Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133382e302f32342d3234203d3e20333935383339.roa
File: 3138382e3230392e3133382e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier: FRMwrClsUjST/YZmt0KGAEXxTWgp5RGzJVn/EPoE/5c=
Subject key identifier: 18:C5:04:52:30:9F:86:92:12:D5:92:B1:3F:BE:2E:21:F1:11:03:CD
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 3A1347C5DC4B1FAFB8B0CBCD258D337A998AC7FF
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133382e302f32342d3234203d3e20333935383339.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 395839
IP address blocks: 188.209.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:13:47:c5:dc:4b:1f:af:b8:b0:cb:cd:25:8d:33:7a:99:8a:c7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=18C50452309F869212D592B13FBE2E21F11103CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:c5:c6:e6:0c:d7:d8:46:78:3b:e9:91:dc:
b8:59:66:19:75:e3:72:7c:c2:9d:4c:9f:28:3c:df:
fd:75:15:cb:ed:68:8a:88:cf:31:9a:de:19:29:e4:
eb:9b:5f:54:6e:df:8c:5a:8d:da:fc:1c:c9:53:61:
e8:73:72:bb:d7:6e:50:93:1f:88:98:06:38:b4:a4:
a3:f3:d6:97:f2:4a:2e:00:ac:8e:22:2c:22:4d:ed:
3b:ab:8d:04:da:4a:99:15:12:ea:cc:59:04:06:57:
89:af:a9:47:cd:3c:cb:56:47:5f:cc:fa:62:ca:73:
6d:1c:91:da:38:15:53:2e:1c:e3:39:b5:52:23:0d:
67:ff:f6:8b:c7:62:0e:10:6e:98:e3:24:74:7a:4e:
65:c5:9c:f1:57:05:1e:ee:d2:d7:85:65:6e:bf:d3:
6d:c7:f9:96:b8:91:32:b8:f7:68:8a:e6:1e:5a:c2:
7e:d8:f4:5f:49:f2:11:76:bb:c0:3e:7a:4b:cb:1c:
85:55:57:81:2c:d8:a1:ea:de:f8:ce:c9:c5:95:c9:
47:6f:c8:b2:9f:98:58:d6:41:8a:f6:9e:5d:cc:20:
59:a2:70:ca:c0:4a:19:37:6f:a5:30:82:9d:95:ba:
f2:c3:aa:39:32:ca:8e:f4:8b:7d:a0:a8:83:7b:9f:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:04:52:30:9F:86:92:12:D5:92:B1:3F:BE:2E:21:F1:11:03:CD
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133382e302f32342d3234203d3e20333935383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.138.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d7:13:9f:59:e7:ef:8b:19:0c:38:67:bd:98:b2:d0:12:fe:
6c:2e:b9:f8:6b:fd:a5:cf:ec:1c:11:fb:fc:d3:d0:29:04:46:
a1:d1:ee:86:0e:07:fe:74:04:b6:6f:8a:dc:12:33:ab:f3:4c:
9a:e5:5f:d9:d0:5f:e8:e1:1e:14:8d:61:12:e9:47:c3:c0:2e:
ca:6c:f6:34:a7:aa:45:88:ea:57:51:5a:92:bd:48:ee:8a:e7:
8c:d0:d2:ef:2a:36:06:e7:a7:d8:71:e6:e7:23:97:8f:9f:fb:
cb:ec:29:4c:55:97:da:4b:de:15:0e:8b:ff:67:b7:53:7d:57:
14:eb:ed:27:ae:c2:dc:51:ac:b6:27:a6:51:27:68:29:ce:c2:
37:37:11:0d:a1:d6:ae:4e:25:03:c5:55:51:5e:f0:ce:b4:4c:
74:20:52:d4:03:0b:b4:62:c7:f8:6a:5a:f5:2e:62:d8:cd:99:
a3:d7:9e:b9:5a:1d:88:8d:b9:21:22:39:37:97:7a:2b:ce:a9:
f4:85:69:df:c2:5a:f3:ef:31:cb:89:e5:25:ae:a3:d8:5e:e4:
e9:15:56:1f:c8:43:fd:09:89:5b:53:42:22:b5:d6:ea:c0:c7:
2f:eb:ac:b2:ff:0e:95:36:4b:f7:26:b3:c3:28:07:3d:39:5c:
5d:cd:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:36 2026 by rpki-client