Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa
File: 3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa (raw, json)
Hash identifier: Y73eMeFRShzAPcM5FCCx+xJJkFDRtiEZGY1+8ydp6k0=
Subject key identifier: 22:AA:43:A8:85:DD:F7:F4:7B:B5:BA:C4:0D:09:A6:A2:2B:5D:2B:D4
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 05B02FE05C42AFEBE30B31CF86F2072F77720966
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 218869
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b0:2f:e0:5c:42:af:eb:e3:0b:31:cf:86:f2:07:2f:77:72:09:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=22AA43A885DDF7F47BB5BAC40D09A6A22B5D2BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:9d:be:90:cc:5c:6e:89:bf:51:19:4d:49:
0d:56:ba:19:df:56:ac:ff:f7:02:74:c5:a0:ce:50:
8e:50:d3:66:fb:e0:ef:20:57:78:ab:26:c7:5b:9e:
5f:b9:ea:78:c7:5f:ba:5e:c2:29:00:a9:37:0d:9b:
b1:27:4e:af:8b:07:30:64:53:d8:92:7e:01:90:98:
50:87:09:ae:5a:6b:9c:17:10:e2:df:f1:5b:9c:6a:
18:50:3b:bf:a8:23:00:75:fd:f9:18:ac:ca:2c:46:
5f:a8:36:77:42:85:f4:8f:3f:b8:0e:4f:78:a8:41:
e4:5e:42:a4:d3:97:8d:e1:72:55:d5:ce:4c:76:04:
25:19:99:1c:c3:85:fc:27:96:f1:e4:45:a0:aa:b5:
c6:11:9c:d7:19:2d:5c:29:8b:7b:ed:fb:d2:cf:04:
fb:22:c9:9a:7f:ec:bc:af:86:22:81:3c:90:7e:e0:
69:e1:aa:12:b3:c9:8a:ec:8d:13:9f:23:fd:35:e7:
95:14:cf:ac:2a:c3:cc:e3:14:37:57:79:e0:96:41:
0f:68:1f:3e:c9:74:e1:57:ff:ac:73:c6:57:37:1e:
42:b6:c1:da:0c:b4:cf:9c:6a:00:53:48:d6:52:07:
e1:3a:72:87:ad:ba:1c:2b:bd:e6:ae:04:34:44:b0:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AA:43:A8:85:DD:F7:F4:7B:B5:BA:C4:0D:09:A6:A2:2B:5D:2B:D4
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3137372e38332e302f32342d3234203d3e20323138383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
80:48:e6:1a:d1:56:af:53:e3:b9:6f:92:ca:5e:3e:35:5c:ce:
4d:be:70:9d:8a:3e:25:32:db:f8:e2:72:d2:6f:42:06:b0:a8:
f1:07:cb:e7:22:fb:75:48:ef:00:ac:b9:5e:2d:f5:da:eb:01:
54:e3:d3:ef:fc:32:ba:75:0c:80:b3:20:7d:06:85:b3:97:2c:
b0:26:8e:66:f7:2b:af:6a:ad:3e:4a:31:97:48:12:06:65:8a:
bf:b7:93:4b:84:c8:8c:fb:37:fc:e1:bb:6a:0c:10:20:9e:72:
09:d5:a4:d0:80:7c:83:53:63:8d:1a:37:0d:60:7f:90:f1:22:
a4:cd:fb:27:a5:4c:41:c2:b0:bb:34:3f:8d:83:80:39:74:3d:
a8:51:f6:63:9f:6d:65:e4:eb:5b:f5:6f:0c:60:20:99:ce:72:
b9:f1:19:4b:db:a4:7e:64:57:f0:fb:13:42:ce:71:78:c3:bb:
02:07:3a:07:94:ec:2f:47:2e:90:21:f7:83:06:3b:77:8b:f4:
0f:a0:88:12:a2:9a:91:1e:82:51:c4:2a:61:88:0b:2d:82:a6:
e5:f0:b3:27:2f:32:88:9c:1c:e4:e4:bb:48:f6:6c:d3:f0:77:
b7:0c:c0:84:19:d7:6f:4f:bb:68:8b:1b:6c:b4:65:64:ab:76:
99:65:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:46 2026 by rpki-client