Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: pY0DRgNZ8nuhJeM/wiJh0BsWfYeOPtCy3bioLkizSw4=
Subject key identifier: 26:65:26:AF:BB:04:0D:77:FE:53:61:66:F3:BF:40:F6:E6:B4:12:1F
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 42EA89EB347EF3D9F837D33EC286B6365F86AA6E
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214483
IP address blocks: 177.201.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ea:89:eb:34:7e:f3:d9:f8:37:d3:3e:c2:86:b6:36:5f:86:aa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=266526AFBB040D77FE536166F3BF40F6E6B4121F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:6d:b6:20:c0:18:7d:4c:e9:73:15:34:e6:
d8:6e:ac:00:eb:0b:f5:b8:7e:c1:ed:6d:72:f0:76:
1f:59:79:3b:9d:ff:3d:71:06:b0:eb:28:54:1c:31:
8f:c7:da:12:31:33:7a:b4:49:d6:1b:d5:76:1a:85:
7f:1f:18:fc:9b:3a:a2:97:d7:57:84:9d:5f:32:e9:
b6:57:39:df:7b:64:ea:12:e9:f7:5f:60:6a:34:87:
ab:d9:83:f3:8f:99:95:5e:cc:59:79:ca:56:2f:28:
31:aa:28:76:74:5b:de:8b:51:08:be:86:64:c2:2a:
bf:21:aa:c8:f1:d2:27:a5:ff:a6:37:92:f0:c5:53:
6e:3f:ab:36:38:4a:8f:c0:92:08:d8:d2:41:f4:50:
10:f7:c0:97:89:23:c8:81:81:67:13:b6:20:77:a7:
8c:01:61:a1:32:b7:1c:48:1f:33:84:6c:2a:39:2a:
4f:9c:46:29:9c:02:92:52:5e:31:de:82:ab:f4:89:
bd:50:ad:bb:d7:02:f0:4c:6f:bf:a6:a9:d4:54:59:
af:6f:3c:6e:a9:a7:86:85:c3:71:0f:2c:de:47:67:
47:52:53:ca:43:8c:67:14:f6:46:6d:dd:82:39:da:
0a:dd:83:e8:e5:d2:45:8f:07:89:fd:34:83:97:05:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:26:AF:BB:04:0D:77:FE:53:61:66:F3:BF:40:F6:E6:B4:12:1F
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231372e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.217.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b8:5a:de:70:34:8d:65:ed:ae:b8:06:c8:f4:86:da:78:06:
4f:45:3a:d3:31:42:b5:55:b3:11:cf:5d:b6:85:fb:a7:07:d4:
17:8b:88:13:7c:f0:a5:aa:41:7d:6e:1b:92:ec:08:6a:a3:fa:
14:51:3e:01:d6:f2:32:d1:dd:66:e5:c5:f3:dc:33:0f:92:3e:
f1:3b:fb:5b:ee:3c:0e:62:4f:99:d7:76:c3:66:84:4b:e6:74:
20:38:a0:a5:a0:ea:53:54:f7:c8:b9:05:3f:91:60:8d:8a:2f:
b0:8b:83:7c:65:67:b1:49:3f:e5:c2:aa:20:00:d7:e7:77:1f:
d0:a5:33:f2:21:8e:53:7b:b6:b7:d4:4a:91:af:6e:69:8a:30:
e3:aa:65:5a:c8:3c:e0:ae:45:53:9d:3e:88:85:41:1e:3f:00:
14:7a:d0:fa:d5:ee:30:66:49:3f:38:29:51:7a:f7:4c:6f:4c:
42:fc:02:83:53:9d:46:bd:60:34:4a:e2:d6:22:3c:75:24:f5:
30:9d:fb:69:7f:0a:86:a4:2e:ac:d7:6a:84:c0:e3:e1:13:3a:
a5:98:67:05:c3:23:a1:d9:1e:c9:61:ce:9e:9c:9a:27:1c:82:
da:dd:f4:e0:68:c1:64:60:f2:2f:96:09:5c:d2:ee:7b:ce:a3:
68:41:3c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:38 2026 by rpki-client