Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa
File: 3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa (raw, json)
Hash identifier: 8dMM2dmE1uTZbZVMJQDdLKQx4XqgMCb7X+5WgafA+AA=
Subject key identifier: F6:42:F2:17:B7:16:82:64:EB:9C:70:26:C6:E4:64:8A:58:49:84:B2
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6A9D29D996AA52653D3A035EC05CC2427E196009
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa
Signing time: Thu 24 Sep 2026 15:49:35 +0000
ROA not before: Thu 24 Sep 2026 15:44:35 +0000
ROA not after: Thu 23 Sep 2027 15:49:35 +0000
asID: 400909
IP address blocks: 178.208.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9d:29:d9:96:aa:52:65:3d:3a:03:5e:c0:5c:c2:42:7e:19:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 24 15:44:35 2026 GMT
Not After : Sep 23 15:49:35 2027 GMT
Subject: CN=F642F217B7168264EB9C7026C6E4648A584984B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:41:44:2d:2e:a5:aa:71:1e:32:11:2c:3f:
ef:1d:a1:cf:38:c5:53:30:7c:b9:1b:1a:06:2a:5b:
9d:8c:d2:3f:16:73:4e:14:20:56:53:2d:e8:77:26:
8f:15:79:08:83:18:ca:26:1f:b6:44:5a:86:e3:fb:
d5:26:c9:57:ea:91:c9:35:54:cc:7c:07:30:46:97:
4d:47:f6:7f:3b:8d:a6:38:a3:07:c0:6f:d9:69:d5:
43:cb:0c:00:c1:79:93:bd:ba:f9:4c:48:9c:c3:6a:
f5:6c:a1:de:e3:36:47:57:9b:e9:fb:68:49:34:6b:
5d:b8:63:cf:fb:ac:73:fa:4e:8b:85:3c:85:06:f8:
7c:17:f5:43:1d:cc:0c:d0:5f:f7:ad:92:bc:96:b3:
c6:f1:45:0a:38:02:c2:88:bb:7b:28:fe:b6:6e:23:
76:29:69:63:61:03:2e:e8:f7:e4:5d:9c:94:8b:ca:
54:f8:68:88:2e:fc:9c:7c:cf:47:8d:7c:90:9e:41:
1f:46:0e:ee:11:7b:df:da:82:c3:be:71:2a:ee:c9:
ea:89:dd:d3:c1:a0:24:cb:2f:0c:ef:c3:45:29:f1:
eb:3b:2f:27:4e:34:4e:5e:8a:11:12:89:32:f5:38:
48:0e:69:a7:4e:58:82:5d:17:ef:36:de:e4:0b:e4:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:F2:17:B7:16:82:64:EB:9C:70:26:C6:E4:64:8A:58:49:84:B2
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
49:25:2a:ce:8d:d8:21:e1:3a:03:a9:02:bf:a8:d6:81:e0:0a:
6b:90:43:78:a0:49:e0:be:68:7a:cb:2c:ed:4e:f7:d0:89:b2:
74:32:23:23:fe:ca:f2:09:8a:3b:cb:02:fc:2a:cb:35:b6:dd:
66:a9:aa:3b:84:84:76:34:12:e3:20:b8:7c:3e:33:8a:02:0f:
f1:d9:67:1f:06:d0:a2:aa:28:3e:42:52:f0:02:09:84:36:10:
d9:18:12:d5:a8:48:5f:b4:69:94:d5:97:96:64:8c:85:b5:9e:
0f:22:2b:f8:46:8f:21:29:cc:73:8a:1b:6b:14:d9:b3:0c:5f:
c5:6c:2e:fb:87:1d:f8:2b:93:45:95:fe:2c:a3:83:f3:c0:e7:
98:dc:75:f3:3c:f5:c1:8e:90:06:ed:32:f5:d5:35:dd:e8:71:
c4:12:cc:10:54:fe:e0:52:b3:74:e2:66:84:1b:de:ee:6d:5a:
1c:6d:dd:61:d2:56:80:98:42:67:3b:0f:af:62:65:21:8e:ff:
df:96:b9:11:f0:4e:58:21:5c:55:16:63:56:88:7e:e1:f9:f5:
81:c5:d3:33:0c:c0:9f:c3:d0:7b:89:17:7b:29:49:b6:84:84:
14:85:89:41:90:43:97:ad:de:08:b7:d2:7a:77:01:72:8c:35:
dd:c7:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:43:07 2026 by rpki-client