Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa
File: 3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: 34Q2KfJRPqd/SiaKPyZQYNrPkf5LsaCHeFNl6rLcgY0=
Subject key identifier: 5E:27:1D:E8:D7:81:35:81:79:A8:18:5A:6D:21:85:F8:3F:A5:22:52
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7946017EB57318C6EE560D2CD2AC7C668BA21DAE
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 402288
IP address blocks: 177.201.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:46:01:7e:b5:73:18:c6:ee:56:0d:2c:d2:ac:7c:66:8b:a2:1d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=5E271DE8D781358179A8185A6D2185F83FA52252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:89:a0:c3:27:f3:8d:24:68:29:b3:33:c4:
65:45:53:b4:8d:46:41:20:ab:6c:94:75:17:b1:ac:
d9:ba:b4:29:57:c5:05:ca:87:ed:38:df:ec:54:e7:
fe:df:66:37:e2:c9:dc:6d:82:9d:6d:23:c3:02:6f:
63:04:13:64:11:70:ca:4c:96:ff:ef:e7:3c:bb:4c:
60:26:44:e8:7c:41:49:62:99:2a:62:c1:dc:0d:df:
13:a0:be:57:5b:45:70:f7:b2:13:95:5b:69:70:73:
a7:85:92:78:c3:1d:67:27:8a:59:5e:7f:26:98:7d:
5f:da:bb:8d:b6:36:26:2b:e6:e6:ce:85:45:ad:a7:
08:c4:0a:fa:2a:cb:ba:13:ef:37:ed:9f:7d:70:a4:
be:78:52:0a:fb:d7:5a:63:56:43:db:a4:42:a3:5a:
1a:a7:b9:d7:dd:a7:87:3a:df:44:9f:2c:29:a9:0b:
39:ce:2d:17:99:a1:d0:82:a6:58:73:85:2e:83:d6:
9f:e8:4d:a9:a5:a1:79:8f:e2:cf:9b:64:51:4e:23:
fe:31:c6:de:93:4a:db:b8:08:89:91:cd:57:0c:47:
73:8f:42:07:89:16:dc:19:0d:ef:b6:7b:e5:f2:a1:
71:93:59:73:63:19:41:6a:7d:a4:ee:82:8c:a6:a1:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:1D:E8:D7:81:35:81:79:A8:18:5A:6D:21:85:F8:3F:A5:22:52
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231362e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ed:e4:91:cb:e8:88:ed:3f:fc:36:4f:b2:7b:05:fb:b1:c4:
b1:13:9f:6d:6c:25:06:62:b3:99:97:cc:1e:a2:03:24:d9:af:
76:e4:5a:2c:1f:ef:c0:57:fb:ea:14:ab:d9:3c:f4:61:9c:45:
df:27:ea:91:32:0d:4a:26:61:2d:7f:46:f8:16:cf:15:ff:c5:
11:45:5b:85:36:1d:0d:56:d5:42:d5:e6:8d:cd:36:47:c9:6e:
14:51:a6:72:47:d5:60:4c:8a:44:77:13:a3:6e:55:54:d4:5c:
f1:8a:06:a4:8a:35:f7:51:44:4c:bf:22:f6:e3:4e:42:5b:96:
f7:fa:0c:6e:9c:c8:ec:ef:4f:98:67:a9:45:33:fd:04:07:85:
90:53:46:ff:5b:4f:5f:f9:97:f9:78:36:80:82:75:34:51:90:
20:a5:04:ae:54:dd:5b:dd:aa:90:25:fd:53:b3:c8:f3:a4:a1:
f4:8f:91:78:9d:3f:e8:5a:54:6b:0d:40:3e:af:fd:51:43:a3:
26:d4:ae:33:0e:70:37:9d:13:f9:32:c6:c8:06:30:4f:80:af:
a6:2e:84:44:79:ce:36:e6:81:31:f8:6f:cc:27:c5:34:49:ea:
89:29:38:4a:46:2f:23:6c:66:91:5e:81:55:24:88:74:20:9b:
8d:c0:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:57 2026 by rpki-client