Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa
File: 3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa (raw, json)
Hash identifier: 1H/JRHhok0MMJxeBIa6K1VJcCoiYe1gXNjZCK6tB8k4=
Subject key identifier: 87:5E:4F:94:47:F3:9E:69:B9:AF:A2:18:11:8E:89:73:6B:06:DE:4E
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7D31EACC12A27785DC1542EAF98FC091F4D2EE78
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 275723
IP address blocks: 177.201.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:31:ea:cc:12:a2:77:85:dc:15:42:ea:f9:8f:c0:91:f4:d2:ee:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=875E4F9447F39E69B9AFA218118E89736B06DE4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:71:7c:af:85:c0:da:d9:75:c2:7c:22:58:
26:e4:26:ec:ce:ac:75:09:97:70:34:90:fb:fd:d9:
d2:b7:c8:7e:84:7c:12:55:c0:66:d0:3a:42:c7:71:
f2:06:12:fb:8d:5b:c4:1d:f1:fa:78:9a:84:11:42:
f6:e2:99:33:75:cc:68:3a:a1:80:6c:e7:81:db:5a:
0c:93:f4:4b:c4:ba:7b:60:26:61:d5:ee:e4:7b:fb:
9c:43:88:ce:24:2c:43:fa:75:e0:ad:53:08:59:c9:
d9:f6:f6:67:58:7a:52:a6:f7:7e:dd:44:b9:8a:e0:
80:07:7d:c6:d1:32:e4:6c:18:d6:42:e2:b5:a4:32:
eb:8a:2c:fb:66:1a:00:46:64:94:df:3e:7d:ac:8f:
29:13:1b:e6:93:6d:c0:3a:c0:2b:88:64:aa:6d:eb:
d1:1c:e9:0f:c7:82:67:da:94:bb:5f:81:3b:bf:ed:
05:ae:14:4f:96:d2:91:38:fa:81:bb:3f:a2:ca:f0:
90:04:de:8f:30:81:e3:f5:8f:7b:99:37:21:7a:e2:
60:05:8f:77:55:33:9e:58:91:ae:a9:ef:f2:0f:8d:
4a:33:13:75:72:b5:91:fc:f5:e5:fc:9d:a2:65:51:
30:ba:78:5d:40:3f:10:27:3e:1c:28:33:36:b3:28:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:4F:94:47:F3:9E:69:B9:AF:A2:18:11:8E:89:73:6B:06:DE:4E
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231312e302f32342d3234203d3e20323735373233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.211.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2a:62:2d:0d:40:6b:af:6f:4e:35:c4:13:73:58:20:87:a0:
c1:e6:36:f3:cb:73:75:de:7e:80:64:f1:6d:82:35:c9:b1:1f:
32:57:33:7f:68:53:c0:7f:9e:72:4a:46:60:31:29:93:b3:33:
fb:3f:81:07:ad:c7:6a:cb:83:c3:6b:5e:bb:89:e7:dd:0f:1d:
84:ca:4e:f6:be:6f:09:3f:fc:06:b4:7c:61:00:be:9d:fc:21:
fd:fb:dd:0b:44:33:1a:69:9a:af:64:a7:b8:cc:c7:48:af:6f:
54:5c:eb:1d:a5:8e:96:aa:a1:5a:54:ea:53:77:72:21:dd:51:
60:57:ff:be:a5:ca:04:72:5c:b1:33:f5:c5:ae:56:e8:93:ed:
c0:47:e1:39:6c:74:1f:64:4d:14:79:2c:e3:20:ef:03:9f:a9:
89:cc:28:9d:d3:96:b9:e8:51:7c:e8:da:51:e2:de:db:6f:8c:
98:fd:3a:ec:1c:2e:f0:9f:e5:f6:94:60:15:fb:f2:39:4e:ff:
65:85:ee:40:8e:e6:d1:32:cc:25:8e:dc:f8:d7:ab:4a:ac:79:
e8:b8:f8:32:07:75:c7:e8:71:b2:ad:c1:92:eb:22:42:74:34:
dc:1c:b6:bd:00:a7:8e:d9:40:af:19:0f:06:f3:dd:42:aa:72:
0b:76:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:41 2026 by rpki-client