Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa
File: 3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: /tTgjahO3WV8W3hU5rH/nxvb2Y2OB3cn98KWyuDjxQE=
Subject key identifier: 3B:83:9F:6E:B6:F1:2C:EF:09:6A:F1:7B:48:56:BB:10:93:69:B5:AC
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 22691A80D4C014797C295C62089AC0C043FF9C8C
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 152179
IP address blocks: 177.201.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:69:1a:80:d4:c0:14:79:7c:29:5c:62:08:9a:c0:c0:43:ff:9c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=3B839F6EB6F12CEF096AF17B4856BB109369B5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:e5:3a:43:5b:81:05:1c:57:e9:2a:3c:77:
39:9a:25:6e:c7:9e:3c:89:89:d8:54:dd:e3:2d:3a:
aa:2a:9c:fd:8b:bd:31:2f:0d:c7:43:c3:29:4d:a6:
cc:5f:69:3c:18:07:7b:cc:bb:8f:1c:53:be:55:c8:
bc:52:4a:59:3c:39:23:73:af:71:1a:b8:d9:4c:59:
0b:c5:9f:a8:62:23:ee:b6:4b:dc:9c:18:ef:e3:45:
45:6a:c4:f7:68:8e:0b:f9:b1:e1:89:8d:dc:91:5e:
27:52:69:f6:c4:db:fe:02:dc:75:58:d4:6b:28:72:
46:ab:4f:bf:af:e7:46:5f:7d:0c:12:a9:68:93:7d:
87:9f:0d:22:26:b4:f7:69:a9:80:70:d4:04:84:15:
60:eb:ba:28:1a:88:f8:e5:b7:da:97:b4:b8:a9:33:
37:ba:8a:b7:69:21:36:02:dc:4e:1e:dc:4a:51:d4:
bf:eb:25:42:e8:20:a4:8e:c9:a7:5e:a2:9d:1b:48:
1c:ff:8a:74:3c:2c:ae:30:b1:77:12:3d:a7:78:16:
27:89:7c:9b:85:5a:06:68:40:3a:68:d0:f3:19:29:
c2:cd:ef:38:e2:bd:aa:98:bc:90:82:2f:34:a5:78:
41:f8:54:04:b2:e7:d9:a9:83:a7:07:6b:16:39:40:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:83:9F:6E:B6:F1:2C:EF:09:6A:F1:7B:48:56:BB:10:93:69:B5:AC
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231302e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.210.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d5:d8:56:8d:bf:5e:ae:25:23:ff:d8:c4:84:8a:7d:d2:63:
d5:83:96:25:ba:d1:1a:d4:a1:15:cf:ed:5f:d8:78:ee:9d:7a:
40:67:0c:a2:b4:88:95:54:fc:2a:7e:94:e6:be:11:c6:8c:82:
ac:86:c5:0d:4c:e3:ce:93:96:91:c6:71:18:8d:fd:f4:25:ce:
6e:4a:a0:ac:0c:2d:db:e0:bb:06:50:46:6e:6d:69:b9:0d:09:
0b:14:8c:49:2f:e9:4e:a9:d5:d3:46:20:bf:fe:29:07:12:5e:
85:07:59:5b:3a:83:25:68:42:97:c2:c9:95:3d:b9:ad:be:fb:
42:2a:a7:e8:8b:ae:10:30:af:61:1e:10:e8:74:2d:e6:9e:c9:
4a:ab:f6:3d:1b:33:a2:14:69:07:23:d0:07:9a:ac:07:cd:58:
cc:78:96:ae:ec:50:bf:a6:72:c5:f1:f2:cd:d1:04:d1:4d:d6:
32:6e:3e:f3:64:ea:65:16:5f:28:4f:be:ad:25:b9:61:50:53:
3a:c1:ca:c2:74:3f:e2:c6:dc:f9:9a:39:5e:4e:e2:b2:49:9e:
11:6b:67:1b:2a:39:69:f1:61:75:b7:26:28:47:cb:e4:1a:11:
de:2b:1b:df:b2:67:f2:a1:97:c9:0c:94:30:3d:77:7e:3d:97:
aa:8d:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:24 2026 by rpki-client