Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133332e302f32342d3234203d3e20313332333335.roa
File: 3138382e3230392e3133332e302f32342d3234203d3e20313332333335.roa (raw, json)
Hash identifier: zmISaFKnsxPy8vX4Nhbf02ov7cpITVzLAi3fcj/4DK0=
Subject key identifier: B7:A6:9A:89:27:DB:C7:2B:CC:E8:E8:E5:FF:7B:41:15:4F:23:29:CE
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 265D5FBE8880B0C5BF4A2FEA27B5DF80C889F064
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133332e302f32342d3234203d3e20313332333335.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 132335
IP address blocks: 188.209.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5d:5f:be:88:80:b0:c5:bf:4a:2f:ea:27:b5:df:80:c8:89:f0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=B7A69A8927DBC72BCCE8E8E5FF7B41154F2329CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:6f:8c:9b:a1:b0:d7:70:1b:5f:37:b3:3e:
d2:80:4c:0b:d7:07:b8:c2:4c:9b:93:63:63:a7:ac:
77:49:cb:81:42:0c:dc:f4:f3:c0:68:d0:97:1b:bb:
16:07:cd:fa:c5:14:52:96:0e:5a:3a:dd:41:25:77:
a0:f9:cc:a4:38:97:4c:66:74:d4:1e:f5:1a:94:27:
c8:db:19:ce:1a:9c:8b:e4:92:4f:f3:44:3c:f1:3d:
cf:7f:a2:c1:cd:80:ac:32:1e:45:b8:ee:45:2c:ff:
e2:e2:e7:09:24:b3:ff:2e:b2:90:86:9c:55:72:1e:
aa:07:82:04:94:df:85:48:64:4f:6e:51:62:af:a3:
5b:90:3f:75:79:84:a7:d7:13:2c:c2:95:12:8f:4f:
a0:22:19:37:a4:19:e1:79:1a:8a:59:b2:c6:1b:4d:
e5:9b:dd:7c:6b:85:53:62:d8:f9:7f:90:8d:cf:31:
4a:9c:46:a9:40:d2:c2:23:62:96:a8:d1:8a:ce:2f:
68:99:24:54:21:a0:fe:ed:fd:82:4c:70:bf:ae:b4:
66:cd:53:32:59:e2:b7:e0:95:ec:de:01:b6:3b:88:
6f:c0:69:8c:45:e8:46:a9:bc:8a:5c:c9:b3:f5:35:
1d:6b:4f:1d:1a:2f:9a:d3:c4:75:f2:76:c0:27:ac:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:9A:89:27:DB:C7:2B:CC:E8:E8:E5:FF:7B:41:15:4F:23:29:CE
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133332e302f32342d3234203d3e20313332333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:57:aa:0f:46:ae:6a:a8:c0:5c:98:8b:36:b2:7f:c5:e2:16:
3e:a6:67:01:24:f0:69:d3:3f:e2:eb:a8:8e:81:50:0e:d6:da:
08:73:e3:bc:dd:bd:90:1b:4e:6d:d4:f7:f9:4b:a8:ca:5e:cd:
1a:0e:d7:ab:f9:fb:95:bb:e1:50:44:ea:60:06:a8:6c:5a:82:
69:55:e7:3c:64:de:29:b3:0a:bd:c3:96:d6:7b:99:44:b8:b2:
bf:9f:1b:fd:83:16:06:b0:3e:a0:63:06:36:d2:cb:c4:3b:7c:
b9:fc:13:db:d2:43:96:95:3c:7c:b7:67:c1:73:b0:c4:5c:23:
39:dc:56:0b:12:b8:f0:d6:c8:3e:d0:a1:7b:7a:b2:cd:4c:b0:
bb:69:7e:e4:2a:8f:f4:56:4f:c4:e3:d8:84:0e:a5:e4:9b:cb:
c6:54:89:04:77:c1:e3:b2:da:30:a9:dd:91:4d:2b:83:22:73:
4c:2e:67:47:76:95:01:a2:dc:3a:66:46:12:ed:23:78:c4:46:
b8:8a:b2:58:f4:22:f9:8f:ed:15:07:ef:d9:2a:c8:1d:5d:8b:
f4:18:a3:9a:92:13:00:10:cf:c2:81:5b:92:72:e2:9c:27:99:
8e:2e:16:a1:1e:40:63:a9:5c:04:5e:ea:3f:81:0b:a0:df:d0:
00:42:b4:fb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUJl1fvoiAsMW/Si/qJ7XfgMiJ8GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NGJjNmQwMjUxMzViZWQ5NTM5Nzc5YTAzZmRkNjRh
YmViYTExZjAeFw0yNjAzMjYwODU1NTRaFw0yNzAzMjUwOTAwNTRaMDMxMTAvBgNV
BAMTKEI3QTY5QTg5MjdEQkM3MkJDQ0U4RThFNUZGN0I0MTE1NEYyMzI5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4m+Mm6Gw13AbXzezPtKATAvX
B7jCTJuTY2OnrHdJy4FCDNz088Bo0JcbuxYHzfrFFFKWDlo63UEld6D5zKQ4l0xm
dNQe9RqUJ8jbGc4anIvkkk/zRDzxPc9/osHNgKwyHkW47kUs/+Li5wkks/8uspCG
nFVyHqoHggSU34VIZE9uUWKvo1uQP3V5hKfXEyzClRKPT6AiGTekGeF5GopZssYb
TeWb3XxrhVNi2Pl/kI3PMUqcRqlA0sIjYpao0YrOL2iZJFQhoP7t/YJMcL+utGbN
UzJZ4rfglezeAbY7iG/AaYxF6EapvIpcybP1NR1rTx0aL5rTxHXydsAnrHqDAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUt6aaiSfbxyvM6Ojl/3tBFU8jKc4wHwYDVR0j
BBgwFoAUc3S8bQJRNb7ZU5d5oD/dZKvroR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTQyNTg1ZjctYmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0
N2QyLzAvNzM3NEJDNkQwMjUxMzVCRUQ5NTM5Nzc5QTAzRkRENjRBQkVCQTExRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzUzhiUUpSTmI3WlU1ZDVvRF9kWkt2
cm9SOC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTQyNTg1Zjct
YmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0N2QyLzAvMzEzODM4MmUzMjMwMzkyZTMx
MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjMzMzMzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALzRhTANBgkqhkiG9w0BAQsFAAOCAQEApVeqD0auaqjAXJiLNrJ/xeIWPqZn
ASTwadM/4uuojoFQDtbaCHPjvN29kBtObdT3+Uuoyl7NGg7Xq/n7lbvhUETqYAao
bFqCaVXnPGTeKbMKvcOW1nuZRLiyv58b/YMWBrA+oGMGNtLLxDt8ufwT29JDlpU8
fLdnwXOwxFwjOdxWCxK48NbIPtChe3qyzUywu2l+5CqP9FZPxOPYhA6l5JvLxlSJ
BHfB47LaMKndkU0rgyJzTC5nR3aVAaLcOmZGEu0jeMRGuIqyWPQi+Y/tFQfv2SrI
HV2L9BijmpITABDPwoFbknLinCeZji4WoR5AY6lcBF7qP4ELoN/QAEK0+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:16:09 2026 by rpki-client