Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20323134303334.roa
File: 3138382e3230392e3132382e302f32342d3234203d3e20323134303334.roa (raw, json)
Hash identifier: 7jrAeGDyODmv0Mtb1qHnV6ZwMYgh65zX74z2WvSpShM=
Subject key identifier: 24:54:F1:C0:70:0A:EA:C8:09:1A:F5:2B:D6:3E:1A:3D:13:91:CE:9D
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 3CE4288B7C6DFF98CD23CC234B837FCF7FC81F73
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20323134303334.roa
Signing time: Sun 18 Oct 2026 01:44:33 +0000
ROA not before: Sun 18 Oct 2026 01:39:33 +0000
ROA not after: Sun 17 Oct 2027 01:44:33 +0000
asID: 214034
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e4:28:8b:7c:6d:ff:98:cd:23:cc:23:4b:83:7f:cf:7f:c8:1f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Oct 18 01:39:33 2026 GMT
Not After : Oct 17 01:44:33 2027 GMT
Subject: CN=2454F1C0700AEAC8091AF52BD63E1A3D1391CE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:4c:5d:b6:81:b3:33:76:98:1d:1f:e9:dd:
9c:02:ad:96:aa:96:f2:7c:31:b7:86:33:90:61:43:
87:f6:79:17:22:12:25:91:2f:0f:ca:47:17:53:02:
36:84:93:32:d3:af:04:d9:33:16:7d:e8:41:01:9f:
ad:9e:96:b7:a9:ba:ce:c1:0a:14:30:75:db:82:92:
ea:1c:9b:af:40:d1:01:dc:f6:91:25:1e:fa:83:20:
0f:13:4f:24:02:72:83:b1:ff:3a:dd:f8:37:35:13:
4f:04:63:0d:22:67:02:40:27:ec:9d:60:05:a3:e8:
cb:92:31:9a:b1:50:42:da:51:d4:1e:f3:30:4f:89:
0f:03:a1:38:27:d1:fa:67:b5:71:e6:60:f4:57:45:
5e:18:5a:ca:74:66:5c:8d:12:ad:2d:31:39:77:88:
89:95:91:9d:10:5c:d5:2b:e2:1e:79:7e:17:46:00:
d0:38:ef:d2:22:81:f8:06:5a:8a:93:aa:ed:66:75:
59:53:0b:aa:69:2f:7d:4c:93:86:c5:b1:a0:bd:07:
0f:cb:ab:9e:7a:60:57:b2:ac:35:87:5d:0c:a7:78:
15:d9:e7:bb:24:6e:d2:11:1d:07:5b:6f:e6:78:1d:
33:e4:22:51:74:86:0a:c4:e9:26:c1:8d:59:85:b8:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:F1:C0:70:0A:EA:C8:09:1A:F5:2B:D6:3E:1A:3D:13:91:CE:9D
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20323134303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:a0:c1:fa:2a:d6:74:0b:3f:bf:99:60:aa:31:4f:b2:49:1c:
fb:f8:ad:eb:35:a0:71:50:84:47:7e:ef:a0:da:94:c1:66:e6:
35:0d:4b:b9:f6:58:14:cc:d6:9a:f7:8f:e4:8c:5a:24:52:35:
a4:dc:89:c2:d7:b2:c5:38:e4:71:e4:08:5f:28:37:14:51:b8:
16:aa:52:3e:7f:9f:21:07:1f:84:2b:0c:da:be:2c:33:88:34:
93:91:c2:03:d5:c2:cd:e0:d2:61:30:48:07:c0:d2:e7:55:ba:
53:68:c9:a5:6d:2b:49:d9:65:d0:53:17:b3:94:f6:9f:b3:fa:
b5:d1:47:e9:2b:a5:27:a0:88:d7:09:63:d3:70:b9:d1:d2:bc:
d5:3c:a5:c6:0f:6a:e6:b8:32:14:d5:5d:76:1f:a4:f3:e2:cd:
4e:fc:65:38:a8:48:09:de:14:5a:67:24:cf:ec:89:65:b2:6b:
ed:b1:92:05:7d:f8:d8:cc:17:5d:89:d2:3f:50:60:f5:28:4c:
16:41:c9:9e:5b:f6:97:b4:f0:9a:da:2e:58:74:fe:db:25:5a:
56:0a:b5:e0:71:06:8d:b3:e8:72:ce:f8:04:42:02:e5:56:24:
a3:70:80:0b:16:01:c7:a4:e1:05:fd:18:f2:fc:1a:fc:fc:7c:
92:77:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:07:52 2026 by rpki-client