Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa
File: 3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa (raw, json)
Hash identifier: GLK9ENNjtT4oGrhSYMDYfCpE+E0XLkWEig3ecTjvxSU=
Subject key identifier: 08:5B:3F:87:51:45:94:FA:3C:C6:C2:F7:4C:B7:08:F3:41:B6:56:B8
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7EF04359323D63A7658D8613F0A41291BA3DBCC0
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa
Signing time: Tue 22 Sep 2026 15:49:35 +0000
ROA not before: Tue 22 Sep 2026 15:44:35 +0000
ROA not after: Tue 21 Sep 2027 15:49:35 +0000
asID: 400909
IP address blocks: 178.208.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f0:43:59:32:3d:63:a7:65:8d:86:13:f0:a4:12:91:ba:3d:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 22 15:44:35 2026 GMT
Not After : Sep 21 15:49:35 2027 GMT
Subject: CN=085B3F87514594FA3CC6C2F74CB708F341B656B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:f5:b2:60:cc:4e:7a:e1:89:13:57:a0:b1:
2e:68:0d:94:17:f8:52:45:f4:99:25:7c:03:03:07:
5c:44:fa:31:c2:0a:93:ea:6e:2a:b0:b8:ea:29:7f:
2d:ef:8f:43:b3:4e:9e:05:7f:5c:90:36:58:9d:4a:
9a:5d:c0:11:62:6d:6c:1a:56:68:f0:c3:de:09:79:
46:71:88:25:7b:be:d4:5a:b9:d2:11:98:82:d0:45:
5c:17:fe:9d:ea:5b:0a:d4:2f:3f:70:ae:80:b3:43:
8d:3f:58:11:0d:51:64:78:e8:94:d4:d1:54:ab:08:
8b:c1:36:d8:01:65:ff:5a:2a:c2:64:2e:a0:ad:4d:
fc:25:80:39:c2:cc:b9:5a:82:25:35:5c:66:25:e5:
a2:db:42:94:83:01:b7:c4:6f:5e:fa:9d:b6:f3:0c:
a7:14:02:aa:3f:66:07:e4:55:d3:b4:62:c9:b2:98:
86:7c:b1:bf:c3:c2:52:d3:10:c6:bd:28:a7:0d:53:
f7:dc:29:c5:9f:68:63:f0:ff:71:e2:73:8b:ea:eb:
a4:e8:10:c5:5e:9f:96:dc:a2:2d:a6:f5:f5:8f:00:
1b:f5:e8:52:9c:80:0a:ea:bb:2b:70:83:54:29:f1:
6f:7a:79:0e:af:83:ed:5b:cf:0f:10:89:a0:22:21:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:3F:87:51:45:94:FA:3C:C6:C2:F7:4C:B7:08:F3:41:B6:56:B8
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:3d:fd:4c:db:dd:35:e7:c5:bc:8d:d5:0d:ea:c1:00:7a:c1:
12:ff:0f:bc:f2:4d:53:54:64:e1:a2:e5:12:70:de:14:c5:22:
76:00:54:4d:d6:0f:9e:b7:1d:39:48:1a:37:fb:09:bc:67:39:
31:92:bf:e1:60:39:d0:72:c7:ba:04:37:8e:68:0e:f2:b5:b6:
4c:e4:36:fc:39:b2:59:2a:d5:f8:90:c7:6a:84:a5:e9:82:65:
f0:01:aa:b7:e9:c1:b5:c4:22:98:5b:80:5f:4d:2f:6a:a0:77:
8a:a0:ce:2f:d6:66:3e:a4:ec:b9:60:0a:cd:9e:cb:d2:cc:32:
2b:30:b0:59:2b:65:92:50:38:48:42:71:cb:e4:9d:e0:a4:7e:
46:d3:51:1f:35:04:97:bc:6c:61:1e:43:f6:d3:41:ac:13:f5:
83:cb:89:34:81:69:81:2a:b3:29:f1:d5:4a:67:e1:fd:20:1c:
b0:ab:06:49:2c:70:97:15:fa:f5:fc:96:e1:c9:d9:2d:b1:3f:
df:e9:36:7e:1e:30:43:af:bb:34:ff:79:a6:1d:59:1a:f9:4a:
2d:bf:de:bf:33:86:a8:7c:b3:a7:14:a2:6a:2b:93:f3:65:ce:
e1:58:67:0c:d0:25:07:c7:5c:3f:87:03:e9:17:36:8a:c7:ec:
f6:a3:b2:ec
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfvBDWTI9Y6dljYYT8KQSkbo9vMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNjA5MjIxNTQ0MzVaFw0yNzA5MjExNTQ5MzVaMDMxMTAvBgNV
BAMTKDA4NUIzRjg3NTE0NTk0RkEzQ0M2QzJGNzRDQjcwOEYzNDFCNjU2QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/y/WyYMxOeuGJE1egsS5oDZQX
+FJF9JklfAMDB1xE+jHCCpPqbiqwuOopfy3vj0OzTp4Ff1yQNlidSppdwBFibWwa
Vmjww94JeUZxiCV7vtRaudIRmILQRVwX/p3qWwrULz9wroCzQ40/WBENUWR46JTU
0VSrCIvBNtgBZf9aKsJkLqCtTfwlgDnCzLlagiU1XGYl5aLbQpSDAbfEb176nbbz
DKcUAqo/ZgfkVdO0YsmymIZ8sb/DwlLTEMa9KKcNU/fcKcWfaGPw/3Hic4vq66To
EMVen5bcoi2m9fWPABv16FKcgArquytwg1Qp8W96eQ6vg+1bzw8QiaAiIQwBAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUCFs/h1FFlPo8xsL3TLcI80G2VrgwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzAzMDM5MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAbLQtDANBgkqhkiG9w0BAQsFAAOCAQEAjj39TNvdNefFvI3VDerBAHrBEv8P
vPJNU1Rk4aLlEnDeFMUidgBUTdYPnrcdOUgaN/sJvGc5MZK/4WA50HLHugQ3jmgO
8rW2TOQ2/DmyWSrV+JDHaoSl6YJl8AGqt+nBtcQimFuAX00vaqB3iqDOL9ZmPqTs
uWAKzZ7L0swyKzCwWStlklA4SEJxy+Sd4KR+RtNRHzUEl7xsYR5D9tNBrBP1g8uJ
NIFpgSqzKfHVSmfh/SAcsKsGSSxwlxX69fyW4cnZLbE/3+k2fh4wQ6+7NP95ph1Z
GvlKLb/evzOGqHyzpxSiaiuT82XO4VhnDNAlB8dcP4cD6Rc2isfs9qOy7A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:36:16 2026 by rpki-client