Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132392e302f32342d3234203d3e20323135333632.roa
File: 3138382e3230392e3132392e302f32342d3234203d3e20323135333632.roa (raw, json)
Hash identifier: 6Cnw+ByE88w+pXTmPXOl3DmyAFhagN9B9Cv56P2+vbE=
Subject key identifier: 70:03:58:95:C2:82:02:55:12:F5:4C:51:7D:DA:AA:7C:06:F6:D7:65
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 039A2847CEEE7BD6DD57D061688A7787F3709CEB
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132392e302f32342d3234203d3e20323135333632.roa
Signing time: Thu 26 Mar 2026 09:00:55 +0000
ROA not before: Thu 26 Mar 2026 08:55:55 +0000
ROA not after: Thu 25 Mar 2027 09:00:55 +0000
asID: 215362
IP address blocks: 188.209.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9a:28:47:ce:ee:7b:d6:dd:57:d0:61:68:8a:77:87:f3:70:9c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:55 2026 GMT
Not After : Mar 25 09:00:55 2027 GMT
Subject: CN=70035895C282025512F54C517DDAAA7C06F6D765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:0b:b4:2f:28:eb:df:22:62:41:60:25:df:
07:75:9e:76:99:d8:b4:5a:75:b3:99:ea:ef:87:41:
00:db:e7:5c:87:cd:e5:de:00:ab:6e:a8:07:79:08:
63:44:f1:1e:6c:78:74:52:f0:82:5d:55:13:a4:80:
50:6b:ac:ac:7f:0b:b6:c2:ef:22:47:e9:02:a7:ae:
8c:0b:ee:77:ec:43:17:3a:21:fd:32:e0:31:ce:9d:
eb:68:f7:83:13:c1:ca:62:60:fa:2c:8e:d7:e2:fc:
f9:4a:f8:a9:dd:c3:4a:4c:d2:ea:6d:b0:67:62:bc:
78:fe:d7:29:21:65:9f:56:07:1d:68:a1:b0:fd:74:
55:00:e8:99:b9:14:51:a4:3d:56:91:53:d3:5b:5f:
88:a0:a1:39:31:8f:9e:8f:7d:15:79:21:53:29:f5:
ad:a9:a8:e6:28:de:95:54:52:80:43:aa:b5:33:d8:
03:8a:56:61:9d:fc:16:77:7d:54:09:bf:7f:ff:a7:
ac:ee:da:db:47:23:7e:1b:7c:f1:10:2e:6b:59:ce:
82:79:ee:db:43:c2:f8:28:34:dc:c2:60:66:db:8b:
9a:95:73:1b:08:d3:49:76:77:4e:15:b6:3d:9a:52:
aa:89:82:b3:0e:0b:92:6b:63:47:aa:61:0b:fc:ea:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:58:95:C2:82:02:55:12:F5:4C:51:7D:DA:AA:7C:06:F6:D7:65
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132392e302f32342d3234203d3e20323135333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7a:75:85:d1:da:e1:10:32:77:d9:25:bd:08:ec:ce:dc:40:
1e:c0:8d:9c:2b:eb:b2:91:c1:94:b2:34:fd:b6:13:e8:f9:de:
00:70:7f:c8:e5:af:89:5b:18:b6:79:af:85:37:b9:02:c5:fa:
83:80:30:ae:ba:00:12:1c:6b:c8:0b:5c:a6:82:0a:55:99:fc:
a9:95:ea:d8:51:43:c6:99:cc:bb:2a:8e:7c:45:9e:d7:67:ac:
93:0c:d3:98:65:4f:76:e2:2b:92:d0:b5:5a:13:78:62:63:38:
41:36:6e:40:7f:04:9d:12:8d:97:53:f6:3f:d7:63:0f:9e:53:
41:c2:ed:de:2b:81:0e:6e:be:e3:b5:82:33:11:1a:67:b7:8c:
3c:cb:3a:0b:66:b3:46:c1:8a:71:4b:67:fb:64:15:b1:c7:82:
eb:15:ed:f2:77:ef:e0:33:12:c8:60:56:2e:de:67:2a:d6:a0:
e9:ff:0d:c8:d6:98:55:1c:eb:6f:42:f4:4d:51:92:88:b9:3d:
45:09:0a:b1:9a:08:27:5e:53:08:6f:c8:fb:9d:1c:f1:da:59:
06:b0:ba:0b:25:ed:d9:1d:a6:d9:0c:70:bb:70:a9:23:48:65:
12:f5:50:1d:f3:9d:c0:dd:b7:9a:46:df:97:b9:42:7d:bb:25:
12:ea:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:48 2026 by rpki-client