Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134322e302f32342d3234203d3e2035303635.roa
File: 3138382e3230392e3134322e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: 1n4UkblxjLAoakEAX4cSwddg1oAI/3s1pChy+gvEgIc=
Subject key identifier: 65:F4:AE:73:46:09:27:9E:59:41:CA:39:67:ED:04:74:9D:55:64:7D
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 1765760F81BE37ACB35EEF87EE8C86CC050E25BA
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134322e302f32342d3234203d3e2035303635.roa
Signing time: Thu 26 Mar 2026 09:00:56 +0000
ROA not before: Thu 26 Mar 2026 08:55:56 +0000
ROA not after: Thu 25 Mar 2027 09:00:56 +0000
asID: 5065
IP address blocks: 188.209.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:65:76:0f:81:be:37:ac:b3:5e:ef:87:ee:8c:86:cc:05:0e:25:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:56 2026 GMT
Not After : Mar 25 09:00:56 2027 GMT
Subject: CN=65F4AE734609279E5941CA3967ED04749D55647D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:30:c5:ed:81:2b:f8:22:76:15:0f:08:06:
3a:df:e4:0e:45:40:94:59:e5:7b:2b:3c:ba:c2:01:
e7:6e:0a:9b:43:67:57:5b:a4:c6:30:a8:c9:65:6f:
c3:ff:1c:3c:62:01:a2:3a:d1:05:35:5c:f6:19:8f:
80:26:7b:ad:f5:97:a3:0d:14:5f:69:b8:fe:3b:2b:
80:13:dd:19:ce:03:74:dd:22:ed:ff:ab:6f:21:c9:
52:e0:6f:b5:7a:bc:a7:c4:53:8e:f8:36:13:f3:52:
3d:89:ea:2f:6f:b5:b6:b2:05:1f:fd:98:b8:7c:36:
f8:46:57:fc:cc:cd:db:5c:9e:61:fa:59:23:e3:68:
5d:c0:0e:b3:45:d6:ab:3b:c4:09:ac:83:97:69:e0:
93:38:77:63:3d:5e:68:ca:dc:aa:cd:bb:a6:61:07:
25:2f:62:bf:d4:60:c9:b5:8f:af:12:cf:2b:c9:ef:
2c:3d:51:13:61:57:94:e0:4b:14:f2:fd:01:3c:51:
e0:d5:9d:6c:71:c4:8d:fe:d2:96:5c:ec:81:e3:11:
73:4b:d5:f3:4e:cb:13:ab:00:0d:3a:c7:95:0f:c4:
08:8d:b1:e7:6f:c6:76:f7:1a:26:c0:11:19:4f:98:
15:5c:37:6c:73:c4:a4:e7:eb:03:a6:cf:fb:d9:91:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:AE:73:46:09:27:9E:59:41:CA:39:67:ED:04:74:9D:55:64:7D
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134322e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.142.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9e:77:fa:0c:75:7b:ef:a8:2c:65:b8:05:79:97:03:c9:6a:
04:0a:76:bd:41:22:02:64:d8:de:83:f2:ed:57:4e:19:12:74:
4c:1f:54:80:e1:52:7f:bd:ff:09:77:46:96:e1:03:b2:4f:bd:
b7:32:a9:3f:44:a4:39:d5:56:bb:ff:78:ae:36:ca:23:64:1c:
1d:2f:d8:6a:12:53:b0:67:34:99:d1:e9:a1:17:0a:61:0b:66:
9a:31:81:c3:c9:a3:b0:31:4a:59:27:37:55:e6:e8:18:fa:00:
07:24:d8:d0:4b:b8:1e:ed:91:0d:01:75:fa:06:20:44:aa:7d:
2c:fb:f6:ee:6e:24:06:5b:d6:97:b0:30:0a:fa:74:5c:46:23:
6f:41:4f:fe:19:16:82:af:05:5d:b1:c8:10:86:0c:4b:eb:c6:
74:b6:05:b5:01:34:36:d2:06:1d:93:07:ff:4e:7e:8a:a8:f0:
c3:e6:f3:3a:2e:da:9c:51:f2:2e:88:18:37:d5:14:38:8e:0d:
ce:93:09:00:ef:bf:2d:56:8b:1a:ba:bf:c0:ad:af:71:cf:7a:
eb:95:d5:fe:bb:4c:3a:36:20:af:ab:32:20:3b:9f:17:51:04:
8b:ed:54:f9:d3:8e:8b:3e:c2:9f:5b:11:70:c0:5a:96:9b:14:
31:79:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:53 2026 by rpki-client