Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134302e302f32342d3234203d3e203231383539.roa
File: 3138382e3230392e3134302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: WX3351gz4M4/51z2tNKxtCLTKezWcmbajj+U/lByXXI=
Subject key identifier: C9:C3:9E:00:C3:77:19:9B:85:26:07:16:B9:19:3E:09:8D:04:C6:CB
Certificate issuer: /CN=7374bc6d025135bed9539779a03fdd64abeba11f
Certificate serial: 12EB8DE844E454B0CEE57C7250AB8A43D19502B8
Authority key identifier: 73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134302e302f32342d3234203d3e203231383539.roa
Signing time: Wed 03 Jun 2026 10:12:30 +0000
ROA not before: Wed 03 Jun 2026 10:07:30 +0000
ROA not after: Wed 02 Jun 2027 10:12:30 +0000
asID: 21859
IP address blocks: 188.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:eb:8d:e8:44:e4:54:b0:ce:e5:7c:72:50:ab:8a:43:d1:95:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7374bc6d025135bed9539779a03fdd64abeba11f
Validity
Not Before: Jun 3 10:07:30 2026 GMT
Not After : Jun 2 10:12:30 2027 GMT
Subject: CN=C9C39E00C377199B85260716B9193E098D04C6CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:44:b4:9c:21:7b:77:8f:bd:fc:a1:f3:1b:
58:18:bf:e7:66:5d:6b:e5:22:2b:ba:6b:f5:f6:b2:
43:75:3f:06:a7:ea:55:e0:50:29:ee:ed:c0:36:f5:
cb:a8:29:54:bd:af:00:4b:0f:13:30:8f:51:42:8b:
77:b2:0f:56:63:29:51:46:ad:d2:2b:e8:f3:03:45:
4a:d4:2e:4e:3f:ca:88:89:e4:86:28:4d:d6:19:f7:
7a:56:d8:dd:57:af:32:64:c0:67:82:fe:63:5d:d3:
24:dc:f9:52:26:22:5d:9a:0a:34:cd:cd:2e:1d:15:
5a:dd:b0:fc:81:11:a2:12:4c:79:f5:eb:0d:ae:99:
81:bb:78:18:e8:5a:d9:b3:50:78:6a:7d:ff:4b:22:
df:30:c3:3f:66:23:9c:1a:7d:af:d7:bd:95:17:f4:
b7:0a:74:13:7c:49:51:2a:68:07:93:5b:3d:b2:e8:
e8:1f:d7:d6:cc:4f:43:8e:f7:3b:20:03:0d:00:b4:
b6:b4:8e:20:e8:51:3e:9b:da:ea:20:06:a6:d7:fa:
ae:af:6f:5a:63:45:30:56:d2:77:4d:74:8f:0d:16:
2a:69:f9:c1:09:ff:af:7f:e1:cc:2d:c1:fc:c4:14:
66:1a:44:04:3a:60:5a:01:ef:e5:69:9f:b0:a3:46:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:9E:00:C3:77:19:9B:85:26:07:16:B9:19:3E:09:8D:04:C6:CB
X509v3 Authority Key Identifier:
keyid:73:74:BC:6D:02:51:35:BE:D9:53:97:79:A0:3F:DD:64:AB:EB:A1:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/7374BC6D025135BED9539779A03FDD64ABEBA11F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3S8bQJRNb7ZU5d5oD_dZKvroR8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e42585f7-bc1b-4970-bd34-dbfd2b2147d2/0/3138382e3230392e3134302e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c8:6b:25:b7:94:25:be:71:a8:d5:6b:e2:ec:81:e0:69:08:
