Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20383334.roa
File: 3138382e3230392e3133372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PUVWJ9eRwx/mDx42wNRSKWqKj7d/F9aQTY9ZKKOtl7Y=
Subject key identifier: D8:EF:A4:E7:47:1D:45:70:06:E2:B5:CF:E9:C0:2E:97:3D:E1:EF:00
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 59D6B7623E7B1047AFF82C2C019DE512466846C6
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20383334.roa
Signing time: Wed 01 Apr 2026 00:24:19 +0000
ROA not before: Wed 01 Apr 2026 00:19:19 +0000
ROA not after: Wed 31 Mar 2027 00:24:19 +0000
asID: 834
IP address blocks: 188.209.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 10:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:b7:62:3e:7b:10:47:af:f8:2c:2c:01:9d:e5:12:46:68:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Apr 1 00:19:19 2026 GMT
Not After : Mar 31 00:24:19 2027 GMT
Subject: CN=D8EFA4E7471D457006E2B5CFE9C02E973DE1EF00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:81:da:5d:7f:89:a2:41:7e:f4:a4:ac:26:
fd:f1:57:7c:44:6d:62:ac:42:dc:ab:09:eb:de:a5:
9d:5b:f0:62:24:b1:2e:5a:2f:8b:f0:6f:25:b9:70:
9a:cc:95:8e:84:22:9f:2e:97:d8:45:ee:8d:c5:4d:
89:56:c2:63:55:e8:44:3f:00:19:8b:de:4f:b8:48:
a9:6d:fc:29:04:3e:77:67:fe:31:7d:c8:ae:5a:01:
34:9f:1e:49:e8:be:f5:2a:22:2e:ee:7d:25:7e:a7:
a2:fd:c4:a8:87:8a:8c:35:5a:33:36:ed:9d:20:9e:
2d:c5:39:82:7d:25:25:20:64:29:84:2f:ce:ae:5c:
7d:e5:b5:64:a0:fa:17:59:43:6c:df:86:3e:13:de:
02:f4:1d:aa:48:b5:d0:05:43:a7:ba:c5:77:5c:00:
4d:4c:f3:73:f9:80:fe:9a:fc:9f:05:2f:8d:4a:9d:
17:98:d1:4b:09:61:ac:41:70:29:34:58:fe:84:2f:
97:57:27:e5:f8:46:1d:13:3d:a3:03:0c:2a:be:ce:
47:a4:6a:57:07:35:ff:fc:d4:a3:31:90:0f:46:d0:
46:a3:bb:74:7c:a4:2b:35:20:67:a1:41:60:81:52:
a3:2f:93:cf:d3:f9:f4:16:26:68:d8:f2:27:6a:85:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:A4:E7:47:1D:45:70:06:E2:B5:CF:E9:C0:2E:97:3D:E1:EF:00
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3133372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
32:83:64:19:53:36:96:42:42:fe:03:ed:92:c6:4e:17:9f:b8:
6f:54:1d:98:65:95:a4:51:f2:53:74:bb:be:71:d8:49:3b:50:
1c:89:09:67:25:82:ae:69:c5:b9:8e:06:fb:0f:f2:1b:dd:53:
be:34:b0:4c:60:91:3d:cd:4f:98:bf:32:3e:df:ad:a2:62:29:
d3:d0:65:ca:cd:4c:70:1a:96:bb:ab:01:bf:12:ff:58:b9:18:
09:b3:71:ac:2e:37:88:32:56:95:65:8d:d2:ec:2f:46:29:7f:
3b:5e:d8:21:90:e4:a2:d4:82:82:6d:e0:17:81:2f:49:70:d6:
fb:05:74:14:87:7f:33:d0:b8:22:6f:03:50:85:d9:b3:13:04:
dd:f7:3e:74:d4:1b:2b:6f:e1:e6:ee:8c:09:7d:bf:2d:f2:68:
d9:73:0f:74:e8:84:78:f9:c7:4b:c2:e8:2d:d4:25:f1:6e:62:
d2:d0:13:83:76:e5:51:04:aa:39:4a:25:33:59:fa:97:21:af:
2b:08:85:8e:52:d6:18:ed:eb:58:b8:6c:be:58:c2:25:f1:e1:
52:3e:f9:af:b8:79:94:07:87:bb:46:64:9d:50:56:ea:10:bb:
b1:c2:3c:38:ba:fa:10:89:5c:f7:ed:fd:da:bd:cd:06:b3:5f:
1a:81:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:34:53 2026 by rpki-client