Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232332e302f32342d3234203d3e20323134343833.roa
File: 3137372e3230312e3232332e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: qtm95pNmWNuHg1qxhk0lv5opMpRpysO0MspBOj8850Y=
Subject key identifier: 0D:D7:2B:E1:57:19:DD:2A:0A:3C:0A:81:FE:96:41:50:D3:3F:A8:3A
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 28280CBA71D3A6EB94085448822712D28170BD39
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232332e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:35:02 +0000
ROA not before: Wed 16 Sep 2026 15:30:02 +0000
ROA not after: Wed 15 Sep 2027 15:35:02 +0000
asID: 214483
IP address blocks: 177.201.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:28:0c:ba:71:d3:a6:eb:94:08:54:48:82:27:12:d2:81:70:bd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:02 2026 GMT
Not After : Sep 15 15:35:02 2027 GMT
Subject: CN=0DD72BE15719DD2A0A3C0A81FE964150D33FA83A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:e5:96:0b:13:8a:2f:eb:a5:cd:57:cf:c9:
19:1a:7f:17:31:5b:57:02:33:54:ee:6b:02:dc:36:
36:00:b8:89:22:05:d1:69:16:88:a9:9f:66:ed:5c:
06:8e:0a:e8:4f:4c:e2:c5:74:a3:86:d8:d0:c9:d4:
d0:a2:d1:f0:d4:dd:d5:e5:8f:3d:fc:c0:1a:7c:33:
5b:8e:b8:d1:40:ea:b2:f0:d2:c3:fe:17:d6:81:0d:
15:05:77:c0:9d:c1:e9:20:50:45:4f:9f:e3:78:5b:
27:3b:f1:1f:da:0e:e7:3a:2b:ae:7a:50:99:05:55:
97:2e:77:52:62:15:68:02:49:45:78:3c:30:eb:29:
30:98:26:11:94:e3:1a:ae:ed:4b:ae:ba:30:79:ad:
a4:97:60:68:5f:60:75:31:ea:bf:ec:cf:37:d3:cf:
e9:47:e8:2a:39:85:3a:9f:2d:9d:dc:e5:0d:71:49:
c1:85:23:db:b2:46:9a:48:7f:53:9c:da:91:97:ee:
b6:b5:b7:8a:b0:b5:e3:a8:03:2a:03:1e:99:26:53:
e5:bd:3d:1e:2a:8a:43:75:88:5a:f3:f9:f7:26:ef:
07:bf:f4:7b:1c:5c:42:95:31:d4:5f:f5:85:bd:82:
ac:80:dd:1b:44:9a:b9:e8:71:a2:5a:fa:61:e3:a0:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:2B:E1:57:19:DD:2A:0A:3C:0A:81:FE:96:41:50:D3:3F:A8:3A
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3137372e3230312e3232332e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.201.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b8:77:01:75:21:e1:15:54:93:27:a8:45:80:aa:2b:b9:9d:
fe:70:93:78:0f:9f:43:66:4c:8b:9e:71:7a:7c:fa:06:11:16:
89:c3:57:09:81:7c:21:56:28:3b:25:25:21:d1:4c:0a:19:3b:
de:df:26:2a:6e:3f:da:28:af:0f:97:e2:dc:57:6a:51:f8:ff:
86:cd:59:ff:5f:61:b5:4c:ca:6d:d0:07:57:22:04:e7:79:23:
f5:5c:c7:e1:fd:88:38:6f:7c:d8:8f:db:36:9d:28:3e:00:2b:
7d:57:34:e2:72:70:06:94:91:e4:88:ab:18:34:84:7f:a2:c7:
a5:86:33:c8:2f:5f:6e:49:70:c7:4a:28:c3:64:7e:eb:6c:26:
26:31:9a:4e:c4:14:eb:97:29:21:f8:00:43:7d:2d:74:5b:d6:
88:05:6b:57:37:47:d5:cf:07:35:90:db:da:1f:b0:02:45:7d:
2a:93:b1:4b:99:5f:53:d6:bc:e4:a4:c0:e1:cf:ff:14:92:c2:
9d:fd:e0:f0:47:21:a7:6e:4f:a2:36:ce:79:c8:19:f6:fd:9d:
65:e6:73:d0:e0:d6:3a:4e:e6:f6:12:5d:de:61:c7:7a:68:4b:
fc:43:5a:85:29:f1:e6:fd:4a:b8:b1:f0:3f:97:81:c8:bb:b4:
f6:7e:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:36 2026 by rpki-client