Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20343031333632.roa
File: 3137382e3230382e3138322e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: 5M6f3NGwhXaoKdUbGGPlL85lNjbVMPY8oVwt9msY2LM=
Subject key identifier: 15:C3:86:FD:AD:EA:37:10:3A:6D:1A:78:09:B8:33:A8:B1:44:17:9F
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6FA27495230C70746E2B20009A9E068A8F44490D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20343031333632.roa
Signing time: Tue 15 Sep 2026 11:15:03 +0000
ROA not before: Tue 15 Sep 2026 11:10:03 +0000
ROA not after: Tue 14 Sep 2027 11:15:03 +0000
asID: 401362
IP address blocks: 178.208.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a2:74:95:23:0c:70:74:6e:2b:20:00:9a:9e:06:8a:8f:44:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 15 11:10:03 2026 GMT
Not After : Sep 14 11:15:03 2027 GMT
Subject: CN=15C386FDADEA37103A6D1A7809B833A8B144179F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:dc:a7:d9:87:e6:08:0d:7a:f3:cb:52:ef:
3a:3f:95:67:b5:b7:37:3d:c4:88:4e:4d:55:b7:8f:
e7:63:6a:be:1f:db:a1:8a:4f:5e:48:86:de:f4:4f:
5b:2e:89:78:88:90:51:86:14:98:a2:f5:3b:d2:0d:
ef:28:f6:b0:33:c4:43:83:11:ed:80:56:6d:c5:aa:
87:54:d6:99:02:60:61:85:33:b0:4c:c5:57:97:1a:
9a:13:72:74:a3:6c:98:6f:bc:4e:3a:a9:d7:63:6d:
e0:a2:fd:23:82:24:53:46:01:13:e2:51:ba:c0:b0:
80:0e:70:e7:c8:5d:ea:3f:cb:c9:c8:37:fd:17:79:
2f:80:06:7c:8f:30:da:b3:dc:5a:32:a6:a4:1b:db:
dd:34:b4:58:74:81:a7:c5:c9:b4:7f:d3:3f:58:d2:
41:23:fd:11:32:8a:74:40:df:02:0a:88:ee:a7:06:
9d:01:ff:db:86:fc:c4:f6:a8:31:d1:db:eb:37:17:
63:71:9a:97:1b:c7:09:6c:83:f3:74:7f:bc:69:7a:
2c:bf:34:4a:af:0c:2a:5c:41:39:60:27:11:ed:67:
7a:13:da:58:71:ab:85:6a:6a:0d:03:06:9f:24:3c:
60:c0:8b:fc:43:1c:81:3a:b4:c5:7b:f9:f2:a3:27:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:86:FD:AD:EA:37:10:3A:6D:1A:78:09:B8:33:A8:B1:44:17:9F
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1c:fa:47:2e:01:73:8a:85:e6:d8:9f:4a:d7:17:a5:60:0f:
2f:fc:33:8d:65:13:b8:a2:a5:f5:cf:1c:a4:40:9d:b5:b0:73:
59:5d:cc:74:5b:7f:35:c3:a3:fa:4b:e6:d3:da:c4:9a:3c:24:
06:3d:bc:a5:ce:8d:f0:e8:10:00:b1:0d:71:c4:16:cf:56:50:
86:ee:3f:56:66:74:2c:ee:ef:af:1f:57:61:78:41:2c:c7:fb:
81:06:5d:d7:f4:3e:2e:a0:97:75:f4:16:5a:4b:f6:dc:6a:f4:
9a:13:13:60:d8:bd:93:dd:e4:e9:62:14:22:65:0c:98:3d:cd:
90:fa:25:d0:33:74:df:5a:84:fa:e2:00:48:49:b7:85:03:b4:
06:07:01:c9:88:46:35:d4:d1:26:a9:8b:17:ef:01:f9:82:9c:
08:a5:a5:58:ce:d2:f2:f9:1e:24:ae:7e:1c:3e:cd:1f:58:b0:
2f:17:db:35:10:f3:d6:9a:5b:f2:ea:0b:f1:5a:4f:e3:22:37:
8a:b5:87:ad:6e:25:ce:56:80:45:77:af:7d:ae:f7:27:ad:8f:
0d:14:04:99:c2:dc:ff:d9:d3:31:5b:7c:c8:47:2c:c3:4b:76:
27:1c:ad:5d:1a:de:f6:43:25:e0:06:a1:73:71:2d:fc:66:a9:
de:bb:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:52 2026 by rpki-client