Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e20343032363238.roa
File: 3138372e352e322e302f32332d3234203d3e20343032363238.roa (raw, json)
Hash identifier: ssHgplBujnGQyFL04QKXLfebdjoomF4Omf3lnrq3DKA=
Subject key identifier: BB:05:90:65:02:1F:53:B4:D7:40:72:96:35:F9:9D:C5:70:D0:1C:9C
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 10A8AC0730CDAD161656CCACB6FE693E9544F586
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e20343032363238.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 402628
IP address blocks: 187.5.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a8:ac:07:30:cd:ad:16:16:56:cc:ac:b6:fe:69:3e:95:44:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=BB059065021F53B4D740729635F99DC570D01C9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:4a:9f:45:ff:32:ec:2b:3c:c1:e5:99:26:
6c:fe:71:f3:32:f0:fa:1d:2c:6b:6b:7c:71:4e:5c:
52:ee:8e:51:19:06:71:57:0a:b8:8f:7b:d5:41:8b:
94:3a:f0:fc:79:bd:5f:26:09:08:a8:df:da:e0:36:
f3:57:1d:84:53:3c:ba:9f:fa:a2:8b:07:9f:8f:af:
e2:7d:5d:1e:70:e2:bf:cc:26:c1:c6:b0:52:9c:c2:
2c:77:0a:05:02:ed:d8:0b:ff:9c:6b:d1:f2:09:82:
77:10:fb:8d:68:ff:68:a8:fe:cf:a5:7d:74:ec:df:
62:52:86:d7:cd:5e:f8:b3:13:c9:34:4c:25:c9:83:
4c:f3:09:65:f6:e9:53:53:f3:5c:f8:3b:eb:56:65:
d8:81:16:16:3f:be:8a:81:0c:b9:1f:12:88:ca:e5:
a2:48:59:f3:19:28:5e:6e:82:ad:c4:02:2d:cf:c7:
77:2c:31:b4:8d:31:18:83:af:96:20:5d:ee:25:e4:
24:36:85:83:b2:77:1f:07:2f:b7:45:dd:e8:33:40:
a3:07:c6:0e:82:97:2b:db:1c:8b:f4:7e:c1:35:d3:
b5:02:90:07:ae:9f:5f:04:35:bd:51:13:42:7f:9d:
fc:33:2d:dd:6f:81:93:e0:b8:1e:08:73:3c:b4:27:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:05:90:65:02:1F:53:B4:D7:40:72:96:35:F9:9D:C5:70:D0:1C:9C
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e322e302f32332d3234203d3e20343032363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.2.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:45:f6:cc:75:56:dc:b0:7d:82:ae:c5:dd:2a:7d:b2:af:c4:
32:65:68:10:33:07:61:fe:a2:e9:de:48:b4:b8:96:16:46:0d:
a9:86:e1:66:aa:13:a5:ca:c1:44:80:cb:84:50:28:bd:4d:4b:
31:d1:aa:bc:7d:c0:cd:a5:1c:a2:6a:59:c1:b7:cb:97:ce:bf:
d2:43:76:7d:ef:dc:e2:53:8b:98:fa:24:97:8c:fd:fe:47:cb:
4e:09:cb:fb:9e:ca:a9:83:b4:90:56:a6:fd:77:e7:27:f1:49:
00:e0:3b:85:89:57:44:b4:c8:e0:10:c1:d4:75:7c:21:fc:90:
e3:12:d7:6c:89:13:3a:98:0e:39:80:f3:50:8a:d6:e5:14:d7:
f5:71:59:89:87:ec:22:ff:1b:06:0a:71:7e:2a:1a:98:bb:15:
2a:e3:ca:7a:aa:bf:e8:30:b0:29:cc:e9:29:16:0b:7f:24:cd:
f3:d1:53:02:7d:80:ec:e2:a0:42:ff:61:15:e5:56:30:03:48:
c4:39:ba:b7:f3:5f:7b:16:a9:7b:1b:59:6e:55:1a:b0:b7:48:
d0:37:df:ab:da:56:c5:fb:60:a7:40:93:f2:4a:ae:e8:27:b0:
6a:29:d8:39:23:ac:ed:73:06:46:d7:50:51:d4:7a:a5:c4:ed:
69:2d:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:45 2026 by rpki-client