Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132392e302f32342d3234203d3e20323036343931.roa
File: 3138382e3230392e3132392e302f32342d3234203d3e20323036343931.roa (raw, json)
Hash identifier: FYqP8Wya1VyYSGSv6ocFPzkWSTonm/omygD1mJMpPtU=
Subject key identifier: 8C:E5:D0:5F:D9:8C:FE:92:0D:24:CF:28:DC:4C:7D:34:7E:05:AC:2B
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 77629F687B1F96ED1E4FAFE33E50A9FA062311A5
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132392e302f32342d3234203d3e20323036343931.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 206491
IP address blocks: 188.209.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:62:9f:68:7b:1f:96:ed:1e:4f:af:e3:3e:50:a9:fa:06:23:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=8CE5D05FD98CFE920D24CF28DC4C7D347E05AC2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:ef:35:c9:41:0b:90:26:92:96:fc:ea:07:
df:08:b1:c4:2a:6a:62:42:e4:29:8c:11:e2:26:6d:
c7:83:02:0c:68:7b:63:0f:f0:db:6d:30:68:d0:50:
b4:fa:5b:64:cc:f7:18:29:6e:82:20:08:9a:f7:05:
d7:c3:b3:4e:79:c2:00:af:78:67:dc:cf:61:b6:67:
0d:cf:5d:a1:dd:0f:30:7b:3b:13:9d:ef:13:c1:f1:
3c:b9:82:78:d8:53:2c:fb:6a:b4:a4:30:86:d8:aa:
b4:de:ce:f2:1a:e6:64:90:2c:6e:70:81:2d:84:70:
f4:7d:bf:79:96:7f:6a:02:6e:40:05:a5:a4:b1:d6:
2a:e7:84:f8:71:cb:ad:5a:7a:a2:b2:e0:9f:fd:99:
cd:e1:b5:72:be:2b:4d:2c:f9:37:bf:2e:77:d1:b6:
82:e9:e0:57:01:83:ca:1f:c1:e5:d6:48:ec:63:0c:
b7:e3:31:a7:10:ca:60:c4:54:60:34:0e:82:e1:84:
7b:3c:45:fd:cf:0a:91:56:15:a6:4b:22:2e:17:13:
3a:e9:13:3a:0c:3c:f3:89:b1:2a:b9:e3:2e:ab:d4:
6e:12:4e:86:68:6d:7d:fa:7a:07:5b:1f:92:bf:92:
d8:56:fc:94:06:3a:55:a3:21:41:0f:41:23:29:77:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:D0:5F:D9:8C:FE:92:0D:24:CF:28:DC:4C:7D:34:7E:05:AC:2B
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132392e302f32342d3234203d3e20323036343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:15:90:90:8f:1b:49:2e:ec:54:b6:08:12:3c:15:62:f1:d4:
98:e8:44:1f:4a:82:c6:c1:fa:8f:6f:44:9d:ac:8b:eb:31:a2:
ba:43:39:6e:81:e5:2c:a7:15:0e:01:2b:9d:08:3b:7a:a2:63:
3b:b9:e1:eb:3d:d1:8c:2b:77:24:05:6f:e8:76:10:76:7a:c5:
85:c4:b4:ff:3e:6d:e2:43:47:fc:d4:9c:17:ac:e3:55:1c:2f:
e8:64:ac:a2:1a:dc:05:af:84:28:4d:b5:90:08:ce:26:f1:cb:
fb:b6:7d:68:44:a2:ca:48:8b:35:bd:a4:32:4d:9c:2a:dd:f9:
ee:ee:00:c3:f0:15:16:5d:d3:61:dc:f4:02:b8:a7:1c:18:eb:
42:a3:b1:b4:7e:22:2a:89:6e:50:78:e1:4f:e2:cb:5a:c4:b0:
75:7d:ba:48:10:c3:8e:e9:e9:48:f1:5d:89:11:eb:0a:af:fc:
20:ba:84:02:6b:75:e0:01:2b:6a:9a:3c:fe:98:ef:1e:75:0d:
1f:f9:5a:f1:8a:0a:0d:0e:fb:0b:3d:08:e0:42:3b:60:0c:f5:
60:a4:43:a5:08:51:b1:8f:0c:0c:8f:33:89:ab:99:92:0e:fb:
02:b8:90:66:05:ca:b5:c2:3e:00:22:b9:b5:a2:92:04:9b:4f:
c3:b0:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:55 2026 by rpki-client