Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134312e302f32342d3234203d3e203433393639.roa
File: 3138382e3230392e3134312e302f32342d3234203d3e203433393639.roa (raw, json)
Hash identifier: a9CQDYA7GTQUn5jeYHrcVYVvqacF+BYbLvp2N6zbdTo=
Subject key identifier: 6D:19:7A:8A:FE:7F:F2:3C:B3:F5:A6:D1:7B:7F:39:B9:F4:B9:BC:5C
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 4BE021040E2F6E0E9F1102E7292388AC4519777E
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134312e302f32342d3234203d3e203433393639.roa
Signing time: Fri 09 Oct 2026 18:58:16 +0000
ROA not before: Fri 09 Oct 2026 18:53:16 +0000
ROA not after: Fri 08 Oct 2027 18:58:16 +0000
asID: 43969
IP address blocks: 188.209.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e0:21:04:0e:2f:6e:0e:9f:11:02:e7:29:23:88:ac:45:19:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Oct 9 18:53:16 2026 GMT
Not After : Oct 8 18:58:16 2027 GMT
Subject: CN=6D197A8AFE7FF23CB3F5A6D17B7F39B9F4B9BC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:88:d4:8f:b3:72:12:09:97:e8:4e:88:12:
d6:d6:d8:32:a4:6c:1d:d2:51:5f:2d:a6:b5:dc:8e:
0b:68:27:64:eb:5e:48:15:b7:9e:a5:93:ac:d4:d3:
c3:64:7e:97:80:4b:7d:66:db:69:65:e2:86:bf:43:
fb:c9:ac:74:42:52:79:e0:f1:fe:37:f0:eb:b4:11:
91:65:d2:d5:9a:1a:69:12:a3:72:e5:74:1f:33:8e:
67:7c:67:bc:f7:e6:13:6a:76:a0:68:c7:6f:6e:96:
17:75:02:76:cc:f1:8f:f4:5c:99:57:87:f1:ca:67:
be:66:40:b6:78:cd:95:de:a5:f1:de:00:cd:74:2d:
f7:34:82:3d:2d:0c:b5:7f:35:49:fb:5c:ef:a9:af:
c8:fe:a3:96:7e:9c:36:fb:74:9b:f3:72:67:e5:b4:
f5:1c:fa:fb:7e:c5:c4:76:64:74:b1:b5:88:bb:f3:
d8:c3:be:a2:fa:d0:49:a8:ef:bc:3f:40:94:36:82:
92:96:9a:b3:33:9f:e2:31:be:9b:6e:cb:9a:96:32:
a8:cc:8e:14:cf:5e:6f:e0:9a:4d:36:65:9f:32:33:
fb:5f:9f:f8:ad:a8:0f:09:62:2b:9e:78:c6:30:97:
22:59:a4:e8:9b:2d:d2:d9:f9:40:ad:f7:9e:f6:c6:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:19:7A:8A:FE:7F:F2:3C:B3:F5:A6:D1:7B:7F:39:B9:F4:B9:BC:5C
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134312e302f32342d3234203d3e203433393639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6a:8c:86:38:2e:ec:f4:1c:9b:40:5a:0d:3c:1f:2e:ec:37:
fa:57:ec:9a:a3:e1:51:46:88:c7:33:4b:9e:ac:71:63:85:07:
ab:81:36:6b:57:81:ff:76:8a:db:53:a5:c3:6e:2b:ba:77:0a:
70:c5:eb:93:44:be:a4:0d:7e:1d:87:b8:e3:57:d2:ee:4a:ea:
27:a7:99:8f:87:f6:6e:24:44:28:d2:aa:a4:3d:1d:95:77:0c:
fd:7d:6a:e2:97:a5:0a:f1:0b:fd:82:c2:37:c1:0c:46:fb:bc:
fe:f7:41:7b:b8:63:8a:6a:94:c7:30:da:9d:cc:45:6e:09:74:
a2:8f:b6:43:07:30:58:cf:98:10:d9:79:3e:58:02:4d:ad:f2:
7c:b9:42:0f:88:7c:46:12:8f:13:bc:c9:6f:e9:20:aa:b4:26:
79:4e:a3:27:2f:fe:6c:fe:b1:a2:71:3b:1c:30:ef:43:e4:fa:
77:9f:34:3e:35:df:b0:2a:d8:cd:3a:9d:3d:30:43:29:aa:a9:
60:10:1f:b3:16:b6:c4:a5:bc:33:b3:32:73:08:c1:3f:b3:b7:
ae:d7:07:57:aa:6b:1b:d2:5c:d2:74:54:c2:68:65:0a:b1:3c:
11:ea:ea:0d:a7:4d:23:0d:ca:04:d0:03:06:4a:60:f3:4b:0f:
5b:1d:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:24 2026 by rpki-client