Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa
File: 3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa (raw, json)
Hash identifier: LgCqzvRZCTxi9/NbCzu+JNHsBs0Qcgng/Q34RhaWN5k=
Subject key identifier: 42:62:95:3F:98:7C:F0:E4:43:17:32:E4:E9:DE:39:F9:25:BB:C7:49
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 593DBEACB67CDC6512BC62AC0AE4C528F2BBA478
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa
Signing time: Fri 19 Sep 2025 22:55:07 +0000
ROA not before: Fri 19 Sep 2025 22:50:07 +0000
ROA not after: Fri 18 Sep 2026 22:55:07 +0000
asID: 9087
IP address blocks: 178.208.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:3d:be:ac:b6:7c:dc:65:12:bc:62:ac:0a:e4:c5:28:f2:bb:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 19 22:50:07 2025 GMT
Not After : Sep 18 22:55:07 2026 GMT
Subject: CN=4262953F987CF0E4431732E4E9DE39F925BBC749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:db:86:61:e3:56:e8:2e:97:74:45:3f:04:
ee:ba:bd:f5:b2:a6:a1:a3:d0:7a:5f:cc:a1:37:16:
67:a9:92:1c:20:2c:c6:34:66:e8:9a:7c:4f:13:40:
93:b8:19:19:09:df:2f:cb:e3:97:59:13:b2:1f:e2:
d5:b3:0e:7a:6f:e7:74:1f:39:18:a9:b3:09:b7:ce:
14:b9:ea:5c:b2:3b:3d:8c:0b:57:2b:d6:4a:fa:8f:
6f:00:3a:e1:1a:c6:c9:f0:77:a2:10:fe:6e:69:97:
24:80:24:bc:e0:16:46:06:80:66:af:cd:f6:77:84:
d4:d8:d7:42:93:1c:cb:44:80:a7:4c:cb:ed:eb:17:
fc:60:af:2b:8a:46:8f:6f:9b:ec:c1:56:10:8c:8c:
bc:2c:b1:fd:f6:97:38:f2:39:19:a7:c1:44:df:6c:
77:04:c4:06:f9:7a:02:3d:e3:9f:5c:ee:ad:fd:fb:
8c:37:e2:b1:c4:5b:79:e4:de:49:c4:02:8c:18:2e:
aa:b9:60:6d:e8:30:1f:1d:5f:60:07:2f:92:47:99:
a9:07:8f:2e:28:22:e5:81:f2:99:c9:b4:80:3d:0f:
69:2c:b7:c9:b7:8f:81:d7:f5:8b:3e:44:39:bd:23:
4f:ea:55:15:20:e4:75:9f:a0:07:21:d2:87:1f:e0:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:95:3F:98:7C:F0:E4:43:17:32:E4:E9:DE:39:F9:25:BB:C7:49
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:b1:77:26:6e:93:4e:e1:5c:ba:cb:7e:de:40:63:aa:db:d6:
e9:c4:b2:5e:c4:3a:fe:46:68:04:60:3d:ca:af:85:b6:b1:e3:
71:30:fd:16:e4:05:33:7f:db:38:e1:d4:8c:8b:fb:3c:90:b7:
27:a4:a1:cf:d0:99:07:a9:f7:d6:56:e4:67:0f:00:8b:fd:f0:
e6:3c:cb:ae:4a:9c:10:f2:e8:a6:4b:9a:62:d4:03:be:9b:31:
14:9a:6c:50:2e:18:fc:66:06:51:fe:00:0a:a1:2a:ce:d4:7e:
d3:cb:8d:07:c0:d6:55:81:31:c7:aa:85:59:62:78:04:55:12:
d7:fe:44:7a:f7:d2:43:05:45:72:c4:83:89:53:5d:e3:d2:9a:
c9:6e:10:e9:d6:55:1f:2a:ae:12:a0:d0:f0:37:58:42:86:12:
d6:66:0c:1b:02:f5:63:74:9e:a9:93:87:d5:c6:28:91:6f:53:
be:c6:4b:6d:b2:a6:1b:10:30:cc:92:a5:bc:05:f4:ae:de:c1:
fa:fe:4b:6a:1c:f3:e2:c3:c1:e5:53:2c:bc:cd:90:1b:ad:c6:
d2:b1:8d:b0:3d:0b:ed:66:3b:e1:6a:b6:c8:28:a3:fd:a2:60:
8a:5e:df:e5:aa:46:4d:56:de:4f:7e:5f:67:b3:27:4b:a7:d7:
7e:08:45:75
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUWT2+rLZ83GUSvGKsCuTFKPK7pHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA5MTkyMjUwMDdaFw0yNjA5MTgyMjU1MDdaMDMxMTAvBgNV
BAMTKDQyNjI5NTNGOTg3Q0YwRTQ0MzE3MzJFNEU5REUzOUY5MjVCQkM3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47duGYeNW6C6XdEU/BO66vfWy
pqGj0HpfzKE3FmepkhwgLMY0ZuiafE8TQJO4GRkJ3y/L45dZE7If4tWzDnpv53Qf
ORipswm3zhS56lyyOz2MC1cr1kr6j28AOuEaxsnwd6IQ/m5plySAJLzgFkYGgGav
zfZ3hNTY10KTHMtEgKdMy+3rF/xgryuKRo9vm+zBVhCMjLwssf32lzjyORmnwUTf
bHcExAb5egI9459c7q39+4w34rHEW3nk3knEAowYLqq5YG3oMB8dX2AHL5JHmakH
jy4oIuWB8pnJtIA9D2kst8m3j4HX9Ys+RDm9I0/qVRUg5HWfoAch0ocf4JELAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUQmKVP5h88ORDFzLk6d45+SW7x0kwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM5MzAzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
stC0MA0GCSqGSIb3DQEBCwUAA4IBAQA8sXcmbpNO4Vy6y37eQGOq29bpxLJexDr+
RmgEYD3Kr4W2seNxMP0W5AUzf9s44dSMi/s8kLcnpKHP0JkHqffWVuRnDwCL/fDm
PMuuSpwQ8uimS5pi1AO+mzEUmmxQLhj8ZgZR/gAKoSrO1H7Ty40HwNZVgTHHqoVZ
YngEVRLX/kR699JDBUVyxIOJU13j0prJbhDp1lUfKq4SoNDwN1hChhLWZgwbAvVj
dJ6pk4fVxiiRb1O+xkttsqYbEDDMkqW8BfSu3sH6/ktqHPPiw8HlUyy8zZAbrcbS
sY2wPQvtZjvharbIKKP9omCKXt/lqkZNVt5Pfl9nsydLp9d+CEV1
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:33 2025 by rpki-client