Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20313337353137.roa
File: 3137382e3230382e3138322e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: HC8l15ehCkiVmpeCd9aGXKMNagkMUf8LsEXSWjkiv8U=
Subject key identifier: E0:E0:FE:5A:35:6A:B1:92:A2:2F:CA:32:90:A5:9A:90:7D:14:45:69
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 17E3C57023298F57DBA95ACAB8B3C8298346F858
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20313337353137.roa
Signing time: Tue 03 Feb 2026 04:29:31 +0000
ROA not before: Tue 03 Feb 2026 04:24:31 +0000
ROA not after: Tue 02 Feb 2027 04:29:31 +0000
asID: 137517
IP address blocks: 178.208.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e3:c5:70:23:29:8f:57:db:a9:5a:ca:b8:b3:c8:29:83:46:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Feb 3 04:24:31 2026 GMT
Not After : Feb 2 04:29:31 2027 GMT
Subject: CN=E0E0FE5A356AB192A22FCA3290A59A907D144569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:1c:d8:2f:6f:b3:8d:c3:28:3a:9a:2b:6d:
8a:a5:b1:40:60:05:c3:e7:41:fb:b8:a0:68:e9:ad:
91:78:15:e9:bd:87:95:ad:1d:ba:10:33:57:64:6f:
1d:6a:17:39:62:39:13:cb:c4:61:3e:49:19:8c:57:
9e:79:c4:6c:41:c3:03:c3:53:f8:40:5c:0b:32:d1:
59:76:2c:bb:f0:45:44:dc:48:f8:af:b6:1e:10:53:
c9:a4:2a:0b:30:4c:ee:e5:d9:e3:5b:2b:0f:9a:63:
9d:b1:7d:55:b0:84:91:f3:c1:91:f7:a4:0a:25:9a:
0f:21:23:31:0e:6b:31:f5:dd:01:fd:52:43:69:93:
12:34:46:1a:81:5d:3e:98:1a:1a:fa:56:25:e8:ef:
29:08:9c:be:e2:41:e5:04:11:9f:8e:e7:a8:44:e3:
9f:8e:05:31:5e:0a:5a:ac:2e:4e:4d:34:9a:6e:6b:
d6:17:5a:fd:76:a5:da:7c:63:7b:a6:c1:b2:fc:64:
52:d8:89:45:4f:fa:64:6e:ed:79:9f:ee:d7:0d:8d:
63:fa:ab:7e:17:ed:f4:e8:67:66:93:52:0c:c6:8e:
da:2e:62:ad:b5:95:4b:cb:40:e0:60:da:87:92:a6:
86:e1:4b:4f:fa:7d:3f:f7:12:0c:c7:29:00:2c:7b:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:FE:5A:35:6A:B1:92:A2:2F:CA:32:90:A5:9A:90:7D:14:45:69
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138322e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.182.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f8:c4:bc:2e:00:75:fc:10:39:23:99:88:3b:41:ec:4a:da:
dc:37:49:20:3a:d2:33:8d:ac:5b:b2:5f:04:e3:1a:ad:e4:d8:
79:d1:13:09:11:27:b2:32:a6:ab:94:04:a8:64:4e:3a:d5:a1:
ce:bd:82:f9:71:2d:2d:df:89:9e:c5:57:20:67:7f:48:59:0d:
af:df:7d:ef:39:77:b5:55:6b:e0:53:f0:b7:53:a1:99:d8:68:
9a:cc:c5:00:11:9f:e6:dc:fc:24:37:0b:df:a7:86:91:30:0f:
78:18:5b:be:2b:e3:aa:a3:44:ad:1a:b2:0e:05:6c:0e:b0:0a:
98:94:ba:a1:64:95:04:b3:ee:a5:d4:d6:d9:0b:75:17:fc:2a:
5d:ca:7f:d2:f5:9a:40:87:31:ea:63:46:33:4a:10:2a:d0:23:
bb:21:57:d2:f8:9b:e4:f3:61:f7:90:f4:ec:9f:9f:b8:c1:db:
56:56:68:e9:7c:71:61:9c:05:4d:e5:91:d0:82:24:f2:7b:c2:
0e:e7:4b:35:d8:d4:4b:50:23:9e:98:f2:3f:f8:5d:34:03:14:
fd:6b:39:81:dc:57:9f:09:de:af:53:df:66:1f:06:78:ea:e4:
9b:00:64:e1:48:55:d3:a0:73:3c:2b:67:87:cb:f3:72:71:2f:
d6:bf:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:04:47 2026 by rpki-client