Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231382e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3231382e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: +XG88Ru4ddDQwh+3WOqqIRP3hxWPFwsw+bt7PZLnlxU=
Subject key identifier: 58:CC:38:94:C5:21:78:43:B9:9C:CF:04:F7:72:8B:A9:AB:D6:1A:24
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 74317CAAC083673D9C55E0161E594DA355AAE424
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231382e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 214483
IP address blocks: 177.201.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:31:7c:aa:c0:83:67:3d:9c:55:e0:16:1e:59:4d:a3:55:aa:e4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=58CC3894C5217843B99CCF04F7728BA9ABD61A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:9e:c2:60:cf:a8:d3:b5:ed:5b:4b:e7:31:
53:dc:05:95:fd:02:f3:08:e4:5c:1a:32:86:98:9f:
50:4d:66:6a:ba:fd:9e:99:c8:5a:be:d1:bf:7e:c4:
35:a4:c7:8e:dc:a2:7b:10:1b:fc:36:52:72:be:f1:
08:ae:63:1c:4d:ac:f6:81:98:24:ba:2d:7b:8e:a7:
12:38:16:ae:81:f7:eb:c3:85:7a:b2:b3:c8:5a:22:
9a:35:93:08:4f:b2:3e:ed:d6:5b:7d:95:ba:76:05:
00:98:e2:f9:2b:6a:3a:f7:47:72:71:5b:bc:77:f2:
63:17:f8:5f:fe:06:33:ba:5e:b9:ea:00:e3:ab:39:
ca:90:1c:40:a7:d3:6b:e9:82:56:63:52:c1:21:f1:
14:5e:dd:f5:8d:e7:42:f5:0d:17:7e:0d:69:92:7f:
2f:78:e9:ed:2d:e2:8c:a9:2d:fb:8f:de:6b:a0:0d:
53:99:06:0a:71:5e:db:ad:3a:64:9e:c1:83:2f:64:
c4:f6:c0:09:3b:db:c9:e2:ed:09:9e:25:3a:ed:99:
60:f9:e9:a4:8f:e7:56:54:83:d1:46:77:de:d4:05:
bf:e4:68:45:97:de:cc:85:8a:d2:0c:ff:be:d9:d0:
52:28:8d:27:e2:93:cc:74:0e:03:96:29:f9:30:e9:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:38:94:C5:21:78:43:B9:9C:CF:04:F7:72:8B:A9:AB:D6:1A:24
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231382e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a8:03:6b:1e:88:ab:5b:22:dc:58:3c:1b:7a:16:05:53:ac:
26:bb:d2:67:11:5a:51:14:d3:0a:f8:5f:ee:77:c1:8c:f8:0b:
66:fa:04:55:38:3b:80:f9:2a:09:94:c5:04:2f:04:37:7b:f3:
5a:1b:43:ad:e2:c0:f0:7d:3c:f6:17:c9:21:63:71:12:d7:8e:
72:95:cd:b4:fc:73:46:fd:23:6f:44:f8:db:48:28:c2:f5:01:
9a:82:f0:b8:6f:f6:3c:59:c5:4e:c1:da:87:12:aa:6a:7e:ae:
51:6a:70:64:3c:42:bd:9c:97:65:c5:3d:f7:82:3e:24:28:49:
84:d9:16:21:e7:98:58:6b:2c:1e:a8:bf:55:e8:66:a9:39:a9:
06:fd:89:be:fc:82:57:8c:0b:44:de:a3:b8:e6:ad:89:b7:90:
3d:a1:e9:51:ac:71:1c:74:5d:d1:7a:51:36:92:45:96:1a:66:
9a:10:6a:14:9a:de:86:0e:20:ec:1b:f2:db:9c:16:8f:3d:ce:
58:a4:f1:28:60:4b:69:df:58:09:e9:4a:13:e9:cc:78:9a:76:
5f:ab:15:7f:9f:7c:57:50:69:7b:9a:7a:9e:39:95:3a:20:11:
37:a5:24:ff:d4:55:2e:df:b0:01:71:f1:0f:11:e4:62:51:0f:
81:83:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:37 2026 by rpki-client