Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e203336353330.roa
File: 3138372e352e302e302f32332d3234203d3e203336353330.roa (raw, json)
Hash identifier: ynR5uBaLkLiRAgIe6f14NNnd7rYuTbTNx6eEfjYbyd0=
Subject key identifier: 28:76:4C:C9:A7:8A:43:E2:14:FB:C4:D7:F9:C3:88:F5:41:A4:1F:DF
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 73DF2EC3B1D62F81A7ABB0C1306D868ED352CAF3
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e203336353330.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 36530
IP address blocks: 187.5.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:df:2e:c3:b1:d6:2f:81:a7:ab:b0:c1:30:6d:86:8e:d3:52:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=28764CC9A78A43E214FBC4D7F9C388F541A41FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:3c:40:9f:20:7f:5b:40:0e:1a:b4:ee:d9:
8e:97:a9:50:38:ec:fa:6a:9d:3a:ef:2b:ff:48:6c:
11:8b:9e:c6:09:58:75:1f:64:fc:2d:42:21:27:74:
25:63:55:54:0b:53:1b:ab:1c:f2:0c:9e:cc:21:63:
c4:83:d2:14:64:08:df:c1:87:f5:25:89:48:e5:f9:
92:cd:9c:6a:3e:df:9e:20:61:9e:8a:57:81:1a:76:
44:02:d6:b5:61:08:c5:93:d1:88:05:4a:8a:44:ad:
f2:d9:75:0b:2f:80:fd:d9:b3:dc:6c:08:0b:83:25:
0b:e4:75:c6:65:8d:c6:32:99:0f:55:88:75:ed:5a:
ac:ad:c2:0d:14:71:a9:11:63:79:d1:64:78:1f:7e:
fc:81:55:1a:e9:b2:86:18:1b:93:79:c0:89:dd:5e:
8e:70:02:8c:47:67:3a:25:a0:8b:f4:c7:3b:fd:6c:
7a:25:07:38:2a:4b:f0:f4:aa:63:61:1c:f9:c9:bd:
d2:c2:51:f8:15:22:3c:7c:b7:a8:e8:61:26:61:38:
f9:bc:47:7a:43:7c:cf:19:f2:be:ef:9f:ac:19:c0:
e9:7d:63:13:a5:3d:ae:60:4a:ec:f5:63:1b:35:09:
82:03:84:28:53:5a:1d:54:fc:f9:b4:83:22:33:54:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:4C:C9:A7:8A:43:E2:14:FB:C4:D7:F9:C3:88:F5:41:A4:1F:DF
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:c6:8c:ab:bf:6d:5f:cc:8c:8a:ea:cb:76:d2:ff:0e:21:a3:
3c:02:59:29:3e:7d:13:e7:8d:61:46:d7:7b:4e:55:27:27:7e:
82:4c:ff:72:ca:a0:f2:0e:ea:cf:c2:a9:2a:ca:1b:4b:d3:01:
b3:bb:1c:d2:77:4e:e0:d7:7c:bc:c4:69:a1:4c:b0:e0:80:90:
a1:bd:a2:25:99:0f:03:e2:4c:2e:d1:86:43:d4:32:84:b9:5b:
8c:06:21:a0:d0:a7:f8:6e:1e:33:0c:ec:a9:2f:2d:24:e8:dc:
9d:13:c0:ed:c5:23:1b:10:0d:bb:45:06:ca:bf:1e:8c:10:8e:
a3:10:53:b9:96:b5:89:65:33:da:ff:39:77:d6:d6:ec:96:60:
fa:0b:59:86:f3:ea:0b:8a:9f:0b:70:16:05:b2:67:96:ad:98:
19:e1:ac:ef:c0:4c:5a:7a:96:34:e7:eb:8b:46:ff:80:54:3b:
69:c5:fd:fb:7c:57:d8:40:ae:33:8e:d2:54:ba:47:14:9c:a9:
f5:2d:6e:f4:45:9b:c8:68:bb:61:fd:3f:7b:26:8a:8a:24:e7:
43:1b:42:ea:23:83:25:41:1b:39:e9:07:c3:b5:ed:5a:92:48:
96:58:89:98:ae:ad:83:0a:f2:de:97:ab:90:2f:fb:8b:e7:0b:
1c:91:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:12 2026 by rpki-client