Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa
File: 3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa (raw, json)
Hash identifier: OfR2OfwKIEIccuBrvJ/24hfOmX9MQXaTnvRCeGTvD0o=
Subject key identifier: 67:F8:2F:BE:9F:DE:B2:2B:E4:D8:A1:5D:DC:18:8D:48:00:73:7F:9E
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 79B8FF7689841520B697FE2B8C1CAAC357F252A2
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 204921
IP address blocks: 177.177.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b8:ff:76:89:84:15:20:b6:97:fe:2b:8c:1c:aa:c3:57:f2:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=67F82FBE9FDEB22BE4D8A15DDC188D4800737F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:dc:9c:89:84:d4:4b:32:48:32:c0:f7:70:
ba:53:76:b1:eb:d4:8f:57:48:65:f8:5e:1d:97:42:
9b:e1:91:b2:e7:05:e7:83:d1:72:97:cf:eb:b9:96:
d4:75:1e:de:1b:7c:74:11:5b:28:67:a9:dc:a1:c3:
9d:47:d8:4b:09:2d:ad:29:07:92:f1:8d:74:31:a4:
b3:2d:b2:7b:c4:f7:ba:7a:ce:07:95:32:5d:ce:4c:
7a:58:eb:a6:ad:db:8e:25:ff:03:69:2d:07:ce:b0:
03:e2:66:75:0b:70:87:3d:0a:62:d5:38:a4:22:e2:
73:29:98:db:e3:20:b8:44:f1:1c:b0:7e:13:40:79:
e2:54:22:a9:5d:b6:74:39:d4:74:56:21:9b:8f:e9:
3c:8b:13:aa:b3:35:1c:17:f3:bb:0f:20:56:39:31:
78:4f:85:3c:9d:f1:64:e7:12:2b:f2:1e:b4:2f:80:
6d:43:1a:ed:0b:b5:bc:47:d7:81:57:cf:93:c2:d9:
5d:7a:33:49:c0:58:58:06:e7:d5:fc:15:ed:f1:e3:
cc:4f:8c:40:8d:b8:7c:fd:92:9d:bb:f8:53:e4:c2:
bf:9d:cf:39:d6:23:90:f1:bc:77:47:5e:11:45:be:
a4:d6:e8:7f:91:de:e0:05:db:80:1a:0f:a9:d9:3a:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F8:2F:BE:9F:DE:B2:2B:E4:D8:A1:5D:DC:18:8D:48:00:73:7F:9E
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38302e302f32322d3234203d3e20323034393231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.80.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:a3:d2:3e:1b:0d:64:b2:ee:6f:77:00:49:c0:41:9c:6a:f4:
50:c0:4b:ca:77:7f:00:60:2a:dc:44:7f:d2:e8:bf:02:b6:9a:
15:45:8a:3e:86:c1:f9:ed:b8:97:36:9e:74:c4:94:14:6f:bb:
31:e6:53:e9:83:24:0c:63:45:be:a2:b2:73:44:e8:eb:53:b6:
20:59:47:43:74:ca:f9:53:da:96:a1:88:8e:b7:e4:e9:d3:dc:
d6:7d:06:c8:e9:4e:56:e2:85:47:ca:88:59:f8:3f:f2:bf:22:
73:87:45:7a:5e:2d:00:32:5b:c5:82:62:d6:17:9b:ca:55:44:
31:7a:4c:27:e2:10:45:b5:92:38:5b:76:72:d5:c8:6d:d7:22:
b5:47:16:43:72:e4:8e:fe:bf:4a:8e:f4:10:72:a4:08:5f:bd:
6d:ca:f4:0b:a0:6b:9c:89:66:5d:ce:e3:80:f4:31:bb:91:84:
e9:b8:f0:09:71:0d:82:ef:26:1f:17:66:be:75:ac:98:07:5b:
bb:28:44:3c:ce:49:d8:ed:05:aa:ac:f6:00:42:19:ce:3b:48:
65:89:98:73:80:a9:ae:8c:da:dd:39:49:c4:cd:e3:c9:ce:4b:
79:85:0e:fc:d9:a3:ff:e6:88:de:0b:c5:75:41:3d:82:1f:04:
51:67:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:32 2026 by rpki-client