Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231392e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3231392e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 4Q8w+8XH0RDgwehE2n2STyRIgn7enJUnegdOne2wA4c=
Subject key identifier: 14:CA:0A:B8:09:AF:AC:F5:83:C1:96:43:78:21:D5:4A:2F:99:41:9F
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 279980E38310A6815619E1D0C5F8DAD00337BC6F
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231392e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 214483
IP address blocks: 177.201.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:99:80:e3:83:10:a6:81:56:19:e1:d0:c5:f8:da:d0:03:37:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=14CA0AB809AFACF583C196437821D54A2F99419F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:a7:a0:b2:66:37:81:fe:a2:67:79:f4:08:
0c:d5:89:b5:62:84:fe:31:f5:df:5e:40:f9:cc:9b:
57:7c:7f:a3:f7:39:6a:a1:03:6c:84:3a:ab:5b:ac:
3a:a2:29:80:61:4a:9c:ff:ad:cf:41:2e:42:4f:6f:
56:0c:18:48:1d:62:27:ce:89:34:82:a0:5f:e8:2f:
5b:00:5e:d3:b4:6c:b8:11:3b:d6:29:ee:e5:c9:ee:
df:21:67:87:5a:01:6e:c6:b8:79:17:54:c3:ca:1d:
db:5f:ce:93:ac:76:6f:af:72:eb:eb:55:dc:0e:29:
5a:5d:27:03:02:28:c6:8f:b5:bf:89:f9:34:ea:ef:
a5:bc:1f:6e:cb:45:05:43:6a:7d:92:42:bd:79:07:
55:28:39:c7:d9:9a:a8:c6:c8:77:1f:4c:1f:c6:8b:
f9:e5:01:60:2b:a3:5f:8d:45:d4:6a:b3:dc:bb:c7:
2c:5a:aa:3e:2b:03:44:e4:11:75:cd:76:7f:a1:88:
04:1c:46:47:97:43:4e:62:d3:72:11:e2:3f:10:44:
5c:a2:ae:01:06:33:2c:15:4d:4d:e6:72:c9:ec:aa:
d0:55:2a:15:17:7b:b7:11:2d:70:e8:80:e9:08:c4:
f1:58:04:13:ae:5e:67:f7:58:b2:a6:fa:d7:1c:a4:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CA:0A:B8:09:AF:AC:F5:83:C1:96:43:78:21:D5:4A:2F:99:41:9F
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3231392e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.219.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:3b:64:0f:43:8c:7f:5d:45:4b:74:33:3d:77:f9:30:66:16:
90:12:0e:7e:dd:d6:e4:ae:39:cd:5e:49:ad:97:41:e7:65:d7:
24:cb:12:f2:d1:b4:fb:2a:b8:df:35:7c:d6:bc:8d:12:a9:28:
f3:75:fd:bd:d2:0d:69:0c:3f:62:10:9a:8e:2b:0c:d6:a2:a7:
e1:1a:42:75:ce:64:00:86:2c:14:a9:56:93:aa:8c:92:55:04:
83:e6:77:a5:92:b0:5e:1e:12:e7:97:14:53:ba:3c:3a:e2:71:
cb:9b:71:45:5c:cf:b9:03:37:32:dd:0b:c3:eb:c2:5c:75:fa:
cb:9c:10:d5:8e:59:1d:fa:f1:78:7f:9a:dc:05:37:a7:bf:c6:
fd:da:d3:16:31:10:04:ce:0f:78:eb:e7:8e:d4:32:d8:bb:2f:
59:06:8e:ca:79:8d:b2:0d:11:c5:b5:8f:f6:da:79:d9:e3:2b:
48:e0:44:79:45:0f:a4:fa:bc:17:da:92:ba:54:a4:52:ad:71:
47:f5:9e:15:4e:7e:e0:ad:8b:50:77:37:0f:da:f9:5e:c7:88:
eb:5f:ef:73:ae:4a:c2:83:e7:02:47:57:ca:19:a4:c3:27:c2:
76:c4:ce:c3:d4:21:3e:33:33:b0:5a:aa:f7:ac:be:f9:1e:c4:
c6:c0:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:38 2026 by rpki-client