Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20313938333833.roa
File: 3137382e3230382e3138302e302f32332d3233203d3e20313938333833.roa (raw, json)
Hash identifier: RRckWhGF3OK/LcqtBJUaPu17fCKZ8yNRlrDLlN+NX/U=
Subject key identifier: CF:35:6F:E7:E9:57:EE:22:93:C0:65:AF:E5:06:4A:2F:88:A3:D9:AE
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6C1E894404678EE53B376308988841CE06120C4E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20313938333833.roa
Signing time: Mon 04 May 2026 12:41:12 +0000
ROA not before: Mon 04 May 2026 12:36:12 +0000
ROA not after: Mon 03 May 2027 12:41:12 +0000
asID: 198383
IP address blocks: 178.208.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1e:89:44:04:67:8e:e5:3b:37:63:08:98:88:41:ce:06:12:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 4 12:36:12 2026 GMT
Not After : May 3 12:41:12 2027 GMT
Subject: CN=CF356FE7E957EE2293C065AFE5064A2F88A3D9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:5f:8e:eb:1c:b0:c2:a2:1c:a6:81:c1:db:
37:2d:fc:b6:44:d3:2b:79:56:b7:74:c1:6c:46:b0:
c0:63:3d:df:cd:09:3b:1c:08:ee:bf:9a:61:ef:0b:
c3:9d:5a:19:ce:56:ae:3e:c7:71:7f:86:d3:ef:ff:
ce:29:d9:e9:76:3a:1f:8f:4a:08:ac:b1:58:4c:b9:
fb:82:ee:d6:cb:e1:28:0c:f4:61:d5:98:d1:cb:f0:
15:13:56:93:d6:d7:cd:e2:41:b7:4f:55:46:de:6c:
41:6b:7c:c6:6d:ed:2a:ae:2d:24:74:bb:ba:4f:ff:
49:34:d8:be:18:fa:66:5f:69:08:04:bc:62:22:09:
12:b3:be:05:f0:99:cf:03:5c:97:24:59:74:87:9a:
1a:b1:ae:bf:b9:e1:55:5a:d4:af:15:79:81:c4:21:
55:9a:84:d4:96:48:7b:d8:64:ad:09:6c:ce:ab:22:
35:d2:a5:d7:96:7d:db:32:13:e8:ef:86:a5:1d:5f:
f0:7c:25:d4:9c:e0:a6:12:b1:d5:dd:7e:2a:ac:6e:
05:d2:82:88:5a:32:f5:3a:27:bd:59:88:8f:96:99:
8b:ef:97:36:ef:e7:a9:32:d2:b3:14:2a:91:b3:7e:
a3:c7:94:af:0b:9c:46:67:43:e5:91:8d:7b:0d:cd:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:35:6F:E7:E9:57:EE:22:93:C0:65:AF:E5:06:4A:2F:88:A3:D9:AE
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20313938333833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/23
Signature Algorithm: sha256WithRSAEncryption
60:dc:c3:80:63:78:7d:c6:a4:ee:03:a7:e4:29:ab:65:67:8c:
de:19:70:d8:ee:3c:84:ee:ca:52:79:7e:cf:2d:41:7d:29:fc:
cb:f4:b9:00:0d:2e:c8:66:c7:2d:1c:e1:8c:ba:42:1d:a5:34:
18:99:97:17:36:1a:ba:56:07:5e:b1:2e:25:66:e5:56:41:95:
69:ac:13:e4:90:55:91:47:6b:eb:bf:f6:60:72:59:2c:82:97:
e3:0a:3a:9e:78:79:93:ab:15:7c:3e:4e:55:05:85:5c:d5:3f:
47:9b:42:3d:93:37:08:a7:d2:13:bf:f6:82:9c:48:28:12:c3:
70:b7:3f:e6:5e:33:73:f6:ea:35:e3:f6:79:62:89:d4:5d:37:
ee:ae:38:8a:67:b0:09:35:1d:08:94:30:60:a2:e6:a6:41:f0:
09:15:62:87:4a:13:d4:bc:10:69:e1:83:b4:eb:52:29:43:d8:
42:78:83:7f:92:14:a9:ba:16:57:73:6c:b0:f4:38:95:59:e0:
1a:27:e2:a6:29:b5:b1:45:a7:76:fb:80:9e:5a:f4:42:e9:c7:
e8:11:07:a1:74:40:c6:8e:b9:b1:5f:70:68:28:0e:8b:c1:d5:
fc:da:2e:d9:17:cf:52:50:1c:fa:01:a7:30:60:ab:d0:3d:61:
38:ba:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:13 2026 by rpki-client