Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134332e302f32342d3234203d3e2035303635.roa
File: 3138382e3230392e3134332e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: zwkjBGkFFrfMKUv7lzNZK1w+xyn1QCRp1EVOTKJnL6s=
Subject key identifier: 3F:4D:34:FC:48:E2:20:E3:7C:DD:9B:6F:92:67:02:2C:E7:58:DA:7B
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 6A01DF571AA610D65F088574A772069749A209FB
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134332e302f32342d3234203d3e2035303635.roa
Signing time: Thu 26 Mar 2026 09:00:54 +0000
ROA not before: Thu 26 Mar 2026 08:55:54 +0000
ROA not after: Thu 25 Mar 2027 09:00:54 +0000
asID: 5065
IP address blocks: 188.209.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:01:df:57:1a:a6:10:d6:5f:08:85:74:a7:72:06:97:49:a2:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Mar 26 08:55:54 2026 GMT
Not After : Mar 25 09:00:54 2027 GMT
Subject: CN=3F4D34FC48E220E37CDD9B6F9267022CE758DA7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:ef:63:33:0d:4d:e9:68:3f:44:f6:c3:f2:
37:5f:16:3d:41:57:11:3a:a6:58:0f:63:07:80:ac:
bf:27:4b:21:d7:76:2f:99:2a:2b:e6:7a:33:34:47:
79:b8:94:a7:e8:20:45:4c:40:17:c9:aa:f9:d3:2b:
c9:1b:9c:b0:01:0d:78:a5:f6:45:d3:e6:4b:ee:63:
6a:48:f2:28:e2:e8:9b:e9:06:c8:e7:5d:0a:ea:b2:
d0:be:6c:d8:37:02:91:3b:db:da:4a:c0:02:49:62:
e9:5d:3c:2c:7c:9c:4d:6d:f6:10:5a:f4:45:65:af:
d5:59:e2:36:5f:07:75:e7:1d:ed:09:cb:1d:f4:79:
10:21:99:a4:e2:55:d0:cd:e6:4f:9b:b7:69:e6:37:
0d:7f:d2:49:47:ad:7d:85:02:ee:88:23:e9:70:75:
a3:f1:87:52:56:f3:19:a7:4d:7e:b7:41:20:6c:9d:
60:4b:b7:56:61:31:6c:71:9c:79:b7:0f:c3:55:1b:
0d:7d:15:ee:65:fa:e0:99:79:3a:f2:14:71:27:dd:
5c:5c:83:cb:73:98:66:69:3e:b8:c9:ea:5a:ae:c1:
f4:6f:ff:0c:f8:a4:74:46:70:82:cd:0c:aa:12:ce:
65:da:4b:3f:37:11:59:24:c3:af:a4:2d:07:3a:cf:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:34:FC:48:E2:20:E3:7C:DD:9B:6F:92:67:02:2C:E7:58:DA:7B
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134332e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.143.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1a:82:0d:b8:e2:50:69:72:3e:11:ad:26:d3:4e:e3:3b:13:
55:33:ba:28:b4:90:02:87:c1:29:85:26:b9:31:2a:4e:f9:2f:
5c:97:1f:dc:52:df:26:a4:bd:f3:12:e9:5e:35:49:bb:30:6d:
d8:50:a8:10:f6:75:09:2e:47:0d:95:8e:ac:bf:4f:db:d8:9c:
4e:0d:2f:45:cf:57:f3:22:ad:d9:5a:ad:2e:d8:d1:45:c0:bf:
7c:e3:06:43:14:a2:f5:b4:14:d7:f3:4d:2c:82:a1:01:e8:6f:
04:ae:72:0f:23:62:e4:7b:4c:56:db:6f:a1:89:52:81:e2:e3:
99:45:6a:bc:8f:ee:70:8e:fa:66:8a:0e:53:47:b7:0f:69:16:
fc:b0:ec:82:ea:bf:f8:96:08:b7:48:cf:45:d7:7b:bf:32:2a:
81:9c:53:5e:1a:5a:05:d1:4c:e4:8f:45:88:23:f4:77:a0:47:
69:39:e5:84:03:e6:42:4c:32:44:9b:85:0a:e4:59:55:bd:88:
ce:42:b0:92:41:c4:7c:4f:0b:2c:6f:2f:fb:55:f3:4f:bd:68:
28:aa:c7:5e:a9:7d:04:04:42:e2:e2:f3:56:c7:25:92:5a:83:
f4:bb:eb:c0:ce:33:a7:f8:75:8c:7f:2a:44:7f:10:da:da:e3:
61:d8:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:10:20 2026 by rpki-client