Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa
File: 3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa (raw, json)
Hash identifier: P3nDFv/XEXq40JiMDM0XCy70fFurf3vo5p0HbzTGqbY=
Subject key identifier: 7B:11:FC:23:30:B8:32:72:81:BE:AB:23:59:1D:62:BD:88:CC:B4:D1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1D7B050005D7F371239AC766EFBE222D4004E799
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa
Signing time: Tue 31 Mar 2026 15:46:57 +0000
ROA not before: Tue 31 Mar 2026 15:41:57 +0000
ROA not after: Tue 30 Mar 2027 15:46:57 +0000
asID: 213426
IP address blocks: 178.208.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7b:05:00:05:d7:f3:71:23:9a:c7:66:ef:be:22:2d:40:04:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 31 15:41:57 2026 GMT
Not After : Mar 30 15:46:57 2027 GMT
Subject: CN=7B11FC2330B8327281BEAB23591D62BD88CCB4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:d5:e7:cf:2c:71:84:48:53:95:a9:4d:ef:
30:42:10:55:05:a7:eb:22:9d:3a:c6:22:8a:b4:f4:
75:7d:78:c3:96:17:32:cc:98:2c:a1:df:e3:55:79:
30:4e:04:dc:7a:c9:dd:0c:2d:04:17:7d:c5:57:00:
53:e6:d3:6d:07:e9:b7:b2:86:0f:8c:0c:b7:12:23:
cd:b7:8c:30:38:57:01:95:3a:10:3c:ca:b2:62:66:
ee:9d:60:ed:8f:f2:6e:c1:bf:02:90:29:ab:1a:39:
b6:08:e0:33:fb:9c:2c:4a:c8:d8:65:b6:23:b8:4b:
7e:94:c7:1f:95:3e:4e:31:8c:e6:47:84:e4:85:c6:
c1:02:1a:f2:a0:b6:3b:23:bd:06:3b:ec:d7:09:00:
9b:5e:67:74:29:c4:c2:e5:37:7b:5b:0d:73:b1:11:
09:81:cd:0e:51:85:c3:8e:b7:79:b8:87:4b:27:a3:
48:ca:92:0a:87:84:eb:f4:08:cb:53:a0:d8:af:1b:
ab:c0:6f:56:76:4c:05:aa:8d:6b:57:d1:59:78:02:
5d:82:b1:60:d7:d3:31:33:20:d3:28:8f:5a:38:f0:
27:65:16:dc:d2:d0:91:c6:a7:87:bd:89:0c:9f:03:
5c:7d:73:86:63:12:49:7b:d3:ca:39:73:3d:12:be:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:FC:23:30:B8:32:72:81:BE:AB:23:59:1D:62:BD:88:CC:B4:D1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9d:fd:d7:49:b3:92:9e:22:95:13:b7:2e:4d:bc:d4:b4:33:
58:e5:66:15:4f:ea:f7:66:de:5d:b8:c0:d6:0a:55:6c:fb:28:
0b:06:b6:c0:52:7b:0c:d9:8c:10:3e:ba:5e:28:98:81:a8:46:
84:14:87:5f:90:8a:93:de:0f:bf:4b:2b:04:e5:82:c9:31:0b:
57:ec:d9:c3:bf:3e:09:9b:5e:30:8f:67:d4:aa:51:c3:49:c4:
1f:3e:49:a2:cf:14:7f:92:c5:7c:3a:a6:6f:46:1d:7f:26:6d:
a7:90:1a:1d:f7:62:e5:ca:04:a2:51:4b:c8:4c:86:f0:d3:20:
7c:92:4b:aa:8d:69:a1:6c:49:74:a1:28:4a:da:c6:27:36:31:
6b:dc:13:bd:13:51:80:a4:26:97:e3:fc:27:fd:6b:e5:33:6e:
3d:97:1a:89:15:a1:83:da:ec:0f:16:38:20:95:34:64:1a:96:
c9:a6:35:c6:e0:01:b6:0e:bc:e9:95:23:a8:d2:ce:0c:c5:00:
37:5b:f4:08:7c:90:9e:60:38:90:2c:f4:1e:b5:ab:6f:3f:6e:
10:04:73:4c:5d:c9:5d:ac:68:13:7c:db:d2:5d:e3:80:b9:f1:
18:8e:c1:b2:6f:d6:11:0e:49:06:74:7e:a1:83:8e:f9:e7:2d:
32:8e:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:32:55 2026 by rpki-client