Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa
File: 3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: kDKHcpRwCX368SQlLngnH+uIr/esRrOjJxHJJ6WZtzQ=
Subject key identifier: 2C:2F:99:A3:E1:F1:85:A3:CD:57:BD:2D:66:FB:AC:E9:7D:D6:C8:00
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 129E73FC7D0101B86784F0DED3E11E5E3648C87B
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa
Signing time: Wed 16 Sep 2026 15:34:57 +0000
ROA not before: Wed 16 Sep 2026 15:29:57 +0000
ROA not after: Wed 15 Sep 2027 15:34:57 +0000
asID: 401362
IP address blocks: 177.201.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:9e:73:fc:7d:01:01:b8:67:84:f0:de:d3:e1:1e:5e:36:48:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:57 2026 GMT
Not After : Sep 15 15:34:57 2027 GMT
Subject: CN=2C2F99A3E1F185A3CD57BD2D66FBACE97DD6C800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:b5:a3:93:04:e4:d5:e2:75:e5:e3:cd:26:
72:1a:ae:18:49:d5:a0:ca:61:fa:b3:1f:9f:4b:3f:
5c:7e:8b:c7:15:7f:a5:fc:a9:2b:08:72:47:20:97:
b5:52:44:fb:76:35:6b:72:78:da:52:e8:55:bf:b2:
5a:46:b1:09:da:33:f8:13:86:5d:4b:1e:8e:68:8a:
89:b5:5b:95:15:26:2d:46:19:9c:a3:ce:db:07:bd:
0b:8b:02:63:c0:d3:9b:9e:11:de:03:22:09:1f:1c:
dd:8a:3e:7d:67:b7:ed:43:90:02:d9:bb:9f:86:11:
a0:3b:17:84:d2:3e:3a:76:a7:a7:cc:46:f2:a8:c9:
c2:23:24:6a:d2:93:71:69:2a:1a:d9:08:2e:33:33:
df:d0:c7:0d:a4:15:d8:bb:91:f2:b7:a8:61:5a:60:
88:49:1e:33:02:92:82:41:7f:7e:b0:15:88:55:5f:
f1:32:31:ea:fb:93:54:c0:d0:37:14:e2:07:27:01:
96:e8:88:f4:cf:c1:c4:29:50:25:44:bf:9a:e5:2f:
24:ae:41:b5:05:dc:a2:13:9a:02:ec:7c:08:9a:d1:
88:96:2c:78:54:0c:8e:d2:e4:22:d4:42:92:17:08:
ae:ea:2f:01:53:c8:20:53:86:38:ee:d6:27:a3:be:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:99:A3:E1:F1:85:A3:CD:57:BD:2D:66:FB:AC:E9:7D:D6:C8:00
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3230382e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.208.0/24
Signature Algorithm: sha256WithRSAEncryption
f2:51:0c:13:13:92:68:fa:5b:f1:e3:d6:89:43:cd:f2:33:64:
04:31:c6:83:de:67:2e:01:00:46:07:ca:6b:74:6c:51:88:e2:
ce:fa:02:2f:1d:a9:1c:86:bc:f8:a4:e3:e7:cb:19:86:5b:e5:
8d:c2:69:48:21:b1:48:02:ba:0d:9e:4e:6d:67:9d:e0:c0:14:
12:a7:61:30:91:82:89:fe:dd:a5:8c:3f:71:89:09:5e:7a:be:
cc:c2:c2:2f:42:64:b4:6f:63:ee:47:23:08:57:c3:b7:55:66:
b3:16:60:a1:01:f2:79:68:0e:3b:57:4b:de:db:b4:f8:e9:d1:
c7:5f:bd:d4:75:35:25:fd:21:88:74:7f:15:b6:37:a8:a6:17:
60:ef:5e:4b:28:38:56:c3:b0:60:79:9c:ea:b2:f4:0b:f4:00:
33:c5:b6:33:38:91:6a:6c:ef:70:fd:b5:94:91:5d:68:98:86:
24:07:5e:47:48:95:0b:40:4c:85:e7:23:aa:9c:5c:e7:49:e3:
7e:f8:e9:d1:0c:d8:b0:14:4f:fd:02:73:fe:6b:18:bf:bd:ef:
6a:45:7e:a7:30:46:6d:b4:c1:16:ea:39:ee:fd:db:52:14:3c:
38:b6:06:94:f2:9d:c3:3f:34:20:21:67:89:98:f9:7c:a3:9c:
4f:c0:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:48 2026 by rpki-client