Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133392e302f32342d3234203d3e2034353933.roa
File: 3138382e3230392e3133392e302f32342d3234203d3e2034353933.roa (raw, json)
Hash identifier: sdy/7vlckVWLluCJRv+2KK89vNFAPvG5KVmxoUcywWQ=
Subject key identifier: EB:D6:BB:01:98:0C:8A:13:EF:35:A9:9A:E9:BF:70:F0:9E:4F:53:19
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 1D70FACF51DAF7BC9415FA3BB6F333332EA3B837
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133392e302f32342d3234203d3e2034353933.roa
Signing time: Wed 06 May 2026 06:54:28 +0000
ROA not before: Wed 06 May 2026 06:49:28 +0000
ROA not after: Wed 05 May 2027 06:54:28 +0000
asID: 4593
IP address blocks: 188.209.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:70:fa:cf:51:da:f7:bc:94:15:fa:3b:b6:f3:33:33:2e:a3:b8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: May 6 06:49:28 2026 GMT
Not After : May 5 06:54:28 2027 GMT
Subject: CN=EBD6BB01980C8A13EF35A99AE9BF70F09E4F5319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:53:25:38:2d:c0:4e:27:c5:47:b9:f7:52:
58:a4:fe:bc:6f:82:c7:c4:ab:26:3d:c0:22:fc:51:
ef:e4:86:30:c5:e6:f2:15:8d:f1:8d:1e:29:c7:1a:
cd:63:aa:05:5d:3d:de:16:eb:91:db:95:19:2c:54:
19:de:a7:1f:0d:05:89:79:a0:6e:1d:73:f5:34:32:
64:3e:4b:da:d3:97:73:cc:d5:c2:ff:16:c5:8e:c3:
fb:d7:eb:00:34:02:57:05:4c:05:c7:71:5b:02:2f:
73:42:7d:59:66:f4:d3:98:7f:d3:dc:8f:de:4d:b5:
d7:c2:34:27:38:70:d7:67:49:47:24:54:55:b9:1a:
8d:1f:b8:35:30:8d:12:89:69:45:a0:e6:9d:33:bf:
6d:7f:37:8b:9a:c9:d0:a0:d9:a0:68:6e:af:ee:65:
7f:ad:ff:01:f2:6b:35:9b:5a:f0:79:a0:01:9f:7e:
f5:cd:d0:30:63:09:3c:6f:a1:c6:4b:81:99:92:0c:
c2:b2:96:d7:f9:00:ae:e1:d0:3f:30:27:a2:d0:89:
3a:d3:7b:93:cc:5b:04:bb:51:98:c3:d8:d3:e3:e3:
8f:d9:9d:9e:a6:45:fd:cb:cd:ff:18:c9:5e:cf:31:
9d:58:37:c1:dd:18:78:71:69:43:23:ad:eb:d6:54:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D6:BB:01:98:0C:8A:13:EF:35:A9:9A:E9:BF:70:F0:9E:4F:53:19
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133392e302f32342d3234203d3e2034353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.139.0/24
Signature Algorithm: sha256WithRSAEncryption
51:70:72:9b:3e:07:44:a8:de:31:1c:ff:aa:83:88:47:76:31:
b8:bf:00:5c:55:6e:6d:ed:24:34:57:99:fa:7d:56:fe:71:e2:
da:f2:ad:8b:ff:bd:44:0c:ce:24:36:d0:c2:43:1c:f2:a8:7a:
23:e0:dd:5e:38:72:96:ce:3a:7a:a4:35:5c:40:18:12:3b:dd:
93:8a:bf:62:49:2c:fd:9a:7b:26:48:cf:60:4e:af:bd:7d:d6:
3b:bc:84:d9:42:08:a6:f2:60:65:cf:98:3e:71:65:0e:ec:77:
bc:5e:34:0a:70:ec:56:39:5f:b9:0c:f3:11:58:5a:54:d0:18:
fd:8c:b5:03:9b:dc:85:5f:49:61:b4:b9:1e:ca:9b:0c:4e:ca:
17:38:eb:03:0d:ca:97:92:b2:98:0a:66:10:79:a6:52:77:63:
d6:76:b5:9c:bb:dd:e0:10:73:cd:39:88:3f:51:70:60:77:f4:
20:b7:f9:75:7a:79:23:e1:13:5b:ad:51:27:74:ca:36:0b:f6:
04:3e:1b:25:b9:ca:c8:01:6a:5a:e6:47:3b:6f:a1:64:f0:22:
97:1b:b4:46:50:f7:f6:da:9c:1d:0a:16:6a:3a:58:eb:71:c9:
83:f5:89:29:1e:1d:8f:09:50:af:e1:90:ac:e8:46:ed:16:bc:
65:7c:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:41 2026 by rpki-client