Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e20343032363238.roa
File: 3138372e352e302e302f32332d3234203d3e20343032363238.roa (raw, json)
Hash identifier: sOWwN1iWOUxq1OKmqE9tetEROxDx8Lf4GbCjWEk5Fiw=
Subject key identifier: 5F:C9:50:6B:89:C1:C1:4D:06:10:40:F1:FA:F3:51:41:38:9E:5D:75
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 2D24A6C1BD34A2DB146AB12822EFC8CED13DF8B5
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e20343032363238.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 402628
IP address blocks: 187.5.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:24:a6:c1:bd:34:a2:db:14:6a:b1:28:22:ef:c8:ce:d1:3d:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=5FC9506B89C1C14D061040F1FAF35141389E5D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:58:8d:5a:88:7b:64:20:38:b5:fd:02:ae:
3d:15:32:a1:e7:04:16:0b:98:71:9c:ae:8c:3b:36:
9f:0c:3f:f8:48:9a:c6:a1:f3:41:be:fd:e3:aa:3f:
d0:6e:2c:5c:b5:9b:8e:e6:78:a7:bb:9b:7f:c9:cc:
11:12:c4:e0:ec:b0:fc:12:66:c9:81:7c:80:28:63:
4e:7f:79:ec:ce:96:c4:e5:f8:81:25:73:54:9e:2a:
c3:1e:30:18:b5:a0:67:1e:55:ae:b2:0c:51:c5:7f:
66:b3:96:3b:79:8e:0d:4f:20:53:86:25:b6:69:46:
f2:ec:86:dd:99:12:15:36:d9:04:48:51:c9:5c:2f:
40:59:9d:7c:00:7e:d1:cc:78:66:f7:6e:35:23:d5:
2b:91:a8:b5:4c:0d:f4:a8:f0:d7:a1:4a:17:35:16:
9a:1e:84:11:99:05:98:42:69:b6:56:fa:41:17:c1:
73:f7:e1:8e:42:64:c7:7a:f8:91:fa:b7:27:42:43:
ec:72:c4:9d:08:dc:5f:4e:08:4d:90:de:66:c8:e2:
1c:86:cd:95:64:45:db:d7:6f:36:18:a0:42:ae:ba:
c1:74:cd:d8:d4:83:10:b5:ec:84:94:12:2a:05:3c:
40:a6:05:fe:7a:c3:c5:54:d7:bc:1a:d9:6d:49:ce:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C9:50:6B:89:C1:C1:4D:06:10:40:F1:FA:F3:51:41:38:9E:5D:75
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e302e302f32332d3234203d3e20343032363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0/23
Signature Algorithm: sha256WithRSAEncryption
49:63:68:c2:b6:a7:80:f8:b1:9e:d5:9c:44:4d:d6:d3:cb:5e:
f7:62:f2:f5:de:18:f8:94:c0:c3:78:34:bf:d9:2f:9e:86:7f:
3e:f5:20:74:38:98:a8:e4:65:1d:6d:ce:24:b8:f8:39:b8:e9:
c5:1c:8e:4e:e8:3a:56:93:a2:e4:7c:16:92:61:8c:ce:b3:c6:
2e:0e:4f:64:5d:49:1d:4e:ce:e3:e9:84:ee:b5:33:a6:fb:7c:
f2:dc:24:14:f7:c0:f0:ce:b5:6c:81:0d:03:b8:86:2d:b9:09:
26:ee:a7:02:9b:7f:6f:3f:48:6b:c8:6b:3b:d4:dd:e7:a0:58:
c6:44:c0:a2:57:bb:61:a0:3c:08:ac:eb:bc:24:47:95:58:33:
b7:07:89:58:76:11:9a:d4:0a:e6:d5:ce:9f:0d:79:3d:cf:ed:
07:1d:fd:c6:78:e5:aa:0c:20:68:74:0e:1a:d3:10:48:9b:12:
e9:9a:1b:50:e1:9b:1e:4b:52:9d:1a:aa:a4:69:2f:36:5f:4a:
29:13:9b:c8:5a:b1:b0:5c:18:1b:2c:50:a4:7d:bd:1f:e7:21:
ff:43:b7:06:9e:0e:6d:e9:b7:c4:33:23:49:c1:fc:17:e5:67:
c0:af:5b:93:50:e7:39:ea:9b:e6:a9:0a:72:cb:e7:bf:fe:1a:
8a:b5:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:34 2026 by rpki-client