Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e20343031373736.roa
File: 3138372e352e302e302f32332d3234203d3e20343031373736.roa (raw, json)
Hash identifier: ggrPZGJNFvRaNdu29nW6qD/tbIXrA9UCiA3GSM/ljmQ=
Subject key identifier: 61:02:39:6A:F0:6E:42:B9:39:D8:FD:5B:74:01:55:CE:B8:10:34:BA
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 27FBD98475D193806D29FCC1DC9A6D5F326EC004
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e20343031373736.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 401776
IP address blocks: 187.5.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fb:d9:84:75:d1:93:80:6d:29:fc:c1:dc:9a:6d:5f:32:6e:c0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=6102396AF06E42B939D8FD5B740155CEB81034BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:50:81:3f:37:7d:98:d3:25:1f:7e:0e:cd:
2f:02:46:c0:4b:3a:28:f3:a1:17:d7:bd:6e:ce:23:
c7:aa:ca:88:68:18:e3:9d:9a:b1:46:13:ce:d4:86:
17:4f:f8:7f:34:9d:73:c0:16:2e:05:97:c4:2f:69:
5f:de:0c:0b:6a:2d:af:fc:2a:2c:07:3b:77:a1:03:
97:a5:1f:94:7a:d8:6d:ab:36:d4:f8:ea:b1:4e:0e:
a6:44:c7:dc:81:cb:88:c7:ef:a7:20:1e:d3:d3:a4:
20:6c:cd:d0:4b:0c:1c:64:ea:d4:d1:2c:90:37:1e:
5b:9c:7e:49:f1:a8:35:b2:4b:ae:38:3e:90:ac:90:
cd:a8:f2:49:1f:29:6d:64:2b:5a:81:d1:c4:99:db:
d4:7f:51:a3:72:93:4c:5d:41:3b:82:76:7b:53:e1:
ad:27:0e:0e:32:0f:ad:9e:f2:c0:53:7e:b3:38:de:
1a:65:75:69:79:bc:21:70:46:fb:31:a1:61:d9:32:
99:5f:e9:f2:07:c7:f2:1f:22:88:c1:5d:17:ff:39:
98:a1:a3:14:61:c4:e0:de:a7:b2:b6:9a:a4:75:87:
6b:fa:f3:61:e1:64:df:0a:a0:96:53:38:0e:23:52:
1e:e6:4e:03:8e:07:13:a7:7e:21:59:08:ca:bd:ce:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:39:6A:F0:6E:42:B9:39:D8:FD:5B:74:01:55:CE:B8:10:34:BA
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0/23
Signature Algorithm: sha256WithRSAEncryption
50:ed:b7:d8:0d:13:5a:56:d6:b7:8a:b1:34:b8:d9:e8:f2:38:
a0:f4:2e:af:1e:74:0e:25:1f:ce:9b:b1:bd:2e:b6:b3:2a:a3:
5e:71:a8:4e:f6:be:66:77:86:89:53:f8:e5:cb:96:45:63:6e:
45:8c:10:eb:08:50:c0:04:0c:3d:a8:eb:53:7d:94:e3:4b:04:
7f:6a:a9:8b:79:4a:c4:ff:5c:14:0f:bf:69:a9:a8:8c:e5:02:
9b:04:9e:57:38:72:b5:24:72:6f:f3:92:12:14:38:e0:76:52:
2b:79:84:cc:a7:60:1e:bd:5d:b7:d1:a3:e1:4d:e2:58:4b:a3:
69:50:21:e9:65:bb:df:b5:49:e8:5a:77:1a:e0:70:7c:4b:59:
1f:cb:f4:e8:bd:76:f2:c5:c7:4a:24:a6:96:80:96:69:b2:70:
50:aa:c1:75:d1:38:98:7e:ac:18:1b:7f:eb:2b:8b:c2:ff:44:
64:4e:83:90:57:2b:a1:22:30:21:d2:1b:33:20:5f:fb:4e:54:
73:b8:0a:87:f6:9c:81:b8:66:21:ab:c7:52:db:24:ca:ec:db:
d2:08:85:6b:1f:a5:cf:3a:14:dc:e4:87:d0:d6:8c:a3:0a:a7:
0c:fc:4a:e0:4e:c5:a5:df:b9:ec:e3:6e:e4:ae:8a:2b:65:04:
e4:5d:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:37 2026 by rpki-client