Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133332e302f32342d3234203d3e20323036373636.roa
File: 3138382e3230392e3133332e302f32342d3234203d3e20323036373636.roa (raw, json)
Hash identifier: sVoPE7VM5AI02cKNCJFZsm/l4bVu3jAsr+qfUpJfrlw=
Subject key identifier: CC:91:43:AC:F8:79:2D:4A:29:45:5B:36:BA:6D:89:37:73:F6:B7:16
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 5C184460630810008A54C166785D937E6C416848
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133332e302f32342d3234203d3e20323036373636.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 206766
IP address blocks: 188.209.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:18:44:60:63:08:10:00:8a:54:c1:66:78:5d:93:7e:6c:41:68:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=CC9143ACF8792D4A29455B36BA6D893773F6B716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ef:6f:6e:d2:3d:1f:44:0b:72:52:4b:5c:cc:
a3:bf:10:40:3d:c4:57:ad:c5:b0:19:93:0a:13:bd:
18:27:d0:db:de:f4:e6:39:1a:7b:ad:11:99:e2:4c:
19:99:26:96:d2:0a:fd:7d:64:75:9b:b6:8b:1c:23:
04:4b:99:49:d6:21:5a:81:e8:09:55:52:63:82:46:
4a:dc:64:92:66:84:ae:d3:63:26:dd:65:36:a9:62:
bd:22:84:55:29:b0:d5:77:99:6d:a6:9b:b1:bc:28:
1d:19:49:1b:53:79:09:b8:d4:6d:a3:9e:63:f3:e9:
4d:bd:55:0f:ef:17:fe:46:45:35:ad:cc:0f:18:2f:
bc:00:5d:7b:8e:56:dc:52:fa:ed:76:2c:07:1c:9b:
d7:59:68:a5:c6:32:26:4d:b9:55:5d:1c:ae:c7:09:
6c:3c:b4:ab:66:54:66:f5:aa:29:6f:85:46:df:a3:
1f:f1:51:c0:c9:64:ce:da:ef:f0:b6:a2:ce:df:03:
17:c0:0f:4a:01:c5:56:fa:30:37:c2:a8:23:1a:e8:
62:ef:7f:43:81:fb:dd:80:1d:ee:41:f8:23:9a:3a:
1b:2e:7b:75:00:e8:52:cc:a1:1f:50:74:0d:3d:f0:
81:75:f2:37:ff:c5:cc:63:cf:fe:83:ed:2b:2e:27:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:91:43:AC:F8:79:2D:4A:29:45:5B:36:BA:6D:89:37:73:F6:B7:16
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133332e302f32342d3234203d3e20323036373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bb:12:36:ca:7c:6e:33:11:c0:a8:8e:98:3e:00:2c:67:ab:
8a:df:c9:1b:c9:54:8a:0a:a4:8e:3b:3b:fd:eb:db:07:cc:05:
e0:35:d2:01:f9:5c:a8:a4:0f:12:d2:48:0e:99:d0:fc:9c:88:
0b:4f:8c:48:2a:09:cf:d2:12:6d:fc:cc:9c:92:a2:07:7a:75:
83:e2:8c:01:43:10:fa:45:9e:af:d0:e8:6b:bb:7c:1b:89:de:
60:a4:8c:b2:d8:6a:3e:d4:cc:34:7c:eb:08:36:ae:3c:c6:43:
93:23:5b:98:19:db:48:1a:65:cc:90:13:70:62:be:a9:15:fa:
9f:b7:01:b7:21:84:d3:d5:02:11:cf:a5:ed:13:a0:29:44:4d:
f8:db:25:dc:54:89:fc:1b:76:5a:df:cb:d8:23:a9:6b:0d:ec:
2b:03:79:81:d1:d3:aa:97:57:2d:a6:ca:e1:d0:6f:4b:e5:dc:
28:97:d9:02:f0:be:58:5b:91:2d:be:e1:03:31:89:8d:13:a0:
e3:a5:0e:62:b4:c7:45:ef:0a:10:c0:a2:27:7d:7c:64:ef:32:
d1:12:c9:8b:9d:5a:16:e3:df:73:36:6e:25:2f:f9:b9:ce:88:
b2:ff:c2:e6:aa:ad:73:11:fb:61:05:81:1f:6c:e9:19:c2:56:
07:91:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:35 2026 by rpki-client