Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139372e302f32342d3234203d3e20343032333433.roa
File: 3137382e3133322e3139372e302f32342d3234203d3e20343032333433.roa (raw, json)
Hash identifier: kYjiruSevjnCCTw8m8yV3pSGFVyrKV1r+hKtIWWhj6Q=
Subject key identifier: 12:5B:0E:7C:D5:1F:B1:2A:58:0C:50:97:CD:0C:CF:FC:83:8A:8E:11
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 700303C9E60BC27D55735D1124AA74C64D4ED39E
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139372e302f32342d3234203d3e20343032333433.roa
Signing time: Sun 28 Jun 2026 19:28:07 +0000
ROA not before: Sun 28 Jun 2026 19:23:07 +0000
ROA not after: Sun 27 Jun 2027 19:28:07 +0000
asID: 402343
IP address blocks: 178.132.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:03:03:c9:e6:0b:c2:7d:55:73:5d:11:24:aa:74:c6:4d:4e:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jun 28 19:23:07 2026 GMT
Not After : Jun 27 19:28:07 2027 GMT
Subject: CN=125B0E7CD51FB12A580C5097CD0CCFFC838A8E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:75:fc:ed:90:46:da:08:8e:f7:c0:fd:58:
bb:4e:c4:36:14:ac:9b:86:78:62:11:c1:59:73:0a:
47:87:73:36:7b:8f:a6:7a:69:a2:7e:be:cd:fa:d8:
fb:d5:f3:20:b6:5c:27:e3:77:0f:37:e0:48:72:6c:
b1:22:d0:eb:a9:36:be:07:4f:70:04:48:5b:f4:4c:
1c:d2:8d:1e:75:4c:d3:ef:c9:a1:8f:bd:ab:5b:d3:
78:d0:3b:b6:ab:f5:bd:c3:c5:42:ec:44:86:d1:4e:
fb:4d:5a:20:f8:92:4e:76:e2:60:b4:1c:9e:ae:89:
ee:86:e9:12:29:12:76:49:58:e8:e7:a1:27:e9:1a:
55:13:c7:f7:81:85:8f:e3:f0:a3:dd:cd:b3:9d:ee:
cf:32:af:da:1a:22:0e:b4:dd:03:bb:94:b8:9b:79:
81:72:cf:09:bd:f3:c1:b5:b8:66:e5:64:b3:b4:95:
ad:f8:28:1e:f6:e0:e2:81:08:5c:63:08:46:b8:3f:
02:fd:54:fb:c7:e1:9a:fd:04:50:3e:48:b2:1c:b3:
c9:1a:a8:39:7a:5c:cc:40:bf:6c:1c:c3:66:29:78:
ff:05:47:0f:f5:39:21:69:60:f4:2e:ce:08:46:7a:
8a:a1:de:cd:a4:ea:b2:d4:78:99:4d:35:3d:66:7e:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:0E:7C:D5:1F:B1:2A:58:0C:50:97:CD:0C:CF:FC:83:8A:8E:11
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139372e302f32342d3234203d3e20343032333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.197.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7a:8c:d3:66:ff:92:ca:ab:48:67:c2:7c:23:d5:74:1c:c1:
10:25:c5:9e:3c:1a:eb:2f:72:54:21:8a:89:ce:e7:b2:4b:3f:
2a:96:a9:e0:d1:3a:ce:50:f0:71:1a:ac:22:58:4d:c2:cb:06:
b4:97:cd:c5:28:fb:65:7a:b7:51:75:20:69:7b:ab:82:b7:36:
fd:cc:af:92:78:75:72:24:f8:0b:ce:3c:db:ac:2a:32:4e:63:
99:d4:93:0e:8d:e9:59:99:e3:a6:14:14:36:a9:25:e4:74:9c:
88:2f:43:6c:c1:cd:6b:8c:0f:4d:12:f6:8d:35:5d:e8:a1:90:
39:02:8e:7e:e4:1e:db:64:68:a2:81:ab:57:2f:33:19:0b:72:
d3:0a:cf:10:7e:4b:c7:0d:20:8b:c4:2e:93:7b:63:c6:1b:8f:
dc:1f:be:65:d3:5d:1e:35:a9:30:f3:8a:96:35:6c:1f:98:7a:
d3:42:ce:97:74:09:12:1a:a6:1c:4c:d3:fd:46:e8:4e:ad:40:
cf:c2:db:72:5f:94:50:69:84:cf:61:4e:c7:a6:7d:d2:9c:91:
7f:79:21:f2:71:ee:7b:6a:cf:1a:99:a0:2e:a0:1b:d6:dc:c8:
e2:85:e1:d8:3f:1e:60:c4:21:8f:f6:44:3a:c3:4a:30:54:97:
d0:a6:24:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:37 2026 by rpki-client