Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa
File: 3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa (raw, json)
Hash identifier: kBbZRubySzKg3/VFzJQljJXkD+bYF0N0Vo1H2uqvmms=
Subject key identifier: 32:A3:DC:5F:5D:ED:9D:F1:F5:9F:08:F0:62:C9:01:F9:38:E3:93:79
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 54017FF1252F68C1F68790CA17960520128C28BE
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa
Signing time: Thu 23 Oct 2025 14:55:09 +0000
ROA not before: Thu 23 Oct 2025 14:50:09 +0000
ROA not after: Thu 22 Oct 2026 14:55:09 +0000
asID: 400909
IP address blocks: 178.208.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:01:7f:f1:25:2f:68:c1:f6:87:90:ca:17:96:05:20:12:8c:28:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 23 14:50:09 2025 GMT
Not After : Oct 22 14:55:09 2026 GMT
Subject: CN=32A3DC5F5DED9DF1F59F08F062C901F938E39379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:9a:2c:fe:db:aa:4b:3c:18:6a:76:4f:e0:
5c:44:00:27:c0:b0:36:93:cf:9b:eb:b0:fa:15:63:
79:86:19:33:1c:91:a2:05:34:8d:81:a5:c8:dd:17:
b3:a6:e5:22:f7:41:d0:43:0e:8d:01:d9:64:48:14:
d2:be:19:5f:76:45:f8:1f:fd:8e:c5:66:ea:d2:88:
95:99:a6:27:3f:d7:f7:cf:1c:c3:fa:09:c0:98:ec:
3f:9b:ac:76:a0:26:9e:cf:34:54:98:ad:02:ae:1c:
56:c1:07:3a:2e:63:56:47:74:8e:64:07:1e:c3:6f:
f6:8a:64:cb:e5:a4:c1:14:2b:e5:70:65:ee:66:8e:
f4:e9:8f:22:9c:bc:b9:d3:60:1a:82:b9:f3:a3:8a:
0f:68:69:ed:78:04:08:cf:4d:80:e7:17:5e:8f:d5:
e4:fb:17:c6:60:ef:a1:b6:21:d2:90:dd:46:ac:3a:
44:32:b8:54:05:79:b6:93:92:54:75:d2:ea:47:e3:
b9:22:9b:9f:71:53:ba:93:0c:8f:9c:79:39:59:1e:
3e:ff:e2:98:32:c7:cc:73:91:f9:ca:1b:b8:82:ee:
dc:f0:6a:9b:9d:52:ef:fc:dc:00:43:66:25:07:d1:
b9:0b:12:c7:66:7b:6c:21:3f:02:53:82:da:88:df:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:DC:5F:5D:ED:9D:F1:F5:9F:08:F0:62:C9:01:F9:38:E3:93:79
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.178.0/23
Signature Algorithm: sha256WithRSAEncryption
23:33:a1:b8:3a:03:ca:d9:ae:f3:e8:73:55:b7:bb:30:a8:14:
fb:5d:80:f3:99:f7:fb:1a:d8:2e:db:ea:b9:fa:c8:9a:d8:e0:
2e:99:56:02:41:ab:d0:81:01:78:1b:03:f1:86:4e:a3:0d:f6:
f8:bc:a2:71:55:f9:5e:da:48:2c:71:70:d5:6c:77:f8:e6:07:
98:f8:3d:a6:a6:e3:3d:d0:72:5c:6d:e4:87:d7:63:db:31:5c:
1e:dd:1e:e1:80:70:8e:0d:bc:f9:dc:d0:c6:03:f1:c8:2e:9c:
cd:08:c3:60:60:09:8e:99:60:d0:2b:69:91:ab:b1:75:f6:b7:
5b:48:41:8d:38:05:ab:4d:0c:5c:99:cd:da:9e:e7:50:42:fa:
90:d1:9f:45:fd:36:28:30:52:0d:f6:05:58:f8:e0:f6:6d:ce:
d4:1c:c7:bb:4b:05:86:5e:c5:31:00:ad:0f:52:70:c0:3b:6a:
f5:99:0a:20:ae:63:9e:e3:a5:47:56:31:86:cb:dd:e1:01:11:
b4:32:0a:a2:89:66:08:5e:a3:1e:bc:23:8b:82:b0:9e:d3:99:
42:91:0b:68:3f:9f:82:58:4e:2a:3b:be:06:57:d2:ab:41:dd:
28:38:78:4a:0a:1d:c5:68:f8:92:ac:34:4b:7d:7f:fb:e0:b9:
04:35:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:18:59 2025 by rpki-client