Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20323131363933.roa
File: 3138382e3230392e3132382e302f32342d3234203d3e20323131363933.roa (raw, json)
Hash identifier: 8FUy8VjQhNsKgFTp8h3iZqa+zvJkIW7rGiqk7+Wzx0M=
Subject key identifier: C5:76:F6:CC:BF:48:AE:54:A6:07:1F:D2:AE:8C:E3:71:06:39:A8:E6
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 3B250FB7A5401C096001388B95C819A2D2094B55
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20323131363933.roa
Signing time: Mon 07 Sep 2026 12:12:44 +0000
ROA not before: Mon 07 Sep 2026 12:07:44 +0000
ROA not after: Mon 06 Sep 2027 12:12:44 +0000
asID: 211693
IP address blocks: 188.209.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:25:0f:b7:a5:40:1c:09:60:01:38:8b:95:c8:19:a2:d2:09:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Sep 7 12:07:44 2026 GMT
Not After : Sep 6 12:12:44 2027 GMT
Subject: CN=C576F6CCBF48AE54A6071FD2AE8CE3710639A8E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:9c:77:51:06:bf:78:c5:a8:05:37:d8:31:
90:ab:e7:c3:fb:ec:c9:94:d5:47:59:65:ed:7b:0d:
da:95:a3:41:17:6c:0f:20:31:44:38:eb:78:a4:1a:
03:90:87:68:f7:a8:49:53:58:b7:a3:6c:49:d2:72:
64:85:71:55:9d:6f:ba:79:96:9d:1b:c5:28:b9:6c:
86:79:f9:05:b3:bf:4a:e7:5e:d0:dc:c5:b9:a3:8a:
f1:32:d0:e0:2a:b8:83:24:bd:ca:c4:fd:cc:b6:89:
74:3b:84:e7:a1:e8:bd:82:3c:1e:56:ac:40:bd:e5:
4a:5b:c6:44:0f:fc:35:71:fe:f6:6a:26:80:46:71:
ab:60:68:ca:48:58:a2:a6:5b:39:99:6c:00:48:13:
9b:31:87:da:87:2c:6a:5b:46:6f:91:5e:69:06:7e:
2c:26:bc:b3:e7:9b:24:dd:f3:49:88:fd:de:2a:62:
99:ae:27:f7:c7:1f:05:e4:17:37:28:bf:1f:62:d3:
10:fc:f1:f6:fa:2c:c9:0b:e0:66:d7:95:79:07:22:
d3:c5:90:f0:1b:42:48:2c:1b:69:2c:bc:e9:67:ab:
02:f3:db:da:e5:bb:1e:26:74:75:97:41:4f:14:8d:
a9:50:db:88:82:e5:12:03:a6:27:14:69:a4:38:a0:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:76:F6:CC:BF:48:AE:54:A6:07:1F:D2:AE:8C:E3:71:06:39:A8:E6
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3132382e302f32342d3234203d3e20323131363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:57:6f:6f:49:95:c0:e2:a2:63:39:aa:ec:84:a4:21:3d:b4:
43:2e:06:97:ea:9b:b4:af:9b:e4:a1:ed:b3:58:1e:09:7d:f6:
25:67:f2:a2:ae:68:a2:66:24:a2:0b:c7:60:64:da:1a:70:c4:
87:80:d8:98:9c:02:a3:42:6d:d6:5c:4f:e4:c8:1f:f0:08:9b:
61:5c:98:44:17:bf:62:d5:07:c7:6e:6e:6f:13:9c:91:00:5d:
e3:eb:c3:52:b7:f8:4a:07:4e:e4:73:47:76:80:b2:7d:24:9d:
1a:db:98:ae:07:fc:33:98:fa:95:4e:39:bd:b2:99:28:c0:87:
c8:9d:d4:79:f1:16:0e:1f:c9:f4:ff:43:23:8c:39:4d:73:fe:
93:62:16:c4:cd:fd:72:c9:e9:24:13:34:cc:28:90:c7:a5:4b:
c5:ea:96:29:f8:47:3b:cf:d4:8e:f1:99:e6:a2:da:cb:46:88:
12:f4:68:a4:1d:70:45:34:67:29:fe:e9:cc:41:fd:7e:95:08:
a6:47:85:fd:8b:d2:d5:1e:82:0e:19:70:12:8d:6a:cc:e2:b1:
09:0c:f8:7f:29:10:eb:d7:a0:ed:7a:10:bc:8e:f9:41:1d:9f:
1d:84:59:2b:c1:9b:5b:8e:39:73:58:2a:75:cf:8d:bb:3e:da:
b9:a7:c3:61
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUOyUPt6VAHAlgATiLlcgZotIJS1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NGJjNmQwMjUxMzViZWQ5NTM5Nzc5YTAzZmRkNjRh
YmViYTExZjAeFw0yNjA5MDcxMjA3NDRaFw0yNzA5MDYxMjEyNDRaMDMxMTAvBgNV
BAMTKEM1NzZGNkNDQkY0OEFFNTRBNjA3MUZEMkFFOENFMzcxMDYzOUE4RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTQZx3UQa/eMWoBTfYMZCr58P7
7MmU1UdZZe17DdqVo0EXbA8gMUQ463ikGgOQh2j3qElTWLejbEnScmSFcVWdb7p5
lp0bxSi5bIZ5+QWzv0rnXtDcxbmjivEy0OAquIMkvcrE/cy2iXQ7hOeh6L2CPB5W
rEC95UpbxkQP/DVx/vZqJoBGcatgaMpIWKKmWzmZbABIE5sxh9qHLGpbRm+RXmkG
fiwmvLPnmyTd80mI/d4qYpmuJ/fHHwXkFzcovx9i0xD88fb6LMkL4GbXlXkHItPF
kPAbQkgsG2ksvOlnqwLz29rlux4mdHWXQU8UjalQ24iC5RIDpicUaaQ4oJJBAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUxXb2zL9IrlSmBx/SrozjcQY5qOYwHwYDVR0j
BBgwFoAUc3S8bQJRNb7ZU5d5oD/dZKvroR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTQyNTg1ZjctYmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0
N2QyLzAvNzM3NEJDNkQwMjUxMzVCRUQ5NTM5Nzc5QTAzRkRENjRBQkVCQTExRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzUzhiUUpSTmI3WlU1ZDVvRF9kWkt2
cm9SOC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTQyNTg1Zjct
YmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0N2QyLzAvMzEzODM4MmUzMjMwMzkyZTMx
MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM2MzkzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALzRgDANBgkqhkiG9w0BAQsFAAOCAQEAbFdvb0mVwOKiYzmq7ISkIT20Qy4G
l+qbtK+b5KHts1geCX32JWfyoq5oomYkogvHYGTaGnDEh4DYmJwCo0Jt1lxP5Mgf
8AibYVyYRBe/YtUHx25ubxOckQBd4+vDUrf4SgdO5HNHdoCyfSSdGtuYrgf8M5j6
lU45vbKZKMCHyJ3UefEWDh/J9P9DI4w5TXP+k2IWxM39csnpJBM0zCiQx6VLxeqW
KfhHO8/UjvGZ5qLay0aIEvRopB1wRTRnKf7pzEH9fpUIpkeF/YvS1R6CDhlwEo1q
zOKxCQz4fykQ69eg7XoQvI75QR2fHYRZK8GbW445c1gqdc+Nuz7auafDYQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:43 2026 by rpki-client