Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
File: 3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa (raw, json)
Hash identifier: OmyTq5Lx7UKBHooKDnpMwZms+nw2SIlXzyfABL4vTPc=
Subject key identifier: 56:CC:D1:75:BB:8B:F0:DB:36:3D:24:F1:7A:E2:4A:24:CE:E9:0A:84
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1C444F0A2105CC496A0D595F658867D00A617F28
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
Signing time: Fri 26 Sep 2025 15:55:07 +0000
ROA not before: Fri 26 Sep 2025 15:50:07 +0000
ROA not after: Fri 25 Sep 2026 15:55:07 +0000
asID: 9087
IP address blocks: 178.208.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:44:4f:0a:21:05:cc:49:6a:0d:59:5f:65:88:67:d0:0a:61:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 26 15:50:07 2025 GMT
Not After : Sep 25 15:55:07 2026 GMT
Subject: CN=56CCD175BB8BF0DB363D24F17AE24A24CEE90A84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:3b:d3:cf:a9:21:02:cc:18:3a:27:74:8b:
4d:a5:30:6a:36:c3:f9:d5:24:2d:d0:1c:7b:33:dc:
d4:05:db:71:16:54:79:06:15:9b:51:1f:65:04:1e:
01:f9:29:9b:d0:78:fe:34:cd:cc:03:f2:be:ca:09:
a8:5e:6f:df:21:42:d2:76:fb:62:68:0b:01:85:e5:
d3:db:f2:4b:33:28:f6:52:f6:04:0d:59:a6:43:3d:
2f:21:96:3b:97:1f:2d:28:b5:68:8e:79:a8:fd:ce:
9e:b7:05:bd:88:05:0f:31:ea:27:ba:cd:45:10:dd:
ed:98:1e:0b:0d:06:51:8e:ab:20:21:ca:8f:c9:3f:
61:39:a1:b3:cc:d6:e4:dd:a9:96:94:5f:84:e7:9e:
59:f1:b8:b2:94:af:6e:80:ee:3e:c4:1d:2b:d6:8d:
87:e1:46:fa:f9:43:2d:a6:cc:5a:9c:4d:ce:de:32:
e8:0b:52:e9:1f:ee:aa:24:46:56:8d:4f:5a:89:87:
1c:7f:e9:78:5f:be:7e:82:eb:b0:cd:8f:2e:ea:f1:
dd:f3:7b:6f:de:a5:db:de:53:a0:b1:c6:a2:90:14:
b1:bd:27:e6:60:40:41:0d:aa:65:f8:60:90:20:3b:
9c:1a:e7:af:d2:78:ff:cf:41:e4:bf:29:84:7c:49:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CC:D1:75:BB:8B:F0:DB:36:3D:24:F1:7A:E2:4A:24:CE:E9:0A:84
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:1e:77:49:af:b5:c7:e4:23:b4:fe:42:04:f3:55:60:89:fd:
55:1b:2e:d4:e1:1a:e2:a1:35:d9:21:02:7e:46:f9:f6:7d:e8:
a6:e8:5c:5d:f7:a5:40:aa:48:90:73:28:60:9d:95:d2:8f:20:
03:72:ac:15:54:be:4f:9b:ac:76:32:cc:5d:78:6b:f9:e2:29:
4f:d8:24:2d:b1:66:6d:df:85:8d:74:e8:b9:90:96:6d:ad:d2:
6f:c4:d3:38:2a:75:65:99:6a:b9:a0:ca:9b:95:e5:41:60:78:
f7:f9:2b:a5:f9:b5:8d:5f:1f:68:bd:ba:90:c8:9d:f9:75:d2:
17:40:dd:4c:b2:04:15:5f:c2:c5:9f:16:08:4a:75:c5:c9:fb:
f7:bd:50:52:f6:fb:33:7b:b3:3c:6d:c0:90:aa:64:8e:86:dc:
ba:79:4c:13:a9:b1:bf:18:44:53:95:a7:a2:84:85:b5:4d:3d:
2d:18:1a:3f:8d:02:8b:f7:b7:81:b8:df:39:cb:8c:c3:49:72:
a6:ab:ac:30:88:e1:06:40:04:44:f9:fd:2a:05:36:40:2b:1e:
15:97:54:ff:97:8c:5f:56:be:14:73:33:64:57:9a:c6:93:24:
14:c0:e9:43:a8:cf:86:e3:00:d6:df:bb:4c:d7:99:70:54:15:
4e:8e:b0:06
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHERPCiEFzElqDVlfZYhn0AphfygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA5MjYxNTUwMDdaFw0yNjA5MjUxNTU1MDdaMDMxMTAvBgNV
BAMTKDU2Q0NEMTc1QkI4QkYwREIzNjNEMjRGMTdBRTI0QTI0Q0VFOTBBODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4zvTz6khAswYOid0i02lMGo2
w/nVJC3QHHsz3NQF23EWVHkGFZtRH2UEHgH5KZvQeP40zcwD8r7KCaheb98hQtJ2
+2JoCwGF5dPb8kszKPZS9gQNWaZDPS8hljuXHy0otWiOeaj9zp63Bb2IBQ8x6ie6
zUUQ3e2YHgsNBlGOqyAhyo/JP2E5obPM1uTdqZaUX4TnnlnxuLKUr26A7j7EHSvW
jYfhRvr5Qy2mzFqcTc7eMugLUukf7qokRlaNT1qJhxx/6Xhfvn6C67DNjy7q8d3z
e2/epdveU6CxxqKQFLG9J+ZgQEENqmX4YJAgO5wa56/SeP/PQeS/KYR8SdtlAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVszRdbuL8Ns2PSTxeuJKJM7pCoQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzczODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM5MzAzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
stCyMA0GCSqGSIb3DQEBCwUAA4IBAQBNHndJr7XH5CO0/kIE81Vgif1VGy7U4Rri
oTXZIQJ+Rvn2feim6Fxd96VAqkiQcyhgnZXSjyADcqwVVL5Pm6x2MsxdeGv54ilP
2CQtsWZt34WNdOi5kJZtrdJvxNM4KnVlmWq5oMqbleVBYHj3+Sul+bWNXx9ovbqQ
yJ35ddIXQN1MsgQVX8LFnxYISnXFyfv3vVBS9vsze7M8bcCQqmSOhty6eUwTqbG/
GERTlaeihIW1TT0tGBo/jQKL97eBuN85y4zDSXKmq6wwiOEGQARE+f0qBTZAKx4V
l1T/l4xfVr4UczNkV5rGkyQUwOlDqM+G4wDW37tM15lwVBVOjrAG
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:34 2025 by rpki-client