Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231332e302f32342d3234203d3e20313532313739.roa
File: 3137372e3230312e3231332e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: rYLTjT+PyT2qjXxi2k+0+UJ5QkJf9jaUejugLCZeeWA=
Subject key identifier: FC:26:0A:BB:0F:0E:80:B0:8A:B8:E6:D5:C8:FC:27:C7:84:95:02:EF
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 681658365FB51C640AA7DA4284A0A02299AB99BA
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231332e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 18:27:12 +0000
ROA not before: Wed 16 Sep 2026 18:22:12 +0000
ROA not after: Wed 15 Sep 2027 18:27:12 +0000
asID: 152179
IP address blocks: 177.201.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:16:58:36:5f:b5:1c:64:0a:a7:da:42:84:a0:a0:22:99:ab:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 18:22:12 2026 GMT
Not After : Sep 15 18:27:12 2027 GMT
Subject: CN=FC260ABB0F0E80B08AB8E6D5C8FC27C7849502EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:77:03:31:2f:c2:2b:79:0f:21:8a:af:8c:
ba:95:89:d9:ee:6c:62:2c:ec:bc:8e:55:18:9a:a2:
c5:ed:bf:06:30:6f:e5:90:31:c0:27:a1:53:ee:28:
2d:79:8c:53:7b:a1:ce:14:5e:2d:87:44:0d:0b:6d:
ba:30:3a:07:50:5a:54:b8:fd:20:96:60:fe:a7:9c:
61:f0:74:2a:3e:e5:d6:73:7f:c9:d2:50:20:12:d2:
01:b1:07:d3:cd:c9:a4:4e:63:71:70:f4:37:52:f5:
aa:9c:3c:3b:b6:b7:f1:6b:02:86:ea:0a:60:c6:c8:
56:75:e3:fd:bb:73:b8:43:a8:da:b9:a9:8f:9c:4b:
9c:5b:7b:79:e5:11:75:06:3c:48:f4:b0:70:8f:bf:
0b:32:7d:98:4f:a2:d7:f1:4d:d6:d1:6a:64:82:e7:
c5:f4:52:9c:db:1f:06:7b:6f:87:7f:5a:77:00:76:
c5:0e:6b:b8:06:3a:d4:e6:1d:53:1f:b2:44:a0:87:
1d:d3:53:c9:8f:db:a8:61:1d:f3:10:63:20:ee:33:
c0:fd:36:6d:c4:15:d8:46:09:f6:c5:d5:b1:30:ae:
67:91:59:aa:e1:4c:ed:70:cb:b4:26:e6:06:a4:b9:
90:66:d1:d1:a7:3a:9b:1b:90:50:23:af:8f:a3:fb:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:0A:BB:0F:0E:80:B0:8A:B8:E6:D5:C8:FC:27:C7:84:95:02:EF
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231332e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.213.0/24
Signature Algorithm: sha256WithRSAEncryption
66:da:cf:60:91:1e:04:dc:28:64:03:b9:58:bb:de:05:62:90:
92:58:fc:f8:a9:df:7e:41:f2:94:14:5e:3d:fe:3d:fd:5b:d2:
b7:2e:2c:64:f0:f9:78:ec:46:ff:fb:6b:af:f1:1e:b1:ff:b0:
cc:fa:98:68:86:3d:f8:5b:8c:89:9f:98:b5:09:7c:de:48:92:
e4:2c:d5:96:59:27:6c:17:21:dc:e6:d2:d2:99:f5:9f:ed:2c:
bd:a5:ce:55:fd:b8:6a:18:c3:83:3a:eb:2c:23:9a:8b:2c:c7:
f6:8e:b2:8e:15:9f:f3:a3:b3:06:cf:68:54:61:09:1e:90:47:
17:ed:44:ec:28:84:4b:8e:e8:40:4d:27:b8:d1:17:3f:be:ac:
96:64:80:f7:34:01:6d:62:17:ba:eb:69:09:6b:8e:e0:08:28:
51:21:76:85:cc:5f:5e:f2:49:f9:83:50:74:9b:09:e5:6b:53:
c3:8b:a2:5d:74:0c:6a:ce:31:73:e9:2d:a2:ca:14:99:17:a9:
f8:34:05:45:97:6c:14:76:9e:89:cd:52:24:28:26:4f:5e:de:
9b:50:1f:53:25:5c:bb:bb:9d:95:e7:b8:42:2e:08:1d:33:e2:
7a:37:47:6d:0f:50:09:d6:97:16:4b:fc:f8:11:40:52:76:76:
bc:b0:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:02 2026 by rpki-client