Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 0skQOnpLSPxVILYXikRccZN3PW17M3BRC6s6GTmCEUw=
Subject key identifier: F5:7A:D7:C1:3F:A0:D6:C3:A2:7B:0E:36:AB:A6:9A:39:7E:64:FC:C4
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 3A0B34B4DC6AC1F64E0E693F6DD8A067FB2A1945
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 214483
IP address blocks: 177.201.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0b:34:b4:dc:6a:c1:f6:4e:0e:69:3f:6d:d8:a0:67:fb:2a:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=F57AD7C13FA0D6C3A27B0E36ABA69A397E64FCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:b3:b3:e7:31:12:f6:a7:84:39:e0:fa:d2:
20:ed:0b:78:57:31:8a:61:0a:78:53:95:39:dd:33:
20:63:4d:fc:59:00:5b:7c:b4:e4:0b:43:e4:c5:03:
08:ab:fa:e4:ef:a8:7c:c0:37:cf:d0:40:26:7b:33:
74:81:66:5b:23:cb:a8:21:21:25:a8:c8:1a:e0:b9:
38:89:ef:3e:59:3d:33:2c:da:86:3e:03:40:ef:51:
ef:b2:68:b4:8b:9a:1c:17:e3:9b:4e:ef:f5:94:fb:
cd:00:26:86:7c:46:f7:e8:49:7e:b9:25:f3:36:22:
1c:9c:a6:a2:f6:8d:95:cb:bd:fa:ac:01:b3:fb:fa:
1f:5f:cf:aa:16:df:91:49:62:80:77:3c:6d:1c:63:
f0:03:64:0f:84:90:d6:a4:03:b3:78:f3:d0:20:64:
5a:63:21:e0:ea:bd:e6:8c:49:e2:f4:ed:97:b6:ff:
64:12:f8:e6:72:b9:a4:1c:f8:45:21:33:cb:cd:ed:
9b:76:86:ed:6a:19:ae:b2:27:80:5c:ea:e7:16:06:
77:99:5c:30:28:2f:e6:cb:a3:94:e8:2f:51:4e:cd:
77:93:48:d7:aa:39:d5:87:7e:15:0f:84:3b:22:11:
b4:cd:f5:93:25:23:ec:a0:94:46:3c:5c:de:25:7c:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7A:D7:C1:3F:A0:D6:C3:A2:7B:0E:36:AB:A6:9A:39:7E:64:FC:C4
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231352e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:96:42:80:2c:00:4e:7d:07:65:8f:33:15:79:5c:1a:87:d3:
34:b0:24:ef:7a:01:9b:2b:70:3d:d7:3d:86:f9:d1:7c:84:23:
13:85:65:8a:3a:e0:a1:22:b8:13:95:70:2e:9a:91:83:dc:7e:
a1:28:48:a6:13:4c:30:8f:1a:a9:3f:3c:82:3f:ec:d4:87:f4:
b9:ee:f1:98:fb:0f:17:ef:5b:35:06:c8:8e:de:ba:dd:9f:a6:
92:2e:6d:1e:33:98:cf:6a:0f:db:69:fe:81:84:20:e8:e9:cd:
51:52:22:6a:ba:e1:ed:f5:39:34:7f:5a:2c:c8:0a:ff:b2:80:
f6:12:4d:76:e4:cc:0a:61:98:de:03:f8:b3:a6:2e:64:7d:37:
a2:e1:28:5b:c8:fa:e4:ec:10:1d:9c:d9:8b:5a:a2:d4:d2:51:
4f:45:23:9d:24:04:eb:fa:ab:43:b2:d1:24:8f:15:82:c6:4d:
c9:c0:7d:d3:66:b8:ec:87:ea:a0:4e:4c:8b:65:54:9c:28:6c:
7a:15:46:5f:1f:4e:51:fd:a2:db:a5:c9:93:4a:5b:b2:bb:6d:
3b:cb:9b:6a:e3:49:4f:93:9c:20:42:1d:0a:15:52:aa:71:78:
92:43:9e:88:6f:96:ae:b3:89:44:74:fa:e2:22:33:2f:88:c2:
0a:c1:b4:80
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUOgs0tNxqwfZODmk/bdigZ/sqGUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NTlaFw0yNzA5MTUxNTM0NTlaMDMxMTAvBgNV
BAMTKEY1N0FEN0MxM0ZBMEQ2QzNBMjdCMEUzNkFCQTY5QTM5N0U2NEZDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMLOz5zES9qeEOeD60iDtC3hX
MYphCnhTlTndMyBjTfxZAFt8tOQLQ+TFAwir+uTvqHzAN8/QQCZ7M3SBZlsjy6gh
ISWoyBrguTiJ7z5ZPTMs2oY+A0DvUe+yaLSLmhwX45tO7/WU+80AJoZ8RvfoSX65
JfM2IhycpqL2jZXLvfqsAbP7+h9fz6oW35FJYoB3PG0cY/ADZA+EkNakA7N489Ag
ZFpjIeDqveaMSeL07Ze2/2QS+OZyuaQc+EUhM8vN7Zt2hu1qGa6yJ4Bc6ucWBneZ
XDAoL+bLo5ToL1FOzXeTSNeqOdWHfhUPhDsiEbTN9ZMlI+yglEY8XN4lfLN3AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU9XrXwT+g1sOiew42q6aaOX5k/MQwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzNzM3MmUzMjMwMzEyZTMy
MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzgzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALHJ1zANBgkqhkiG9w0BAQsFAAOCAQEAtZZCgCwATn0HZY8zFXlcGofTNLAk
73oBmytwPdc9hvnRfIQjE4VlijrgoSK4E5VwLpqRg9x+oShIphNMMI8aqT88gj/s
1If0ue7xmPsPF+9bNQbIjt663Z+mki5tHjOYz2oP22n+gYQg6OnNUVIiarrh7fU5
NH9aLMgK/7KA9hJNduTMCmGY3gP4s6YuZH03ouEoW8j65OwQHZzZi1qi1NJRT0Uj
nSQE6/qrQ7LRJI8VgsZNycB902a47IfqoE5Mi2VUnChsehVGXx9OUf2i26XJk0pb
srttO8ubauNJT5OcIEIdChVSqnF4kkOeiG+WrrOJRHT64iIzL4jCCsG0gA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:10 2026 by rpki-client