Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: qnmSgw8URBsor9FjafVIuI+yR1eI3Cj2q4Laxaaiobo=
Subject key identifier: EB:B4:95:AF:16:D3:7D:76:30:6B:5E:01:6D:77:2A:ED:03:3A:9A:00
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 65B1CEC207D0D219F6EE2AE2F90113E50438550E
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214483
IP address blocks: 177.201.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b1:ce:c2:07:d0:d2:19:f6:ee:2a:e2:f9:01:13:e5:04:38:55:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=EBB495AF16D37D76306B5E016D772AED033A9A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:c0:d5:15:97:ce:f0:16:d0:31:79:0c:b4:
78:76:20:48:ff:eb:5f:c0:f0:d3:6c:62:cf:99:ee:
01:a8:5b:78:af:cf:fd:64:b6:a7:b3:79:7f:93:f9:
8f:c5:29:81:71:9a:a2:0e:30:22:be:0b:13:7d:ba:
36:cb:76:0e:a1:2e:45:6d:13:db:57:0e:ad:13:bb:
97:27:2d:e1:b3:5d:d2:a9:48:c2:b3:84:2f:18:2a:
d2:15:a6:22:f1:47:dc:dc:09:a6:22:28:d9:df:71:
c8:89:0b:40:0d:64:86:ef:59:0c:bd:1d:9d:91:33:
21:8a:ca:7e:f6:60:4a:1a:26:1a:d7:47:03:aa:d3:
cb:10:8d:85:93:00:ca:e0:d8:fa:f2:ec:f2:aa:41:
b2:cf:5a:d0:c7:c2:a1:d2:16:a5:6e:c6:3a:0f:6c:
a2:3c:2b:7d:72:81:c4:cf:3c:b4:15:5a:be:fd:1c:
67:a4:c2:3d:a0:e8:28:3e:43:58:6a:d0:d9:d8:c7:
68:8b:db:34:c2:f9:76:12:4d:34:08:0b:0e:99:5c:
7f:05:d7:ae:b6:0a:0d:8b:ad:8e:77:0e:cd:76:e7:
22:c6:8a:2a:c0:c1:f4:14:b7:a2:39:74:f4:2a:10:
2b:70:e9:c0:17:5b:fd:09:4f:0a:e0:99:d8:32:c8:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:95:AF:16:D3:7D:76:30:6B:5E:01:6D:77:2A:ED:03:3A:9A:00
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232312e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c1:24:fc:a0:4f:11:ab:cd:41:29:23:58:6a:97:6e:c8:29:
6f:8f:6d:07:d1:2e:58:32:29:ab:d6:54:ed:ce:17:58:ca:07:
23:24:a1:66:54:7e:90:04:c2:25:f4:c6:f4:e6:d3:52:33:80:
c0:07:e1:a1:f6:74:c8:20:e1:4f:8f:9b:02:a6:4a:f4:62:9e:
0e:a4:e6:07:89:9e:4a:83:40:c2:e5:6c:43:80:7a:a9:4c:b6:
b0:0c:f7:aa:1e:f6:4d:92:f0:56:56:6b:e6:5c:b2:9c:fd:8d:
d6:55:4f:cb:73:bf:25:f3:c9:57:ef:6b:56:3b:7c:05:48:29:
ae:52:35:a5:4c:41:2d:91:a5:e9:5d:7d:e9:dc:8d:e9:36:08:
b4:fa:fa:34:f6:20:c2:cf:88:31:70:79:2d:f7:26:b5:51:ca:
77:07:ec:4f:9a:84:d4:17:a6:df:8f:35:a9:5e:45:a1:6a:6d:
45:ec:52:b6:86:56:ec:05:39:cc:29:ab:c3:bc:4f:3b:6b:9f:
87:2c:e3:ab:30:d7:ce:66:60:d4:3d:2c:c4:a6:09:31:ad:2f:
40:2e:4a:b9:6d:57:06:98:97:66:18:54:91:a8:22:70:de:d1:
4e:b5:45:c8:b5:ce:e0:fd:31:ef:cb:5f:5a:be:b5:6d:54:d6:
e0:eb:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:32 2026 by rpki-client