Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3139312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: h69PePBYvhoZKMh3KRaIZlKqkhzxzXb6Ggrza5a2dmE=
Subject key identifier: AE:32:1F:F9:1F:5D:E7:46:EB:FF:91:96:0A:DA:70:A4:1B:63:82:6C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6A28C9C4A25B3293632D1ACE565ECBE551A9CE84
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 07:04:06 +0000
ROA not before: Mon 07 Sep 2026 06:59:06 +0000
ROA not after: Mon 06 Sep 2027 07:04:06 +0000
asID: 834
IP address blocks: 178.208.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:28:c9:c4:a2:5b:32:93:63:2d:1a:ce:56:5e:cb:e5:51:a9:ce:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 7 06:59:06 2026 GMT
Not After : Sep 6 07:04:06 2027 GMT
Subject: CN=AE321FF91F5DE746EBFF91960ADA70A41B63826C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:80:bc:48:28:b9:a9:99:af:6f:52:aa:0e:
c5:9e:80:67:7b:2b:05:1b:0f:37:37:18:a0:1e:a4:
74:a0:ed:bf:79:dc:ff:bc:32:95:02:db:b5:1e:31:
62:c8:6e:95:de:5e:99:74:03:97:bb:73:45:04:ce:
65:bd:4e:f9:a5:6b:98:b6:54:a9:dc:81:07:a4:54:
cb:9c:b9:df:d6:01:71:78:54:72:58:15:85:02:c2:
6b:5c:76:90:12:16:0e:a2:8e:d9:53:39:8e:d5:2f:
ea:5b:1e:73:6b:79:70:86:c2:10:48:50:ae:94:a2:
24:a2:8a:cb:77:fb:1a:1d:83:48:03:79:39:d5:be:
ec:0b:b1:54:1d:01:9e:df:1b:3b:88:c3:91:83:ea:
b3:62:95:c2:89:55:12:44:e4:4b:7e:12:dd:5a:16:
64:6c:71:bd:07:9e:fb:80:fd:a8:05:fe:60:c0:38:
3a:1e:e8:f0:cf:e4:bf:cc:58:77:d4:af:0d:fc:12:
86:3e:89:48:59:33:a0:42:eb:e9:73:00:4f:bc:13:
fe:79:97:21:29:0b:8f:b7:2a:17:34:4a:99:03:02:
cc:3b:03:e2:30:37:a8:46:8b:5e:7e:94:9d:d4:b3:
3c:cc:69:37:5f:01:38:b8:e0:bf:61:e5:2d:0a:b3:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:32:1F:F9:1F:5D:E7:46:EB:FF:91:96:0A:DA:70:A4:1B:63:82:6C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3139312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0e:f5:7a:86:a7:e1:f7:c6:55:d5:8c:17:99:6d:c5:15:8c:
92:21:31:4b:39:2b:03:f4:f6:48:b6:92:b2:fd:8d:cb:93:09:
d0:2b:bb:46:ee:a7:bd:02:4b:a5:42:80:f5:92:4e:e0:5d:03:
5d:62:54:24:94:25:2d:ea:97:99:4a:64:0f:63:87:7c:e7:45:
b0:43:18:c8:9b:2b:04:b8:52:33:40:05:d4:89:cd:0b:85:42:
48:61:b2:79:9c:ab:79:10:aa:09:05:53:98:fc:6a:d0:31:65:
13:b9:a1:14:52:09:f9:7d:2b:86:b6:f0:05:25:c4:ac:a1:5b:
ac:45:6b:09:b7:a8:de:d3:74:59:b8:8d:a1:80:2b:f0:79:69:
6b:ad:99:d3:36:63:01:30:3c:d1:8e:e0:09:89:af:82:c2:b6:
46:8e:4f:4b:00:1a:04:d5:89:2a:3e:19:a2:07:87:f2:93:01:
96:5d:6b:58:17:2d:cd:9e:94:a7:d8:ca:ee:a8:a2:31:88:66:
89:d3:72:3e:27:74:bc:c3:f0:58:62:29:5e:6c:29:ab:32:7c:
96:8b:89:06:93:e8:a2:95:76:b0:d7:71:20:de:15:2d:fe:a0:
69:7f:ee:b8:9c:a7:01:95:9f:af:4c:32:38:09:08:eb:d6:5d:
6e:aa:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:57:04 2026 by rpki-client