d9:5e:a5:91:3c:81:c7:a3:e3:a1:ac:b3:fc:ff:78:30:b8:1d:
19:8e:37:02:44:03:f9:89:bc:5f:aa:22:d0:bc:f9:fa:7e:bc:
23:68:48:d2:a7:43:cd:32:2f:59:84:bd:4d:89:8f:bd:c0:7b:
ae:8d:fb:70:64:c1:85:7e:54:1e:8b:87:cb:db:00:ab:37:b5:
ed:0b:11:40:a6:f0:40:8f:ea:25:02:2f:93:6d:2c:6f:d3:2c:
75:a8:c7:17:2e:41:c2:ae:d0:bc:be:fd:1b:4c:53:da:7a:c2:
03:f6:50:ef:6c:28:40:04:f8:a4:2a:7b:04:92:10:b3:60:55:
f6:f7:5d:74:dc:32:35:d5:a5:10:15:ad:0f:ad:47:e6:32:0b:
5b:11:9e:be:3d:d4:97:3a:34:43:11:14:c1:dc:43:91:2f:e8:
7e:e1:23:13:87:f2:62:ec:87:72:3a:41:54:b3:1c:f9:72:75:
9f:26:fe:17:ca:61:12:13:2f:c0:78:ca:89:b9:8c:49:db:9d:
0b:18:4a:4a:f9:bc:b7:df:4d:3a:2e:59:a6:15:4e:9a:07:8e:
58:2f:92:cd:c5:e1:f2:9a:cb:f3:ae:81:cf:8a:5c:17:66:e5:
02:4d:f0:a6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEuuN6ETkVLDO5XxyUKuKQ9GVArgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NGJjNmQwMjUxMzViZWQ5NTM5Nzc5YTAzZmRkNjRh
YmViYTExZjAeFw0yNjA2MDMxMDA3MzBaFw0yNzA2MDIxMDEyMzBaMDMxMTAvBgNV
BAMTKEM5QzM5RTAwQzM3NzE5OUI4NTI2MDcxNkI5MTkzRTA5OEQwNEM2Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOUS0nCF7d4+9/KHzG1gYv+dm
XWvlIiu6a/X2skN1Pwan6lXgUCnu7cA29cuoKVS9rwBLDxMwj1FCi3eyD1ZjKVFG
rdIr6PMDRUrULk4/yoiJ5IYoTdYZ93pW2N1XrzJkwGeC/mNd0yTc+VImIl2aCjTN
zS4dFVrdsPyBEaISTHn16w2umYG7eBjoWtmzUHhqff9LIt8wwz9mI5wafa/XvZUX
9LcKdBN8SVEqaAeTWz2y6Ogf19bMT0OO9zsgAw0AtLa0jiDoUT6b2uogBqbX+q6v
b1pjRTBW0ndNdI8NFipp+cEJ/69/4cwtwfzEFGYaRAQ6YFoB7+Vpn7CjRvlDAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUycOeAMN3GZuFJgcWuRk+CY0ExsswHwYDVR0j
BBgwFoAUc3S8bQJRNb7ZU5d5oD/dZKvroR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTQyNTg1ZjctYmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0
N2QyLzAvNzM3NEJDNkQwMjUxMzVCRUQ5NTM5Nzc5QTAzRkRENjRBQkVCQTExRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzUzhiUUpSTmI3WlU1ZDVvRF9kWkt2
cm9SOC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTQyNTg1Zjct
YmMxYi00OTcwLWJkMzQtZGJmZDJiMjE0N2QyLzAvMzEzODM4MmUzMjMwMzkyZTMx
MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzODM1Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC80YwwDQYJKoZIhvcNAQELBQADggEBAAvIayW3lCW+cajVa+LsgeBpCNlepZE8
gcej46Gss/z/eDC4HRmONwJEA/mJvF+qItC8+fp+vCNoSNKnQ80yL1mEvU2Jj73A
e66N+3BkwYV+VB6Lh8vbAKs3te0LEUCm8ECP6iUCL5NtLG/TLHWoxxcuQcKu0Ly+
/RtMU9p6wgP2UO9sKEAE+KQqewSSELNgVfb3XXTcMjXVpRAVrQ+tR+YyC1sRnr49
1Jc6NEMRFMHcQ5Ev6H7hIxOH8mLsh3I6QVSzHPlydZ8m/hfKYRITL8B4yom5jEnb
nQsYSkr5vLffTTouWaYVTpoHjlgvks3F4fKay/Ougc+KXBdm5QJN8KY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:08 2026 by rpki-client