Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232322e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3232322e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: ysRo1rnguVXSeMzXuV2dAFS99V4GeWy1NtkAF6Zs2wE=
Subject key identifier: B9:08:19:C6:C3:5B:54:A7:D0:47:DC:C3:9C:3E:FF:EC:4B:42:06:D6
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 15A8FC8D86113137D33644457E0F4F73F9137586
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232322e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 214483
IP address blocks: 177.201.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a8:fc:8d:86:11:31:37:d3:36:44:45:7e:0f:4f:73:f9:13:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=B90819C6C35B54A7D047DCC39C3EFFEC4B4206D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:39:dd:3a:db:ac:3c:21:0a:d6:f6:c5:80:
4a:94:bc:d1:c9:93:34:4d:ba:4d:13:55:63:c4:36:
8f:1c:c1:3d:8c:bd:f7:8c:81:5b:b1:a8:01:51:bf:
b7:e9:04:2d:4d:4c:b1:ec:53:45:f0:2d:2f:1e:94:
2a:6a:d6:69:6a:ae:1e:b1:98:22:76:8d:f6:df:93:
d7:b9:60:14:95:c7:5e:6d:37:f8:53:43:80:7d:6c:
37:69:9f:95:56:e2:ad:82:d5:84:8e:ae:b0:e4:b3:
82:39:24:17:02:4b:e5:cd:89:67:75:d3:b5:58:d0:
2b:f0:6a:1e:89:53:a7:81:be:0e:21:3e:2b:0a:ea:
36:7e:ef:dc:50:d6:ba:08:9e:4d:01:df:18:f6:cb:
aa:9a:45:6e:41:8a:1b:1d:15:1a:dc:bb:9e:2b:82:
50:4e:d5:e9:6c:b6:8b:3f:53:45:01:39:6b:40:5e:
95:90:c6:9f:0f:52:dd:b0:9a:5d:e9:3f:5d:9f:ed:
e9:20:57:06:e0:04:07:35:b1:63:59:e1:c9:91:75:
4d:15:5d:19:2b:ab:52:4d:50:4f:cc:79:de:50:87:
b6:41:30:d6:74:38:33:5d:ad:77:16:34:cc:da:ca:
74:ce:b2:e7:95:0c:22:e6:12:51:b2:a6:56:c0:c6:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:19:C6:C3:5B:54:A7:D0:47:DC:C3:9C:3E:FF:EC:4B:42:06:D6
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232322e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.222.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:c9:00:ce:73:fc:28:7b:22:b5:cd:72:11:5e:c8:35:cd:43:
79:61:65:55:19:e7:97:64:d1:d6:07:c1:98:67:24:d3:2e:b1:
3f:1b:08:38:4b:7a:77:a9:4e:b1:37:20:8a:40:66:fd:a8:39:
96:ca:ec:26:d1:6e:c1:0d:b8:93:4a:2f:15:da:3f:30:a5:60:
59:d5:24:f5:05:cf:c1:5f:c0:6c:2f:ce:fb:7c:36:35:b4:2b:
9c:a2:58:c0:aa:45:4b:e4:7d:f9:f2:77:0f:30:24:46:60:2c:
bc:bf:35:1d:16:b1:2d:85:f9:0f:fe:dd:1c:a8:f7:97:37:79:
17:65:eb:f9:f3:fc:75:1d:86:4e:c4:5f:24:bc:9d:72:2c:e2:
30:0e:39:23:f9:8c:58:aa:9b:38:54:45:fd:51:b0:cd:fe:41:
3d:f2:a6:af:61:09:ee:1b:5f:59:cc:8e:cf:59:30:a1:63:e6:
6d:f9:5a:e8:39:2d:e0:81:d4:47:48:e7:5b:68:26:2d:67:dd:
58:60:16:54:79:04:a6:b1:75:e2:1a:cb:f8:30:10:f8:c3:c5:
bc:56:e0:da:1c:7c:cc:4a:00:b4:93:04:26:1a:34:e4:04:92:
8a:f7:2d:a0:88:b1:ab:d8:0c:94:cd:bb:93:c2:92:7a:e9:5e:
7b:e5:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:10 2026 by rpki-client