Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133342e302f32342d3234203d3e20323138333138.roa
File: 3138382e3230392e3133342e302f32342d3234203d3e20323138333138.roa (raw, json)
Hash identifier: oACIf9EdNRbFfK8soE6FX6NVg7w2yOj3em2s8a8Tbe8=
Subject key identifier: 5F:13:75:90:DB:C3:0D:50:2A:7E:E6:FE:A5:F2:43:B2:6F:A4:EF:FB
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 24828B729A463C36CBEF85463120AF066A4AEC01
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133342e302f32342d3234203d3e20323138333138.roa
Signing time: Sat 24 Oct 2026 16:28:11 +0000
ROA not before: Sat 24 Oct 2026 16:23:11 +0000
ROA not after: Sat 23 Oct 2027 16:28:11 +0000
asID: 218318
IP address blocks: 188.209.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:82:8b:72:9a:46:3c:36:cb:ef:85:46:31:20:af:06:6a:4a:ec:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Oct 24 16:23:11 2026 GMT
Not After : Oct 23 16:28:11 2027 GMT
Subject: CN=5F137590DBC30D502A7EE6FEA5F243B26FA4EFFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:f8:53:72:83:f1:73:f1:aa:96:68:89:58:
a2:13:78:bc:c6:0d:d9:ca:b7:b7:e1:f9:8d:c2:aa:
9b:a3:b0:ae:34:a8:ba:50:c6:4f:ef:27:7c:65:8b:
78:70:dc:58:dc:28:ac:70:75:0e:5b:3d:e3:18:a5:
9c:73:2c:be:83:e3:1a:7e:56:21:20:28:d0:d6:ab:
5f:21:26:6f:d7:ac:ed:b3:56:ba:bf:50:12:30:07:
2d:2e:9a:c2:f8:9d:cc:6f:a5:dc:ac:ad:b0:b5:cb:
5c:8a:37:32:83:25:9a:85:4d:b9:35:29:39:14:f9:
a4:d6:80:d7:97:f7:f4:6c:c2:a4:b2:29:1b:e0:19:
25:ab:c9:9e:75:0b:12:32:9b:f6:04:98:e0:2d:5f:
b5:1f:00:1b:e8:78:7c:07:bc:0f:82:3f:8e:51:9d:
ad:81:36:44:39:da:b7:58:4e:4a:78:69:6c:94:96:
27:1e:a7:ad:09:38:9b:cc:1c:18:bc:c7:fb:d3:c5:
09:6a:e4:b7:49:c2:d7:2c:15:41:9a:da:32:4f:1f:
50:4a:93:7b:0a:39:45:5d:1f:85:bd:70:db:cb:57:
39:d6:08:9c:b2:37:87:bf:37:fb:21:40:15:9a:87:
04:7c:9e:1e:80:cc:9c:49:a1:3e:5a:0c:6d:0f:51:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:75:90:DB:C3:0D:50:2A:7E:E6:FE:A5:F2:43:B2:6F:A4:EF:FB
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133342e302f32342d3234203d3e20323138333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:de:47:ab:37:64:0b:49:a2:20:0a:56:2d:4b:80:1b:94:05:
31:4e:0d:8d:0f:8f:08:26:60:81:0e:48:b0:48:24:2a:f9:5b:
32:ce:c7:b4:5b:b6:bc:2a:0c:6b:04:dc:3a:87:f4:68:9f:08:
d1:b6:16:d2:e7:9c:78:28:12:f6:6b:d7:e3:cf:2a:9f:6b:d5:
4b:94:e5:50:a8:a7:c9:ce:f5:b9:7e:b3:50:4d:29:55:6c:34:
15:0f:98:5b:6b:e3:b4:f3:a2:b7:f8:c6:19:1b:d5:a3:4d:2c:
69:51:eb:d3:dc:02:7a:26:60:54:58:87:0b:e2:29:86:86:a9:
06:8e:22:f8:22:da:bd:86:7a:93:a8:4e:35:78:da:68:ab:2e:
3f:57:25:67:f9:c6:dc:91:4f:e6:dd:a0:fd:78:b9:c8:a5:e6:
60:10:b5:dc:89:af:c1:7d:9c:81:f3:6c:e1:30:83:0e:c3:de:
fa:f0:d1:60:1b:86:79:33:dc:9c:e5:9e:66:20:bd:3a:f2:0d:
e0:9f:68:bf:53:2d:68:40:08:14:e8:e9:89:b9:18:44:bd:a8:
f3:dc:1e:09:a6:0e:6e:01:89:c3:72:f9:c4:ea:df:e7:b3:30:
72:4c:b0:9c:51:49:cd:e2:e3:76:db:92:3e:0e:d7:77:39:e1:
04:76:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:24 2026 by rpki-client