Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231322e302f32342d3234203d3e20313532313739.roa
File: 3137372e3230312e3231322e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: xOpMtuRBzTMLbaJPmvRgUoaPoN5cBoNT9Z0U04FcqpY=
Subject key identifier: ED:C6:18:C1:E7:20:D2:00:80:44:F8:44:40:99:89:27:4A:AE:4C:69
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 56A1C5380EE6D73634AB5B01C7B68BED2A383604
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231322e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 16:03:06 +0000
ROA not before: Wed 16 Sep 2026 15:58:06 +0000
ROA not after: Wed 15 Sep 2027 16:03:06 +0000
asID: 152179
IP address blocks: 177.201.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a1:c5:38:0e:e6:d7:36:34:ab:5b:01:c7:b6:8b:ed:2a:38:36:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:58:06 2026 GMT
Not After : Sep 15 16:03:06 2027 GMT
Subject: CN=EDC618C1E720D2008044F844409989274AAE4C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:e9:e5:a0:2c:82:0b:6f:04:28:37:10:c0:
02:ab:63:b7:ae:a4:42:18:c3:63:36:7c:73:0b:32:
90:41:4a:27:e7:98:4a:96:47:f5:e8:c4:31:31:cb:
09:6f:84:a1:fb:db:ac:fa:ec:54:b3:35:2f:8e:0e:
78:82:c2:5a:17:d1:b4:ca:1f:55:f9:f5:69:80:99:
2d:49:9b:bf:08:98:23:d1:ce:c7:8c:3f:e0:93:d2:
48:e9:de:a5:38:7a:3b:f9:bd:7a:db:4a:ac:f2:2f:
fe:94:d6:40:6d:8f:57:bc:ad:f5:73:b9:e5:72:07:
c9:2a:c7:99:87:63:02:18:76:30:5b:14:4b:bd:61:
c7:fb:a9:10:8e:24:e3:58:c6:f0:38:93:6c:b6:cd:
f5:fb:27:76:c3:9c:20:84:40:8d:a3:92:40:40:91:
b3:f2:3f:85:f5:b7:51:e2:5a:55:e2:a4:3e:66:cd:
18:d4:30:8f:0d:38:3d:82:a2:80:a1:ac:46:aa:a4:
99:1b:2b:a1:b4:6b:6d:e4:9a:ec:83:c9:f9:a4:bf:
f1:ca:4d:c3:d4:13:fe:88:02:11:1e:a2:ae:a5:57:
fd:a2:c8:1d:49:47:94:14:e9:6d:de:c9:57:66:d3:
9f:ff:40:58:3a:95:d7:46:f9:83:8d:2d:eb:9e:04:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:18:C1:E7:20:D2:00:80:44:F8:44:40:99:89:27:4A:AE:4C:69
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231322e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.212.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:1d:5c:6f:c7:2e:cf:e1:30:7f:2f:7a:fb:72:11:69:e3:3e:
c8:c3:ed:4f:f4:ad:12:07:cf:99:08:96:68:c1:3e:72:01:b9:
98:0e:c0:d4:de:c7:c5:db:f2:78:60:5c:8f:cb:1e:71:69:c0:
d5:a3:3b:d9:82:c5:7d:5a:87:49:96:58:b4:a9:89:f2:cb:b4:
7d:40:3d:9e:6a:5d:40:7a:32:27:9b:5f:e5:a7:78:29:e3:c3:
5f:e4:cb:13:9e:24:65:f4:97:31:9d:36:45:d0:f3:62:d4:70:
c7:de:ca:fc:45:34:c3:34:60:f1:e1:40:02:27:a0:17:fd:a8:
57:8a:d9:0a:9b:4e:87:b6:34:9c:7c:47:00:55:8d:5f:6f:37:
d9:bd:6b:7f:7c:d2:0d:ab:6a:32:69:95:13:e5:c7:a3:5f:31:
dc:ab:67:08:39:eb:93:5d:52:4d:8b:c0:ff:f0:ae:50:8a:14:
03:7d:90:5e:7e:78:08:7b:14:e1:a4:04:93:b5:02:da:ec:0f:
d3:b4:62:d9:01:92:42:bc:e1:f2:cb:08:c4:c7:8f:89:b2:8a:
81:56:3c:42:89:17:eb:8b:ba:76:08:c7:59:75:79:0f:a8:74:
38:44:ab:b2:e3:2d:52:78:2e:f1:c4:c4:e1:31:84:0d:07:77:
3b:fd:d3:58
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUVqHFOA7m1zY0q1sBx7aL7So4NgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTU4MDZaFw0yNzA5MTUxNjAzMDZaMDMxMTAvBgNV
BAMTKEVEQzYxOEMxRTcyMEQyMDA4MDQ0Rjg0NDQwOTk4OTI3NEFBRTRDNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftOnloCyCC28EKDcQwAKrY7eu
pEIYw2M2fHMLMpBBSifnmEqWR/XoxDExywlvhKH726z67FSzNS+ODniCwloX0bTK
H1X59WmAmS1Jm78ImCPRzseMP+CT0kjp3qU4ejv5vXrbSqzyL/6U1kBtj1e8rfVz
ueVyB8kqx5mHYwIYdjBbFEu9Ycf7qRCOJONYxvA4k2y2zfX7J3bDnCCEQI2jkkBA
kbPyP4X1t1HiWlXipD5mzRjUMI8NOD2CooChrEaqpJkbK6G0a23kmuyDyfmkv/HK
TcPUE/6IAhEeoq6lV/2iyB1JR5QU6W3eyVdm05//QFg6lddG+YONLeueBMmdAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU7cYYwecg0gCARPhEQJmJJ0quTGkwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzNzM3MmUzMjMwMzEyZTMy
MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALHJ1DANBgkqhkiG9w0BAQsFAAOCAQEA3R1cb8cuz+Ewfy96+3IRaeM+yMPt
T/StEgfPmQiWaME+cgG5mA7A1N7HxdvyeGBcj8secWnA1aM72YLFfVqHSZZYtKmJ
8su0fUA9nmpdQHoyJ5tf5ad4KePDX+TLE54kZfSXMZ02RdDzYtRwx97K/EU0wzRg
8eFAAiegF/2oV4rZCptOh7Y0nHxHAFWNX2832b1rf3zSDatqMmmVE+XHo18x3Ktn
CDnrk11STYvA//CuUIoUA32QXn54CHsU4aQEk7UC2uwP07Ri2QGSQrzh8ssIxMeP
ibKKgVY8QokX64u6dgjHWXV5D6h0OESrsuMtUngu8cTE4TGEDQd3O/3TWA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:01 2026 by rpki-client