Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133352e302f32342d3234203d3e20383334.roa
File: 3138382e3230392e3133352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QBd35YI6bMXvhyT9jySQIJyRvtqEoMjN10pK6/TLObs=
Subject key identifier: 7B:1B:BD:61:A6:C5:BC:1E:10:4F:26:40:98:6B:A8:C0:BB:A2:9F:89
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 5BE955DD5C2DF45B731F06EDE926EDB59D1D8EE0
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133352e302f32342d3234203d3e20383334.roa
Signing time: Thu 26 Mar 2026 09:00:56 +0000
ROA not before: Thu 26 Mar 2026 08:55:56 +0000
ROA not after: Thu 25 Mar 2027 09:00:56 +0000
asID: 834
IP address blocks: 188.209.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e9:55:dd:5c:2d:f4:5b:73:1f:06:ed:e9:26:ed:b5:9d:1d:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:56 2026 GMT
Not After : Mar 25 09:00:56 2027 GMT
Subject: CN=7B1BBD61A6C5BC1E104F2640986BA8C0BBA29F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d1:46:13:04:ea:4a:22:fb:aa:44:c5:38:fa:
a5:d7:51:49:5a:be:33:bd:23:14:c1:b0:a5:bb:43:
73:fa:79:4c:e2:81:b3:fe:62:29:09:e1:b8:16:58:
ff:48:18:c9:0e:bc:7a:bc:36:bc:dc:73:f5:11:ba:
7d:d6:7a:f2:ad:c7:0d:c6:90:d7:ea:8f:a6:29:34:
8f:9d:f3:f2:67:f9:8b:30:9f:eb:1e:09:a1:23:21:
61:3d:86:b9:fc:19:e3:c4:ab:24:6b:2b:bd:77:48:
49:63:63:29:c2:05:4a:8f:51:8e:b8:0d:0b:85:ef:
63:31:05:5e:88:b7:eb:15:69:53:1d:a3:b6:4d:6c:
43:e7:cd:c4:e2:5c:b1:09:3c:e3:27:ae:b7:88:93:
52:17:29:8e:ba:bf:34:2a:ec:5a:24:09:fa:36:c3:
bb:ad:f1:3d:ed:fd:ee:52:ad:bc:2f:7f:10:64:6a:
b5:27:23:49:5c:96:af:7b:96:3e:fc:3a:9c:31:54:
69:f2:36:f8:12:d2:fb:1f:2b:fc:ac:8a:5d:d5:52:
c3:e0:f5:90:fd:ae:fb:f3:77:49:3b:f0:0d:5f:db:
de:9b:33:5b:59:2c:99:dc:98:3b:bb:be:38:b3:d9:
22:a2:c8:71:b5:69:e0:c3:6a:ef:0e:27:1a:25:b7:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:BD:61:A6:C5:BC:1E:10:4F:26:40:98:6B:A8:C0:BB:A2:9F:89
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
60:07:2b:c4:c0:f2:b9:f0:f0:92:67:20:6d:cc:e2:7e:f2:e1:
c3:f1:20:14:54:fa:53:30:81:15:da:51:c4:54:0d:96:dc:1d:
b7:32:b5:a8:bd:1a:54:77:af:c4:1e:3a:7c:70:30:83:ae:32:
f6:88:34:b9:25:2d:32:59:97:96:82:04:6e:49:c1:2f:90:1b:
00:b0:22:ae:d0:05:da:67:45:a0:e0:68:0c:fd:e6:6a:2b:8d:
b1:b1:a1:89:6d:5f:b9:a8:d8:89:9d:bb:de:2d:19:cc:e0:e6:
13:e4:d4:ba:33:2d:a2:9e:93:3f:15:7e:ef:ca:f6:f8:9b:65:
6d:7f:47:d0:07:aa:3d:53:2c:5c:22:ef:b1:75:98:18:d0:ee:
42:f4:e3:aa:2d:f0:8f:e3:55:8a:73:f8:82:90:69:72:15:64:
18:f7:3c:ae:b6:0e:e0:d9:f3:a5:ab:74:f5:78:f9:38:02:fb:
55:5c:30:aa:58:9a:4a:a4:c3:bc:93:2b:1d:8a:36:5e:3b:7b:
e1:44:cc:19:77:7c:1a:54:99:e7:3a:03:84:66:95:98:c3:5a:
f3:1c:af:3a:b3:50:cf:37:c6:70:be:ab:3a:eb:97:7b:da:a5:
ad:d3:9e:82:06:55:bb:2a:f3:42:8b:d1:e5:ba:78:13:c3:28:
45:76:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:25 2026 by rpki-client