:f9:e3:b9:
17:a3:de:82:1e:92:5c:7a:3b:35:48:5f:ad:eb:72:
8f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:55:AE:65:E8:2A:7F:52:96:2F:32:94:DC:63:FE:13:6D:F6:B8:00
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4e:10:ce:dd:9e:b1:d1:64:92:15:14:12:c6:97:07:24:bd:
e0:02:6f:2a:cc:f8:f7:60:5b:46:c1:2c:45:e5:2f:51:9a:61:
c5:db:10:9f:44:09:c2:c0:2a:aa:aa:07:e9:0d:3e:c8:71:48:
6f:a9:91:c4:b2:ed:48:b4:89:dd:a6:7c:0a:94:4e:c0:1b:b9:
8d:bb:aa:63:c0:b7:ed:30:1c:04:a2:df:47:02:bb:69:42:63:
d7:8f:95:d6:9c:f4:65:9f:fb:d5:63:6f:90:91:13:a8:64:d3:
0f:35:7c:63:d7:9d:6f:4f:62:0e:be:c3:18:87:0a:93:c2:17:
61:1a:cd:98:4a:e5:6d:bd:aa:64:34:eb:a5:d9:73:51:11:cb:
26:d9:4e:5f:99:59:e0:e7:b1:d5:e5:d1:6f:e3:9d:5c:83:3c:
0b:48:59:db:fc:ae:0e:93:51:12:e4:ff:2a:8d:e6:7a:ce:a7:
73:14:cf:74:50:1c:88:44:5e:da:35:9f:e5:47:3d:ad:c3:e6:
f4:e9:70:ce:28:56:71:4e:ec:f5:58:71:bf:09:f3:7b:66:42:
a7:4a:0a:77:59:bd:62:78:be:ad:53:cd:8e:5f:cd:85:34:d2:
bc:9d:1e:89:a0:c4:1a:6a:4b:36:3a:ea:9d:43:e2:80:6f:76:
58:4f:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:24:01 2026 by rpki-client