Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133342e302f32342d3234203d3e20343031333632.roa
File: 3138382e3230392e3133342e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: xQwMknVADkt9SdX7ZbmlZhbVP3DUJMtwOCCCAVSEUcg=
Subject key identifier: 15:F9:32:84:5C:2F:42:CB:8B:21:D5:8F:90:70:A3:41:02:E3:69:73
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 05B8D5C37B0B133F132A244522572DAEB5D14F41
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133342e302f32342d3234203d3e20343031333632.roa
Signing time: Mon 14 Sep 2026 12:46:39 +0000
ROA not before: Mon 14 Sep 2026 12:41:39 +0000
ROA not after: Mon 13 Sep 2027 12:46:39 +0000
asID: 401362
IP address blocks: 188.209.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 21:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b8:d5:c3:7b:0b:13:3f:13:2a:24:45:22:57:2d:ae:b5:d1:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Sep 14 12:41:39 2026 GMT
Not After : Sep 13 12:46:39 2027 GMT
Subject: CN=15F932845C2F42CB8B21D58F9070A34102E36973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:dd:08:ed:7a:47:03:7f:d1:b5:b5:a6:f1:
3a:85:07:0a:7f:65:71:1e:97:7c:28:4b:ed:2c:ea:
08:d9:a7:66:81:1e:2e:1e:4f:80:93:4f:86:e7:5c:
dc:93:82:74:5c:a1:89:e5:53:26:00:47:1a:1d:69:
c0:7f:4e:ec:e1:f4:f9:86:9b:7a:f1:e7:82:3f:38:
45:7e:7f:72:cc:ec:cd:58:32:20:e5:b2:4b:45:9a:
12:06:a6:08:fc:dc:e7:0c:04:f1:6a:3d:dd:9b:dd:
d8:59:66:8d:4b:9b:da:ff:c6:3c:63:39:43:ad:aa:
50:af:3f:bb:be:2f:cb:db:77:b5:91:4c:a1:14:f2:
94:61:09:99:26:34:23:14:c3:b9:58:99:1b:19:0a:
eb:f7:3e:57:fa:63:52:ac:0d:28:82:0a:81:de:77:
75:6b:6e:12:29:fa:2b:68:fc:b4:9c:a2:b6:9d:16:
6b:0b:18:08:7f:7e:75:04:0a:4c:b8:41:00:4d:5d:
c8:33:73:6d:06:ba:be:61:fe:ef:d8:63:88:44:91:
fb:ce:d7:2f:89:4f:d3:c0:5c:ca:e4:d8:2d:db:10:
e5:0e:9d:4b:8b:df:9b:ac:84:6a:4d:df:70:e4:d4:
3f:c7:c7:4e:11:6c:52:87:f5:1a:f8:c6:8b:67:b2:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F9:32:84:5C:2F:42:CB:8B:21:D5:8F:90:70:A3:41:02:E3:69:73
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133342e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2f:2e:fe:98:47:72:23:6a:4a:da:09:9d:31:e6:97:75:96:
31:39:66:fb:dd:44:1e:19:f1:e6:61:f1:5d:ca:28:37:fe:93:
28:7a:73:ec:08:58:00:7b:90:cc:df:24:18:79:03:bf:9e:55:
b7:0c:1e:c6:eb:b4:30:c7:86:09:53:5b:e0:8f:fd:3e:60:ff:
46:15:85:3f:45:d3:c8:fe:f2:81:97:0b:bd:97:42:7e:39:02:
55:9e:b0:47:2c:91:6c:8c:2b:37:23:78:7f:05:81:10:fa:64:
1e:79:9b:39:d6:21:a0:8a:14:0e:d5:63:07:3f:91:07:c3:ec:
d5:e8:f8:66:36:6e:68:1b:66:01:38:a7:88:60:48:c5:2c:2c:
cc:88:99:89:5e:8a:5c:da:be:c8:8d:6c:6d:0c:e9:66:ff:89:
d7:da:89:26:de:c5:34:52:49:89:8e:f9:24:a6:37:87:0e:5f:
64:63:47:20:36:4f:9c:64:74:af:23:a5:4d:11:ba:2c:3b:7d:
bf:9e:94:54:65:9b:95:96:33:83:be:63:14:7c:71:dd:a7:ca:
32:fe:a8:cc:89:cc:31:d4:17:9a:e3:af:f1:d5:c9:29:73:fc:
70:c0:ae:a4:31:76:81:a1:97:58:bb:8e:a9:a7:91:a1:b0:c7:
5e:a4:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:21 2026 by rpki-client