Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38322e302f32342d3234203d3e203430393239.roa
File: 3137372e3137372e38322e302f32342d3234203d3e203430393239.roa (raw, json)
Hash identifier: iWdaGQnxhL4Kyq5sRcP+nJQ7jeI4VD01lzRIxG9VX90=
Subject key identifier: CA:64:43:8D:91:07:2F:8F:B3:71:1C:AE:5E:EF:0B:CD:DF:7E:18:67
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 6CE40EF17ED677449578DED98B85FBF61CA06E9E
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38322e302f32342d3234203d3e203430393239.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 40929
IP address blocks: 177.177.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e4:0e:f1:7e:d6:77:44:95:78:de:d9:8b:85:fb:f6:1c:a0:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=CA64438D91072F8FB3711CAE5EEF0BCDDF7E1867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:f1:9c:80:2c:2d:54:aa:2f:e5:25:74:4c:
ea:58:9b:fb:4b:2d:da:87:15:f3:70:73:b6:bf:14:
8e:f2:f2:c9:8c:f5:22:8e:0d:c7:1b:68:0f:82:ac:
ad:e4:f1:26:b8:bc:7c:e3:f7:ac:88:69:7b:f8:f1:
47:87:72:40:f4:23:8c:79:7b:64:4c:33:8f:d0:c9:
ad:38:1f:69:e7:06:aa:52:01:84:b4:c9:d6:e1:52:
aa:84:09:76:b1:6b:58:37:4b:c7:6b:7c:25:d7:72:
eb:88:cd:d5:40:e2:72:47:7c:a9:b5:70:db:98:b5:
ae:d8:81:14:a4:cb:64:a1:00:09:c0:11:dd:04:12:
c1:79:a5:7b:a5:98:52:1e:a1:31:87:2c:93:bc:2c:
2f:90:8f:51:4f:cf:a5:58:8d:26:43:51:4b:0c:2e:
a7:8c:85:64:60:e7:e4:46:fd:74:44:18:85:3b:51:
1f:6b:e1:ca:2f:5d:55:f6:9d:9f:23:a1:0a:95:32:
08:97:a9:3f:8e:28:da:59:95:e5:52:64:e7:37:c8:
38:ad:76:45:63:dc:3e:43:88:34:31:60:14:7a:e0:
9b:c2:98:86:1f:cd:6c:fd:1d:b1:db:ff:9e:3a:80:
38:5f:e4:a1:19:a5:db:16:db:a5:76:46:e2:05:d2:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:43:8D:91:07:2F:8F:B3:71:1C:AE:5E:EF:0B:CD:DF:7E:18:67
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38322e302f32342d3234203d3e203430393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.82.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:3e:9f:0d:9d:8d:07:c9:ea:16:d6:d8:85:e5:39:5f:69:6d:
3e:de:94:14:85:f9:dc:64:a1:c6:8a:c9:da:ac:69:e3:e4:b2:
57:3a:2a:77:1c:94:7b:b0:50:27:9d:c4:33:bf:51:22:6b:ba:
aa:79:13:4e:11:e4:20:89:d8:18:86:ed:19:68:21:a5:e2:5d:
8f:7c:f3:0e:d4:af:bd:d4:4a:da:bd:4e:71:5c:db:29:62:c0:
ef:3f:11:32:6a:33:cb:8f:bd:09:39:21:d6:3b:7f:ee:eb:fd:
4b:6d:37:45:57:52:9a:fe:9b:45:d9:bf:3b:39:36:f4:ab:61:
8d:59:9c:fd:c6:d4:a9:67:b9:36:63:b3:29:f8:df:cb:a3:a1:
34:b9:ad:61:06:7b:b9:a9:82:d0:d4:46:93:0e:82:9d:5e:9f:
e3:65:f5:77:e0:aa:98:89:d9:12:8c:9a:a0:5d:6e:07:3f:e6:
8a:a4:7d:41:31:94:cb:c5:09:20:7d:4b:7a:46:c8:ec:3d:5a:
06:b6:99:72:cb:c2:08:d1:f9:a9:32:06:13:9e:fc:75:fb:23:
cf:ac:09:29:92:5f:55:b1:70:ff:6a:f0:62:fb:c6:61:8d:10:
85:da:91:9a:2f:7c:78:4c:6a:c2:6b:34:94:df:e9:e1:a0:ad:
12:5b:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:52 2026 by rpki-client