Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa
File: 3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa (raw, json)
Hash identifier: b+aRVPGdn8VjyVWg6D+nOEaa2NWDotR+0eAXSQ+Dtls=
Subject key identifier: C1:B2:FD:84:17:78:F0:C8:4A:14:19:84:4F:0F:A9:D0:98:2A:CE:D1
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 36E4F2B3FA0807693675E94C7D546E3D63782705
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 204244
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e4:f2:b3:fa:08:07:69:36:75:e9:4c:7d:54:6e:3d:63:78:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=C1B2FD841778F0C84A1419844F0FA9D0982ACED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:21:74:09:7c:af:6d:90:69:a0:df:1e:d6:
9e:6c:9a:bb:f0:fd:94:76:3c:d6:fa:e5:04:78:4f:
68:59:44:29:6d:7d:77:92:80:98:11:bb:ba:83:e1:
04:e4:7c:b5:b1:d8:73:65:a1:03:b1:48:57:30:75:
20:1b:a9:39:81:08:47:8e:51:0a:95:fb:49:f4:06:
8e:91:96:cf:d7:d1:7f:d3:99:e7:5a:30:9d:f8:1f:
55:d7:f2:cd:92:11:d8:59:b6:24:fa:be:02:ff:af:
ab:5f:05:ec:af:84:df:d1:46:19:18:58:0f:59:cd:
2c:1b:ea:bd:08:55:4e:1f:90:03:34:d8:a2:55:bd:
3f:d2:b4:f3:8a:1f:25:42:5a:25:06:dc:5d:36:e6:
48:68:f6:e3:0f:d1:f5:92:b3:99:80:1b:98:2e:5f:
4b:bf:cd:c7:24:bb:b2:b9:0e:a4:05:ec:8f:71:29:
9e:85:78:a8:b7:e4:91:81:b5:e6:06:8d:49:8b:ff:
0c:89:46:10:3a:d9:6e:77:e3:92:1e:6f:73:fb:d6:
e7:c4:17:4d:5d:75:58:c2:20:d8:24:6a:6d:46:66:
5e:da:a4:98:97:f7:86:03:26:08:09:1c:05:9a:a0:
37:84:01:6c:c1:87:2b:d7:4d:73:7f:96:89:e2:5a:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:FD:84:17:78:F0:C8:4A:14:19:84:4F:0F:A9:D0:98:2A:CE:D1
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38332e302f32342d3234203d3e20323034323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4c:10:c9:73:96:9c:14:9b:58:dd:81:de:73:35:4b:4f:5f:
1f:f8:73:84:3f:60:99:98:7c:be:69:b1:86:d9:47:5e:f1:34:
87:d4:3b:92:1f:d6:07:81:a1:92:c1:b7:df:5d:da:20:d5:5b:
c5:23:2b:98:ec:df:69:77:1f:a1:84:a9:cb:d9:c3:8b:2d:92:
43:c9:62:02:47:96:80:4a:56:64:5e:be:a7:41:23:95:22:f5:
69:63:d1:c4:45:70:ea:30:0e:f9:b2:d1:91:68:51:ef:20:a7:
e2:51:b1:ee:d0:e9:b0:89:b2:36:f0:1f:ba:10:a9:21:bf:da:
10:a2:a1:d1:c2:f7:0d:32:cb:f9:0c:5b:9e:3e:ba:0d:9e:b3:
db:a1:b2:24:f6:b3:8f:7f:4b:06:8e:c2:fa:dc:08:14:6a:6d:
5d:e7:86:a5:f7:66:3d:e5:fa:fe:ec:58:55:ab:f6:9d:14:13:
db:45:e5:33:b6:1f:b6:54:8e:d7:ed:35:77:12:18:77:d3:c2:
ec:fa:68:50:d2:1d:ed:91:77:76:17:18:f7:a3:d5:bf:5a:9b:
ba:34:7b:36:57:f1:4c:3f:fd:82:4d:7c:83:b4:96:1e:e8:c8:
87:83:6d:a8:58:99:f6:50:cd:82:62:97:6e:2d:71:20:f5:10:
42:cb:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:29 2026 by rpki-client