Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: Tf9SzNkZpcQvbNCM2NOP0zOEGXDR8leMQsj/0ikP91U=
Subject key identifier: 97:69:CB:14:B8:30:09:43:77:C6:A9:4F:98:E5:E5:CA:4F:92:A0:39
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7CBA6FE13BC05C82562E09CEC3D02F003F9DB7C6
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214483
IP address blocks: 177.201.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ba:6f:e1:3b:c0:5c:82:56:2e:09:ce:c3:d0:2f:00:3f:9d:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=9769CB14B830094377C6A94F98E5E5CA4F92A039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:6f:d5:69:ec:e9:8d:77:9d:bc:43:94:b5:
f4:69:03:04:cc:b4:78:08:12:ea:cd:7a:dc:b7:5a:
57:93:7b:48:b4:a3:ef:8f:ae:96:8e:3b:82:a5:cd:
18:8c:d0:d4:d9:87:2a:94:b0:82:d5:47:fb:4f:33:
ce:09:d2:58:c9:c9:2d:4a:f2:16:f4:e8:e6:a6:f2:
66:59:27:c9:aa:2b:ea:86:8a:64:d7:3b:3d:d4:91:
8c:f1:19:d1:49:a7:c8:cc:4f:28:8a:a7:9f:44:d1:
a4:a1:0b:83:91:03:ff:8b:a6:5b:cc:b5:20:75:3f:
7c:00:31:dc:e6:b1:dd:fa:ce:50:c5:1b:ff:19:89:
ad:2e:8b:0e:4d:b4:9d:71:58:7a:6f:ba:03:f4:dc:
d6:67:2c:c4:c4:53:b0:20:ec:2c:62:ff:48:97:db:
1e:1e:be:69:88:39:09:15:88:27:b6:09:75:6e:2c:
10:a6:5d:2e:00:11:4a:05:aa:dc:11:96:29:db:07:
84:aa:7b:0a:ea:fe:68:bc:06:c1:44:53:77:3b:41:
f9:34:4d:9a:19:58:f4:2c:84:7b:8f:c0:54:70:5c:
86:63:20:cc:42:bf:e4:45:6e:b2:0e:a4:fd:32:2d:
31:4d:29:d3:fb:d3:25:c9:0a:9f:0e:5e:d3:f7:78:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:CB:14:B8:30:09:43:77:C6:A9:4F:98:E5:E5:CA:4F:92:A0:39
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232302e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.220.0/24
Signature Algorithm: sha256WithRSAEncryption
92:7a:4c:bf:a5:d4:1e:ec:28:a1:6a:27:3f:70:44:cf:a3:af:
bc:6a:f0:23:31:d3:03:f4:da:1c:56:34:27:2e:87:ff:a1:2b:
95:49:3a:bf:fd:12:30:0e:a2:ed:7a:6c:57:e3:c2:74:8c:30:
9c:16:6c:df:5b:dc:d3:01:be:5b:cf:41:55:d4:94:d5:15:ec:
d4:fa:f4:78:82:8b:aa:0b:f6:e8:7a:10:38:9c:f4:0c:a9:03:
bf:f2:b3:bd:ac:34:0e:6b:c2:75:76:73:bf:27:3b:e2:f1:b1:
cb:81:ce:a0:3b:59:49:1e:7c:4d:16:da:91:d9:13:71:d3:4e:
e5:a2:42:58:58:8c:e1:e5:f5:06:9c:96:ae:53:5a:51:57:0c:
bd:4a:bb:8c:da:2e:eb:55:8e:94:7b:06:bf:5b:0e:16:3f:aa:
16:f4:e7:25:51:59:17:bb:97:69:11:0a:d4:4f:d5:fb:d2:b7:
b9:cd:5a:1b:9e:53:4d:28:45:4e:01:bf:56:e9:88:3c:30:1f:
b5:98:41:ee:77:ac:83:77:41:b2:92:00:69:8d:dc:99:71:5e:
f1:64:da:46:d0:ec:4e:c4:29:0b:ab:f5:85:28:fe:58:3a:ea:
aa:ed:77:b9:66:c4:63:4f:f5:4c:cd:23:27:ee:db:20:81:09:
3d:ee:b5:c5
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfLpv4TvAXIJWLgnOw9AvAD+dt8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKDk3NjlDQjE0QjgzMDA5NDM3N0M2QTk0Rjk4RTVFNUNBNEY5MkEwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4G/VaezpjXedvEOUtfRpAwTM
tHgIEurNety3WleTe0i0o++PrpaOO4KlzRiM0NTZhyqUsILVR/tPM84J0ljJyS1K
8hb06Oam8mZZJ8mqK+qGimTXOz3UkYzxGdFJp8jMTyiKp59E0aShC4ORA/+LplvM
tSB1P3wAMdzmsd36zlDFG/8Zia0uiw5NtJ1xWHpvugP03NZnLMTEU7Ag7Cxi/0iX
2x4evmmIOQkViCe2CXVuLBCmXS4AEUoFqtwRlinbB4Sqewrq/mi8BsFEU3c7Qfk0
TZoZWPQshHuPwFRwXIZjIMxCv+RFbrIOpP0yLTFNKdP70yXJCp8OXtP3eDrZAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUl2nLFLgwCUN3xqlPmOXlyk+SoDkwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzNzM3MmUzMjMwMzEyZTMy
MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzgzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALHJ3DANBgkqhkiG9w0BAQsFAAOCAQEAknpMv6XUHuwooWonP3BEz6OvvGrw
IzHTA/TaHFY0Jy6H/6ErlUk6v/0SMA6i7XpsV+PCdIwwnBZs31vc0wG+W89BVdSU
1RXs1Pr0eIKLqgv26HoQOJz0DKkDv/Kzvaw0DmvCdXZzvyc74vGxy4HOoDtZSR58
TRbakdkTcdNO5aJCWFiM4eX1BpyWrlNaUVcMvUq7jNou61WOlHsGv1sOFj+qFvTn
JVFZF7uXaREK1E/V+9K3uc1aG55TTShFTgG/VumIPDAftZhB7nesg3dBspIAaY3c
mXFe8WTaRtDsTsQpC6v1hSj+WDrqqu13uWbEY0/1TM0jJ+7bIIEJPe61xQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:50 2026 by rpki-client