Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20323033303537.roa
File: 3138382e3230392e3133372e302f32342d3234203d3e20323033303537.roa (raw, json)
Hash identifier: KrpJT0rPOvPEDZbJ399/eFDk5Pq6wxpN/Z4gdNWOEh0=
Subject key identifier: F5:89:13:55:0F:A8:01:6D:4D:44:6D:F4:7B:87:0C:37:89:C2:57:0F
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 79DE482FCE00970743ECA031B12CAAE072E05BDE
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20323033303537.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 203057
IP address blocks: 188.209.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:de:48:2f:ce:00:97:07:43:ec:a0:31:b1:2c:aa:e0:72:e0:5b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=F58913550FA8016D4D446DF47B870C3789C2570F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:bf:85:72:c2:cf:78:0a:23:51:c6:c6:9a:
ce:5a:c7:e3:86:08:f5:b4:b9:9e:a9:78:8b:bd:36:
ba:ee:bb:99:7f:20:87:96:4f:6e:2c:f0:e0:64:48:
cb:aa:72:72:ac:f7:53:ab:c8:99:b7:48:9c:1e:36:
37:2e:4c:c8:30:d4:64:f7:18:c6:79:02:35:fe:b7:
fc:df:bd:30:a7:6a:4a:2d:12:1e:8f:ce:56:3d:f1:
5b:c7:2b:b2:0d:ab:17:cb:87:31:f0:6d:b4:7d:16:
22:eb:a8:fc:48:ce:1a:4e:e9:f2:20:32:f9:26:75:
24:52:e7:be:2f:13:38:c3:05:a7:d0:a1:38:d3:4e:
f4:bb:49:4e:e8:fd:84:ac:f5:e1:18:b4:0e:37:e6:
84:a0:73:1c:fd:9a:93:35:87:33:14:e8:c9:79:c2:
00:29:57:03:d1:b0:e7:7f:a6:8d:b7:ec:d9:bf:1e:
25:fc:8b:09:8a:de:89:89:2e:be:a7:26:5b:0c:19:
ec:8d:d2:e2:5d:b8:d4:54:8e:f3:ca:2c:bb:3f:9c:
14:0e:06:65:9c:08:35:bc:38:ee:b9:6f:0d:94:de:
0c:1f:8d:94:88:21:c1:bc:b9:18:cb:3c:c0:42:b4:
4a:64:1e:b9:c1:46:8e:aa:14:56:fb:6f:76:a6:b7:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:13:55:0F:A8:01:6D:4D:44:6D:F4:7B:87:0C:37:89:C2:57:0F
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20323033303537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:19:4f:16:9e:3a:7a:1c:f3:d0:9d:26:a6:4e:30:69:14:67:
c2:ae:ac:ee:49:d5:91:29:ad:ba:87:39:23:d9:7d:50:59:d2:
59:05:e1:98:76:44:50:93:69:fb:50:7e:73:4f:ee:0f:1b:3e:
80:4b:5c:39:41:ce:e2:55:b9:76:61:11:07:6c:fc:9a:f2:71:
fc:6a:e3:e8:7a:66:9d:b8:7d:e3:d4:26:37:9e:f5:41:ec:59:
f4:ae:34:14:fd:2b:0a:4c:57:67:5e:73:29:2b:18:ad:fa:0d:
11:64:b6:bd:bb:de:42:69:de:71:02:d5:27:2f:f5:56:df:25:
5d:6f:c9:28:be:bd:56:ab:f6:18:da:33:98:4a:70:a1:4e:91:
81:f1:31:6b:30:9d:85:ca:9d:7e:b0:fe:96:5f:15:74:1f:76:
2e:05:c3:6b:d3:4d:71:96:ce:2f:13:34:68:c3:3a:84:3d:c3:
7d:bf:95:66:c8:67:58:54:d9:ac:d7:ea:f8:2d:e7:ea:1f:c4:
8a:94:79:ac:db:97:2c:c1:20:8c:9d:e5:e0:40:01:6d:79:71:
d0:78:b7:e4:44:0d:91:7e:ee:12:21:46:a7:9f:70:5b:e0:be:
9e:30:a8:b9:94:87:00:cb:14:4f:54:1f:ca:b6:70:2f:39:62:
d7:c2:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:57 2026 by rpki-client