Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa
File: 3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: aB6r/ZoZv/U/Y8LXsCYtpAOGh4khzJo6fGqxtRYpXMc=
Subject key identifier: 01:47:1D:F4:5E:B2:D3:53:84:82:1E:64:0C:82:E4:2F:9A:B8:E6:AF
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 17632E9377C94CB68619BA66F08CE9A89452D676
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 152179
IP address blocks: 177.201.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:63:2e:93:77:c9:4c:b6:86:19:ba:66:f0:8c:e9:a8:94:52:d6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=01471DF45EB2D35384821E640C82E42F9AB8E6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:2c:15:c0:cc:0c:25:c6:3c:85:60:14:8b:
48:47:f0:f5:ae:27:8b:ad:24:a7:18:b2:7a:81:c9:
08:93:73:5c:67:77:2d:fd:d3:c0:20:ad:d3:c5:18:
48:52:0e:34:c7:cc:72:f5:c3:96:68:76:8d:5a:51:
f0:dd:56:56:0c:92:56:5d:a6:76:da:ca:97:d6:74:
cc:e2:2c:14:2f:8a:5e:36:4a:64:78:ab:ef:c8:03:
e3:77:ba:52:51:66:a2:5d:99:e9:bf:66:3f:07:2d:
31:ac:69:22:cc:0f:18:f8:29:61:5f:87:2c:82:df:
56:48:94:4a:9d:5b:4a:6d:a4:21:5c:58:50:64:4b:
21:91:9a:a6:b8:d5:09:48:4a:e3:c5:e6:c9:36:e4:
37:e0:0e:a2:85:ee:34:90:95:d3:19:9c:f5:13:ff:
ec:a1:87:3e:5f:31:3c:1f:07:ee:83:af:0c:00:d4:
53:dd:8b:90:dd:09:32:c5:6a:8b:70:2e:ca:c6:ce:
e7:9a:eb:c3:be:8a:f7:27:26:73:5d:40:e1:d9:ee:
87:24:6f:c4:c4:e9:a7:76:8d:d0:5d:33:08:61:3e:
15:ac:41:af:bd:41:4d:60:a7:14:c2:d9:d7:32:95:
99:bd:79:d7:d0:14:db:be:c9:c3:b6:be:bc:35:45:
40:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:1D:F4:5E:B2:D3:53:84:82:1E:64:0C:82:E4:2F:9A:B8:E6:AF
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3230392e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:63:30:ca:55:08:e6:c7:e7:0f:f0:6f:7d:67:5f:33:34:5c:
6f:ff:33:4b:b7:7c:d0:c0:66:9f:f6:76:cf:d9:67:1d:8e:c0:
39:73:95:96:6d:33:41:d5:2d:18:6a:86:96:54:31:3e:d9:2e:
5d:52:c6:a4:ec:33:2e:7d:47:83:2f:ac:ff:70:5c:6a:59:ce:
bb:56:3c:2c:20:d0:8e:b8:92:f6:89:d6:9f:d2:64:74:13:f5:
20:6f:be:ea:8d:97:27:fc:e8:ca:4e:d7:b9:5f:bc:bf:a4:dc:
c4:d5:97:23:b4:34:39:1a:b6:44:94:2e:9a:b9:f7:58:06:02:
c6:42:02:51:c0:0d:59:6b:0f:8b:a4:ac:4b:d8:3c:19:40:8a:
b4:d7:65:b2:42:f9:8c:cf:88:07:53:d0:a5:3f:19:61:b2:ad:
d2:48:71:cc:97:69:43:6f:75:a8:89:86:de:9a:97:3e:e7:dc:
97:46:5c:28:cf:a5:b1:eb:0c:87:84:d8:b8:09:00:f6:6e:5d:
ad:85:45:49:1d:ae:90:bb:c5:80:7c:22:85:9f:00:eb:4c:4d:
c7:4b:47:03:06:c5:d6:5c:41:13:b8:be:91:a7:41:03:97:38:
24:46:a4:e1:49:8a:dd:6c:e3:3f:a5:ef:db:ac:25:a0:e4:b4:
4f:b6:a6:4f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUF2Muk3fJTLaGGbpm8IzpqJRS1nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKDAxNDcxREY0NUVCMkQzNTM4NDgyMUU2NDBDODJFNDJGOUFCOEU2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCSwVwMwMJcY8hWAUi0hH8PWu
J4utJKcYsnqByQiTc1xndy3908AgrdPFGEhSDjTHzHL1w5Zodo1aUfDdVlYMklZd
pnbaypfWdMziLBQvil42SmR4q+/IA+N3ulJRZqJdmem/Zj8HLTGsaSLMDxj4KWFf
hyyC31ZIlEqdW0ptpCFcWFBkSyGRmqa41QlISuPF5sk25DfgDqKF7jSQldMZnPUT
/+yhhz5fMTwfB+6DrwwA1FPdi5DdCTLFaotwLsrGzuea68O+ivcnJnNdQOHZ7ock
b8TE6ad2jdBdMwhhPhWsQa+9QU1gpxTC2dcylZm9edfQFNu+ycO2vrw1RUBRAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUAUcd9F6y01OEgh5kDILkL5q45q8wHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzNzM3MmUzMjMwMzEyZTMy
MzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALHJ0TANBgkqhkiG9w0BAQsFAAOCAQEAPmMwylUI5sfnD/BvfWdfMzRcb/8z
S7d80MBmn/Z2z9lnHY7AOXOVlm0zQdUtGGqGllQxPtkuXVLGpOwzLn1Hgy+s/3Bc
alnOu1Y8LCDQjriS9onWn9JkdBP1IG++6o2XJ/zoyk7XuV+8v6TcxNWXI7Q0ORq2
RJQumrn3WAYCxkICUcANWWsPi6SsS9g8GUCKtNdlskL5jM+IB1PQpT8ZYbKt0khx
zJdpQ291qImG3pqXPufcl0ZcKM+lsesMh4TYuAkA9m5drYVFSR2ukLvFgHwihZ8A
60xNx0tHAwbF1lxBE7i+kadBA5c4JEak4UmK3WzjP6Xv26wloOS0T7amTw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:01 2026 by rpki-client