Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa
File: 3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa (raw, json)
Hash identifier: LEr48TTBO2zzWugWPPuHLZ7bzWe/ko8NE8qfG99SwTU=
Subject key identifier: CD:72:FE:A6:31:D8:33:99:6E:2D:99:AC:B8:F0:45:D1:D3:62:D6:A0
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7A813292B6159976A288D9ED4268A588E9A33936
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa
Signing time: Tue 21 Oct 2025 14:55:09 +0000
ROA not before: Tue 21 Oct 2025 14:50:09 +0000
ROA not after: Tue 20 Oct 2026 14:55:09 +0000
asID: 400909
IP address blocks: 178.208.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:81:32:92:b6:15:99:76:a2:88:d9:ed:42:68:a5:88:e9:a3:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 21 14:50:09 2025 GMT
Not After : Oct 20 14:55:09 2026 GMT
Subject: CN=CD72FEA631D833996E2D99ACB8F045D1D362D6A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:eb:fb:c0:ad:0b:34:db:7d:65:63:aa:18:
6f:88:85:90:a7:8b:72:27:64:2d:1a:df:35:3b:f0:
a0:36:5c:82:c5:47:c5:bf:fa:54:fe:10:97:7b:68:
9e:af:43:96:bd:f7:d9:d3:2f:b2:9f:b8:95:c4:4e:
c1:9c:dc:ec:4f:6b:a1:19:0e:96:d7:41:20:33:a2:
f2:84:ff:d7:ac:f7:5f:d9:b8:1a:ac:93:00:83:d9:
65:1f:64:31:fc:57:1b:a5:a7:85:fe:13:0b:b5:fc:
f9:9d:75:d4:90:97:67:6d:4b:b6:6c:92:6b:f7:f5:
a8:c9:0d:27:bf:96:69:04:0d:fd:fa:a2:a0:d3:18:
b9:ca:27:40:3a:78:0f:7f:e2:5f:61:9b:d6:27:3c:
49:5a:72:c6:46:60:33:05:66:bd:73:e9:d4:60:9b:
51:de:d7:8e:f7:3b:4e:30:34:bc:c4:27:a2:91:6f:
07:84:1e:d1:33:0f:09:28:c9:52:5a:1b:fe:29:84:
1a:9e:f8:89:f2:1d:51:d3:98:d4:fe:b9:5b:02:ac:
b7:7a:2d:90:f9:3f:f5:79:01:7c:fd:14:1e:c9:c4:
f2:2d:00:70:3c:09:10:29:95:20:dd:a7:17:71:12:
0c:c4:3b:44:46:5c:e6:0c:92:83:47:35:c0:ab:dd:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:FE:A6:31:D8:33:99:6E:2D:99:AC:B8:F0:45:D1:D3:62:D6:A0
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138302e302f32332d3233203d3e20343030393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:9b:9f:85:df:5a:34:e4:19:03:45:8a:0d:4e:e2:1d:06:04:
65:db:fb:94:62:ed:d5:29:47:c2:df:a8:1e:f5:d7:44:08:81:
e3:e9:4c:72:40:fb:3a:33:89:2b:ac:df:0a:de:09:79:4f:2d:
db:a0:22:aa:63:59:7e:d9:a0:1f:64:26:df:37:e8:04:91:51:
9f:1d:4d:ba:4d:75:dc:0d:0d:d9:35:e1:a3:f2:14:86:1f:9f:
96:78:fd:3a:06:d1:c4:e7:c9:2b:d5:c6:43:2f:cb:43:a4:d6:
75:16:b0:07:86:35:43:52:08:6f:aa:65:63:4a:0c:3b:10:c9:
71:b9:cf:30:60:9d:7f:92:86:0f:b7:48:5e:21:f5:7d:e3:4f:
c1:57:f4:d3:75:df:75:25:19:26:ee:b6:fc:d7:07:d4:63:d8:
c5:5b:9a:19:d5:06:58:c2:bd:f8:58:d8:65:79:17:15:ea:eb:
69:a6:d2:a4:02:6e:11:11:db:88:d0:2d:ab:c3:5c:3f:c4:27:
8c:fb:f3:31:a5:44:e3:c9:68:74:ff:11:20:f1:a1:92:cb:09:
fc:d3:d3:ca:8f:f7:de:c3:90:00:a4:00:0d:79:cb:ac:c9:e5:
fa:fe:da:fe:22:77:d3:53:b2:fb:79:a3:01:07:01:af:02:72:
83:dd:29:15
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUeoEykrYVmXaiiNntQmiliOmjOTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTEwMjExNDUwMDlaFw0yNjEwMjAxNDU1MDlaMDMxMTAvBgNV
BAMTKENENzJGRUE2MzFEODMzOTk2RTJEOTlBQ0I4RjA0NUQxRDM2MkQ2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZ+v7wK0LNNt9ZWOqGG+IhZCn
i3InZC0a3zU78KA2XILFR8W/+lT+EJd7aJ6vQ5a999nTL7KfuJXETsGc3OxPa6EZ
DpbXQSAzovKE/9es91/ZuBqskwCD2WUfZDH8Vxulp4X+Ewu1/PmdddSQl2dtS7Zs
kmv39ajJDSe/lmkEDf36oqDTGLnKJ0A6eA9/4l9hm9YnPElacsZGYDMFZr1z6dRg
m1He1473O04wNLzEJ6KRbweEHtEzDwkoyVJaG/4phBqe+InyHVHTmNT+uVsCrLd6
LZD5P/V5AXz9FB7JxPItAHA8CRAplSDdpxdxEgzEO0RGXOYMkoNHNcCr3R2HAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUzXL+pjHYM5luLZmsuPBF0dNi1qAwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzAzMDM5MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAbLQtDANBgkqhkiG9w0BAQsFAAOCAQEADpufhd9aNOQZA0WKDU7iHQYEZdv7
lGLt1SlHwt+oHvXXRAiB4+lMckD7OjOJK6zfCt4JeU8t26AiqmNZftmgH2Qm3zfo
BJFRnx1Nuk113A0N2TXho/IUhh+flnj9OgbRxOfJK9XGQy/LQ6TWdRawB4Y1Q1II
b6plY0oMOxDJcbnPMGCdf5KGD7dIXiH1feNPwVf003XfdSUZJu62/NcH1GPYxVua
GdUGWMK9+FjYZXkXFerraabSpAJuERHbiNAtq8NcP8QnjPvzMaVE48lodP8RIPGh
kssJ/NPTyo/33sOQAKQADXnLrMnl+v7a/iJ301Oy+3mjAQcBrwJyg90pFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:47:42 2025 by rpki-client