Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa
File: 3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa (raw, json)
Hash identifier: 59JiaM+96f2GGI58G66J7kMi7SECXHU3pMBtmGYwmoQ=
Subject key identifier: 96:D1:E5:73:4F:50:9B:B7:72:02:08:7F:85:89:02:6A:C9:73:8C:A0
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 63FE97A48E4EA466C75645FBE37351FDD9CAFCAF
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa
Signing time: Sat 06 Jun 2026 21:47:29 +0000
ROA not before: Sat 06 Jun 2026 21:42:29 +0000
ROA not after: Sat 05 Jun 2027 21:47:29 +0000
asID: 32167
IP address blocks: 178.208.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fe:97:a4:8e:4e:a4:66:c7:56:45:fb:e3:73:51:fd:d9:ca:fc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 6 21:42:29 2026 GMT
Not After : Jun 5 21:47:29 2027 GMT
Subject: CN=96D1E5734F509BB77202087F8589026AC9738CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:d1:b6:fa:3d:f0:c8:41:b9:2e:b5:af:49:
e7:c9:49:ad:73:74:de:4b:86:8e:ce:3a:06:43:ce:
01:71:63:d3:a9:22:bb:9a:6f:50:34:b7:db:a0:26:
a7:3e:87:83:d8:e3:5c:28:81:d0:2d:6b:72:7c:32:
01:b1:b1:93:81:eb:d4:05:2f:2c:7a:b5:5e:56:ea:
68:48:ec:bb:6c:f8:31:83:e4:9f:78:20:ec:d6:8f:
d3:5a:17:c0:86:74:63:c9:34:f3:93:5b:d7:99:b0:
35:39:e2:88:fd:14:e6:64:7e:7e:b1:a4:62:9e:d5:
4d:14:1c:56:f3:39:f3:0f:bb:9e:66:da:99:4c:85:
a9:aa:78:07:70:b3:01:b7:8c:ae:65:76:7e:77:cf:
3d:02:84:19:4d:0b:22:ae:9c:f7:85:6c:7d:d3:29:
77:5d:b5:47:02:cb:91:4e:b5:b1:f8:a3:c2:08:db:
41:1f:16:36:de:b0:34:12:ca:97:1f:57:2b:02:29:
e9:0a:c5:b4:83:85:5c:62:74:0c:5f:bd:2d:06:9f:
5a:39:1a:15:ee:4e:05:11:c3:e7:a9:c6:42:ab:a4:
c6:b5:0d:26:d4:95:78:1a:e0:5e:14:a7:5e:0f:64:
1e:c3:14:63:8e:99:f0:8e:23:10:6e:66:7a:5a:2d:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:E5:73:4F:50:9B:B7:72:02:08:7F:85:89:02:6A:C9:73:8C:A0
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138382e302f32342d3234203d3e203332313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c9:fc:de:85:26:ba:bb:07:41:40:7c:a4:be:4a:f4:5c:b7:
2a:b6:45:dd:cf:3a:52:8a:87:24:ef:09:7c:9a:e2:e0:e1:be:
05:d2:94:54:45:92:55:2b:57:e4:5a:e3:9b:b5:0b:98:75:8e:
a0:cc:a9:a7:2f:25:1a:e2:ca:c6:18:4c:71:8f:35:de:ba:1c:
30:38:6e:1b:19:e4:4d:08:2c:0d:28:c8:db:68:9d:c0:58:d1:
f9:26:9a:8c:f3:dc:1d:6d:74:1c:b8:82:72:3c:c1:93:d8:29:
96:85:80:14:20:3f:3b:08:ab:3a:ce:16:92:5e:5f:94:46:18:
33:93:81:dd:c6:8a:1b:15:43:3b:ae:c7:da:04:48:20:32:ef:
31:ef:f3:97:e6:56:86:fc:5c:3c:41:96:f1:f0:89:20:25:6c:
e5:2d:70:3f:3f:b7:55:8f:08:08:91:13:2c:92:03:e9:b6:13:
70:b0:e3:61:4f:ff:06:41:b6:8d:fe:67:10:25:a3:7f:5a:1c:
ec:83:8b:26:d5:b0:ea:7f:64:28:49:ec:22:9a:c4:44:5b:0e:
f0:40:1b:2d:40:93:f8:01:d7:34:2d:2f:fd:ae:ce:c7:40:86:
b9:36:dc:3c:7e:91:42:e7:8e:14:55:41:58:52:c6:af:14:0e:
04:f0:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:42:00 2026 by rpki-client