Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e20343031373736.roa
File: 3138372e352e322e302f32332d3234203d3e20343031373736.roa (raw, json)
Hash identifier: t7e8Ue+dmD4MWVhuJTygPEfP31EkS4IaHfWcKSvt9EQ=
Subject key identifier: E2:6A:9A:0B:70:DF:63:49:EA:FD:4F:AC:90:CB:CC:1F:00:30:36:22
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 6FB8C703A824FACB42CD1908ACDDD92FF111F8D0
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e20343031373736.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 401776
IP address blocks: 187.5.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b8:c7:03:a8:24:fa:cb:42:cd:19:08:ac:dd:d9:2f:f1:11:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=E26A9A0B70DF6349EAFD4FAC90CBCC1F00303622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d9:66:71:eb:36:a3:14:85:01:e3:47:cf:70:
e4:a8:dd:00:6c:44:27:e7:85:c7:74:da:cd:b5:04:
bf:11:a7:7d:c6:6f:dc:af:bf:77:e5:be:94:2c:6d:
6e:98:9c:5f:51:a4:60:d3:8d:e3:06:1f:ca:f8:e0:
25:e2:0a:c2:3c:3f:99:dd:7e:7d:6a:8d:7f:3f:55:
18:48:1c:a2:d8:11:49:0d:e3:45:bc:b0:a2:ce:21:
98:9d:fc:df:ae:c3:88:cb:e8:aa:37:57:65:d5:bc:
ef:ae:a2:58:23:7e:1c:70:26:65:d1:04:ba:03:42:
6e:82:bd:ad:07:cd:68:04:67:80:d5:2a:b4:b1:59:
d2:26:0d:32:36:2a:a5:3a:64:e6:f9:90:7e:0f:b7:
65:44:af:60:ad:06:cb:de:fb:82:29:17:02:0c:d8:
94:bb:2d:de:3f:87:71:02:9c:13:f1:dd:04:19:05:
b7:78:d6:20:07:7f:6b:1f:ec:1f:28:f0:26:79:b9:
62:d9:0b:54:31:bf:67:5d:c7:80:ae:c3:8d:37:ec:
ef:37:ba:14:a7:de:32:32:a4:13:f2:bd:b5:25:54:
e6:be:d3:09:e9:a9:02:a4:cf:c7:24:e4:ef:41:82:
08:6d:69:61:d8:af:c8:ab:54:64:cc:95:52:93:bc:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6A:9A:0B:70:DF:63:49:EA:FD:4F:AC:90:CB:CC:1F:00:30:36:22
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.2.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:56:19:b0:6a:18:cf:2e:fe:31:36:17:78:13:2c:76:65:c6:
4e:3a:12:2f:88:11:f7:45:b2:59:a2:31:24:7d:27:9d:c7:0b:
f9:98:84:7a:9e:3c:bf:09:af:83:2c:55:bf:62:3d:41:92:b3:
77:6a:39:ed:0e:70:d8:a0:d6:15:3b:d0:52:50:fd:01:10:f0:
59:d0:38:b2:1d:b7:ac:64:a2:3c:5a:77:c2:2a:31:b8:fe:74:
96:84:6b:6f:65:f0:ef:ec:da:70:3e:c0:f2:19:64:b5:8c:39:
30:24:d3:b9:48:ef:7a:9a:39:82:16:f7:c7:f9:69:3d:7d:18:
5a:01:d8:36:c7:10:4e:63:fa:46:cb:6e:03:8c:dd:61:7b:85:
f9:eb:d3:4f:84:32:6f:8f:82:2c:f7:9c:08:6a:bb:8a:b6:a2:
e6:45:97:94:fc:b6:02:e7:35:6c:f1:90:76:31:af:5f:4b:ea:
81:b5:95:2b:95:76:29:a2:59:a0:42:c9:73:96:45:aa:d9:96:
66:05:98:3d:3c:c7:19:2f:61:0a:86:d0:33:0e:71:5e:a6:22:
cb:c8:ef:ab:fd:c4:2f:27:1e:57:45:6b:e8:b0:6f:d0:91:08:
f6:83:39:b5:1d:6a:38:31:79:70:85:85:4e:74:fb:a5:6f:2f:
f7:ae:e0:05
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUb7jHA6gk+stCzRkIrN3ZL/ER+NAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDFaFw0yNzA5MTUxNTM1MDFaMDMxMTAvBgNV
BAMTKEUyNkE5QTBCNzBERjYzNDlFQUZENEZBQzkwQ0JDQzFGMDAzMDM2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+2WZx6zajFIUB40fPcOSo3QBs
RCfnhcd02s21BL8Rp33Gb9yvv3flvpQsbW6YnF9RpGDTjeMGH8r44CXiCsI8P5nd
fn1qjX8/VRhIHKLYEUkN40W8sKLOIZid/N+uw4jL6Ko3V2XVvO+uolgjfhxwJmXR
BLoDQm6Cva0HzWgEZ4DVKrSxWdImDTI2KqU6ZOb5kH4Pt2VEr2CtBsve+4IpFwIM
2JS7Ld4/h3ECnBPx3QQZBbd41iAHf2sf7B8o8CZ5uWLZC1Qxv2ddx4Cuw4037O83
uhSn3jIypBPyvbUlVOa+0wnpqQKkz8ck5O9BgghtaWHYr8irVGTMlVKTvARTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU4mqaC3DfY0nq/U+skMvMHwAwNiIwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM3MmUzNTJlMzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzNDMwMzEzNzM3MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG7BQIw
DQYJKoZIhvcNAQELBQADggEBANlWGbBqGM8u/jE2F3gTLHZlxk46Ei+IEfdFslmi
MSR9J53HC/mYhHqePL8Jr4MsVb9iPUGSs3dqOe0OcNig1hU70FJQ/QEQ8FnQOLId
t6xkojxad8IqMbj+dJaEa29l8O/s2nA+wPIZZLWMOTAk07lI73qaOYIW98f5aT19
GFoB2DbHEE5j+kbLbgOM3WF7hfnr00+EMm+Pgiz3nAhqu4q2ouZFl5T8tgLnNWzx
kHYxr19L6oG1lSuVdimiWaBCyXOWRarZlmYFmD08xxkvYQqG0DMOcV6mIsvI76v9
xC8nHldFa+iwb9CRCPaDObUdajgxeXCFhU50+6VvL/eu4AU=
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:57 2026 by rpki-client