Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e203336353330.roa
File: 3138372e352e322e302f32332d3234203d3e203336353330.roa (raw, json)
Hash identifier: ImNR7I3qCj3VybLOJ64a9gsJO9gRGCsCF2YSjnFpDdY=
Subject key identifier: 5E:F0:4B:CE:1F:46:B5:71:55:AD:87:BD:14:70:61:B4:BD:8D:54:88
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 29AB03C02C205493EE8F6AF8613898242754698B
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e203336353330.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 36530
IP address blocks: 187.5.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ab:03:c0:2c:20:54:93:ee:8f:6a:f8:61:38:98:24:27:54:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=5EF04BCE1F46B57155AD87BD147061B4BD8D5488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:28:f8:1a:28:be:af:d4:6f:b3:3f:16:c5:
97:d4:9b:0e:ad:e5:78:59:dc:43:b9:30:9f:cf:93:
a1:f3:87:d7:fa:6f:8f:44:46:44:23:d6:38:9e:e8:
84:cc:e7:1b:a6:cb:d0:4d:26:39:4c:54:7c:0e:ea:
b7:5d:44:b0:b6:35:8f:54:fc:0b:b1:86:bd:f3:06:
85:37:8d:7e:ad:08:c3:b6:d8:f5:a8:c8:c2:a4:2d:
93:31:0d:23:e1:b8:d1:d8:8f:4c:09:61:3d:a7:dd:
dd:99:5e:5b:47:3a:9e:81:c5:64:e2:83:d4:fb:c6:
0f:dc:7d:70:2b:09:89:0f:f7:81:c6:5d:9b:36:12:
f9:17:4c:5b:eb:e0:b6:07:11:0f:f8:a2:45:2c:c3:
82:fe:a1:28:5d:4a:08:e8:e9:96:8d:2d:7e:1b:2e:
55:54:12:ad:6c:78:95:d6:de:39:b4:ba:4e:0f:d8:
2e:8a:cc:38:02:70:1e:6c:d7:f5:b4:ea:ac:2e:37:
40:3f:55:a2:35:c1:ca:7a:22:29:77:63:f5:8d:e8:
6d:b0:66:6f:bf:91:86:77:01:07:ad:27:79:92:b0:
06:16:91:92:d2:c2:4d:58:af:ee:8b:bf:b6:99:88:
18:70:41:db:a2:b3:e2:e7:f2:37:39:26:c4:25:96:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:4B:CE:1F:46:B5:71:55:AD:87:BD:14:70:61:B4:BD:8D:54:88
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.2.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:a9:88:13:f8:0b:82:03:76:27:1a:f7:6f:f0:d4:5e:3a:ad:
09:ca:1a:0b:6c:db:c6:df:6e:e8:90:c3:a1:bf:0c:b8:52:c6:
98:df:43:43:eb:ad:8c:6a:83:4a:25:6d:2d:d0:3d:79:4c:c0:
59:64:fa:e6:4e:8a:4f:3c:92:a4:ad:cc:38:34:d0:5e:f6:94:
98:24:49:e2:bd:9a:93:ab:f6:07:6f:72:82:12:ef:54:da:e5:
06:4a:a5:b7:53:13:75:db:55:8a:0b:1e:a2:dc:fe:ce:63:ca:
f1:c8:d3:b1:51:1a:ae:57:85:7d:d4:40:aa:36:e3:37:64:55:
73:75:d6:bd:96:e9:17:e5:63:5f:7b:af:7a:07:2f:27:2d:6f:
cf:dc:f0:5e:4e:f1:b4:0f:82:8e:b6:26:06:be:58:7a:af:9c:
08:b5:f5:af:d9:26:3e:3f:b3:84:86:5c:92:ca:f4:bd:44:f1:
f5:3e:af:b3:a8:f0:92:15:77:16:97:cf:b0:6e:17:e1:00:45:
4f:0b:ed:18:ed:f2:ce:fc:19:c8:1c:65:77:1b:7f:70:5a:3f:
9e:23:9a:a6:bf:95:d8:5e:8e:8a:fd:82:33:8f:0d:f3:22:56:
ad:3c:f6:ec:0d:4c:92:06:65:d8:94:bd:7d:40:89:91:f5:77:
67:dd:04:5f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUKasDwCwgVJPuj2r4YTiYJCdUaYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDBaFw0yNzA5MTUxNTM1MDBaMDMxMTAvBgNV
BAMTKDVFRjA0QkNFMUY0NkI1NzE1NUFEODdCRDE0NzA2MUI0QkQ4RDU0ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9yj4Gii+r9Rvsz8WxZfUmw6t
5XhZ3EO5MJ/Pk6Hzh9f6b49ERkQj1jie6ITM5xumy9BNJjlMVHwO6rddRLC2NY9U
/Auxhr3zBoU3jX6tCMO22PWoyMKkLZMxDSPhuNHYj0wJYT2n3d2ZXltHOp6BxWTi
g9T7xg/cfXArCYkP94HGXZs2EvkXTFvr4LYHEQ/4okUsw4L+oShdSgjo6ZaNLX4b
LlVUEq1seJXW3jm0uk4P2C6KzDgCcB5s1/W06qwuN0A/VaI1wcp6Iil3Y/WN6G2w
Zm+/kYZ3AQetJ3mSsAYWkZLSwk1Yr+6Lv7aZiBhwQduis+Ln8jc5JsQlltpLAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUXvBLzh9GtXFVrYe9FHBhtL2NVIgwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM3MmUzNTJlMzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzMzM2MzUzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuwUCMA0G
CSqGSIb3DQEBCwUAA4IBAQDVqYgT+AuCA3YnGvdv8NReOq0JyhoLbNvG327okMOh
vwy4UsaY30ND662MaoNKJW0t0D15TMBZZPrmTopPPJKkrcw4NNBe9pSYJEnivZqT
q/YHb3KCEu9U2uUGSqW3UxN121WKCx6i3P7OY8rxyNOxURquV4V91ECqNuM3ZFVz
dda9lukX5WNfe696By8nLW/P3PBeTvG0D4KOtiYGvlh6r5wItfWv2SY+P7OEhlyS
yvS9RPH1Pq+zqPCSFXcWl8+wbhfhAEVPC+0Y7fLO/BnIHGV3G39wWj+eI5qmv5XY
Xo6K/YIzjw3zIlatPPbsDUySBmXYlL19QImR9Xdn3QRf
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:17 2026 by rpki-client