Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: scLhkWUdSCe+D5lIBUFSmWHRspGgkyUSEIR5BkrUr88=
Subject key identifier: B1:49:F7:BF:32:E1:2F:93:17:00:35:F1:75:BD:02:EC:A3:4B:94:4D
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 1BCB4545446198861F85957E1CA50B791D10E6DE
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214483
IP address blocks: 177.201.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:cb:45:45:44:61:98:86:1f:85:95:7e:1c:a5:0b:79:1d:10:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=B149F7BF32E12F93170035F175BD02ECA34B944D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:9a:97:3e:a8:50:06:f8:06:82:b3:18:ab:
86:e3:d3:14:6c:8b:44:3e:a3:d1:c8:45:d4:b0:25:
46:f5:5a:d3:a7:99:cc:e5:42:4b:73:91:28:ac:d3:
43:5c:41:43:a3:ae:51:e5:9c:b1:e8:9b:6d:39:97:
0e:7a:e2:28:50:da:cf:c5:ee:34:d8:58:18:f7:73:
d9:03:f6:27:65:b3:c1:a9:a6:06:10:b2:63:84:5c:
e6:89:c1:95:d2:4e:a4:b3:7f:34:8c:d9:6b:6b:29:
89:b9:60:36:6b:85:44:02:d9:9d:f3:93:8b:5a:be:
04:bd:20:3c:de:51:19:c7:4d:36:68:c8:38:18:e5:
37:62:50:89:88:68:b5:9d:62:0a:ac:3d:e6:0b:54:
22:be:a2:a0:4b:93:ee:99:a6:d4:36:f7:46:46:c9:
5c:30:47:be:af:c7:7c:46:bb:45:0e:9a:16:92:ff:
e6:36:e2:1f:4b:8d:bc:33:50:fa:a4:f5:ce:36:fb:
fe:37:db:d6:7d:9a:7c:76:77:94:f6:3d:f5:b4:96:
4d:92:53:17:b8:33:5a:05:b0:be:f2:81:53:fe:a6:
3e:4c:b4:5d:ef:68:ee:2d:15:fd:80:dd:c4:43:82:
1c:c3:54:03:7c:1d:6c:b4:27:3a:ff:cd:7d:45:96:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:F7:BF:32:E1:2F:93:17:00:35:F1:75:BD:02:EC:A3:4B:94:4D
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231342e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5b:3f:1e:54:08:f7:41:2e:b6:e9:25:76:51:8c:ca:43:14:
d6:c5:d9:7b:7b:e1:a6:4e:6c:09:ad:9c:ca:4b:c4:a9:2e:48:
59:77:e5:f7:2a:32:0d:47:52:1e:4a:db:b2:a2:31:94:c0:f8:
21:22:d2:5d:a7:9f:a7:a8:0f:68:cf:c7:64:3a:6b:11:70:52:
db:11:b2:26:56:b1:fa:d2:40:a5:61:c5:d0:f2:8f:43:4b:df:
af:13:a7:9d:3c:1f:40:e2:b1:f3:c6:18:d6:42:0b:9f:cf:21:
35:17:34:fa:80:a2:ba:7d:37:99:e4:24:94:c3:48:2a:26:b8:
e4:99:0b:02:aa:fb:58:94:e0:26:ed:95:60:23:ab:53:7d:51:
97:8e:d3:2a:7f:83:76:40:2a:6c:ee:26:39:9f:2e:ab:b0:fe:
e4:65:c6:52:91:e2:53:7e:49:13:fc:3b:7f:23:ba:e7:c6:7e:
4c:d8:00:0a:c4:75:2e:26:e6:01:9c:3a:48:27:7c:fe:d7:ff:
b5:93:90:1a:fc:2e:af:ce:4f:de:aa:4d:f0:2b:83:2a:6d:cc:
c8:78:d7:e5:45:91:17:1a:e8:18:41:02:6d:06:ca:92:6f:12:
07:8c:b0:d6:c8:29:58:b1:25:08:9d:aa:b9:9b:9a:3a:41:e1:
ab:4b:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:57 2026 by rpki-client