Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e203235313938.roa
File: 3137382e3133322e3139362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 3j8K/Kqcqdvwpx/OlssyZRS1YjevchGxZsOaT54dM7E=
Subject key identifier: 71:F2:B2:E8:AB:F8:CE:8E:5B:7D:4F:28:0B:15:EB:96:ED:21:30:DD
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 261386B5168A4AC0A5A41A73EF7643F611A4C5CD
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e203235313938.roa
Signing time: Thu 16 Oct 2025 03:38:52 +0000
ROA not before: Thu 16 Oct 2025 03:33:52 +0000
ROA not after: Thu 15 Oct 2026 03:38:52 +0000
asID: 25198
IP address blocks: 178.132.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:13:86:b5:16:8a:4a:c0:a5:a4:1a:73:ef:76:43:f6:11:a4:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Oct 16 03:33:52 2025 GMT
Not After : Oct 15 03:38:52 2026 GMT
Subject: CN=71F2B2E8ABF8CE8E5B7D4F280B15EB96ED2130DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:fe:45:08:b4:c4:a1:92:7f:79:b5:46:9d:
3c:a4:f7:89:3b:ab:79:0a:d6:5b:d9:05:8f:d8:ce:
a7:54:aa:f2:15:30:97:dc:40:2b:e9:50:55:51:36:
4a:ea:11:99:22:f6:55:e8:04:8e:e7:63:2f:d3:58:
de:9f:e6:eb:84:c3:e3:c9:5b:b9:14:2e:ec:b2:b8:
44:32:3e:cd:6a:ad:ac:0d:dd:c6:79:8c:1c:19:df:
b4:00:96:f1:fa:45:92:a6:42:cc:6f:4a:8f:8e:a5:
cb:69:53:ca:81:8d:59:61:dc:30:7d:38:44:00:08:
f0:da:18:86:15:32:ec:10:27:b8:ee:a1:2e:72:d8:
a9:d1:81:a8:bd:97:cc:cd:4c:26:c6:4b:22:80:89:
6e:d7:15:e6:5c:eb:f3:c1:53:2e:63:75:3e:e7:51:
9d:95:69:2a:2e:90:cf:83:89:1d:a3:9f:5f:07:87:
12:6a:b0:fb:2f:84:88:7e:8d:1c:88:81:3e:08:50:
3f:47:44:9b:b9:19:0d:a1:80:83:80:b7:7b:1b:c7:
a8:d9:d3:3b:4e:2d:2e:0e:d5:af:1f:a8:61:d2:42:
e4:2b:60:f8:c0:3a:b6:68:2b:52:d6:aa:7f:fe:e7:
7f:eb:fa:28:1c:35:37:6e:8e:a1:e3:31:e9:f6:dc:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:B2:E8:AB:F8:CE:8E:5B:7D:4F:28:0B:15:EB:96:ED:21:30:DD
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139362e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.196.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1f:65:e3:4a:f7:bf:66:7e:11:6b:72:e9:9d:93:38:71:9a:
7c:9c:75:3b:96:b4:06:42:80:92:e4:05:b6:e2:3f:70:d5:2d:
b6:a0:58:4c:25:b5:1e:93:78:ce:fd:76:62:c8:f8:53:8c:c9:
d5:76:a0:75:f3:d2:07:99:6d:25:a9:20:c3:e1:ca:e3:32:d4:
80:57:d5:6c:72:6d:b1:df:ff:0c:c1:a5:8b:11:b6:41:06:12:
6d:ab:74:64:85:da:b3:44:15:a4:e9:ef:2c:9d:29:71:df:f0:
b9:27:77:de:19:fb:d9:65:9d:30:d1:1a:9b:48:b5:49:ef:47:
5a:7a:db:15:98:b9:a0:3f:18:7e:37:fc:b0:9e:b9:33:df:8d:
d8:2b:36:7f:cf:f2:41:5a:59:23:69:24:4a:ba:9e:1e:42:c6:
34:a2:e6:68:63:f2:e8:12:e0:c5:8b:38:77:8e:c3:54:83:43:
79:3b:11:21:54:14:48:7e:e8:68:68:fc:10:eb:59:eb:fb:8e:
35:9b:69:64:a2:8a:1f:34:96:85:0c:7b:03:79:a4:4c:d0:0d:
a7:4e:a7:22:ac:87:1c:18:e1:7b:8d:7b:ea:b3:f3:0a:df:78:
b7:54:89:f9:91:64:6f:9c:3a:3f:d7:da:f8:3d:e9:15:00:7a:
be:a8:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:44 2025 by rpki-client