Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e203336353330.roa
File: 3138372e352e342e302f32332d3234203d3e203336353330.roa (raw, json)
Hash identifier: dIuywrzSNbCCEekBSaoXmgU86wOlt/vDAicT0m2wq8s=
Subject key identifier: 46:C4:C6:F0:49:2C:72:D4:62:E0:49:FE:D1:AD:EF:01:24:20:B8:B0
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 0BAA8447C3C0A76C7F2DA03A3A3CE387027C09ED
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e203336353330.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 36530
IP address blocks: 187.5.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:aa:84:47:c3:c0:a7:6c:7f:2d:a0:3a:3a:3c:e3:87:02:7c:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=46C4C6F0492C72D462E049FED1ADEF012420B8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:1b:3c:08:e0:76:42:e9:89:0c:2a:e8:4f:
6e:93:30:85:4d:c7:61:fa:fc:00:cb:cb:5b:0f:f3:
f6:b8:84:b8:e3:27:95:aa:d1:db:cc:0d:15:08:02:
9a:fa:cd:00:e4:86:2c:66:64:1a:04:c5:a1:12:e1:
eb:c1:a1:39:e7:f5:6d:ab:6f:f8:4c:80:de:ee:4f:
0a:a7:8c:dd:cd:66:59:d4:91:68:3b:06:ec:ab:20:
d1:a5:b2:87:3c:f9:cf:58:cf:a9:25:b2:80:bc:38:
37:29:cd:e4:8a:77:2c:b5:0a:9a:78:d2:97:bc:6e:
f4:50:ef:90:6d:9b:b6:d6:b3:b6:76:20:e3:ee:2e:
cb:9a:00:01:d8:8c:6e:ed:94:99:42:6e:f8:1a:da:
5a:3d:b8:72:d8:15:c0:6c:20:5e:0e:81:59:f3:26:
0e:2c:84:46:dd:44:0b:20:5a:a3:5d:34:07:5d:77:
fc:27:43:42:14:5f:57:01:29:12:5b:62:1a:f5:f2:
da:bc:5c:73:44:8a:78:da:1c:c9:42:21:93:95:d3:
3c:93:2b:94:67:8b:80:09:37:76:71:81:7b:58:f6:
58:5e:76:90:f8:6b:ec:b9:f1:c7:3a:b3:e0:f0:7a:
62:1f:7d:83:58:66:15:dd:cb:2e:c7:6d:1d:dc:60:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C4:C6:F0:49:2C:72:D4:62:E0:49:FE:D1:AD:EF:01:24:20:B8:B0
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.4.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:33:23:76:a6:1d:6e:df:cd:37:a6:61:c1:56:64:d8:df:69:
15:82:f4:46:c1:24:e4:f6:ce:63:48:46:56:97:36:b6:f6:34:
52:7d:89:99:2d:38:0d:ca:77:9e:30:a7:c4:03:2b:f3:89:b7:
46:07:0b:a3:c8:c7:bd:11:42:5e:b9:62:53:99:e4:7b:05:21:
d0:6d:de:be:74:74:0b:3c:4b:3d:b5:95:0d:82:91:4d:21:56:
31:c0:b8:2f:9a:73:06:4d:d6:e9:1d:8b:fc:d7:1f:54:21:b0:
d7:d4:c1:3e:d4:5b:e1:f3:aa:c2:74:b8:0c:86:a8:9f:44:85:
43:c4:9c:37:17:bd:cd:96:d9:81:ac:3f:cd:d7:01:e9:93:3c:
96:1c:c1:98:31:62:ad:ba:46:6f:0b:2a:4f:2d:f2:ea:c9:0d:
47:ca:79:5a:01:b0:26:9f:b1:36:15:0e:52:d8:f0:28:b3:64:
fa:7b:9e:d0:37:05:0b:aa:4a:eb:1f:1d:fa:fd:d6:76:3b:c4:
ae:38:ab:bc:73:de:9d:5e:65:57:eb:07:9d:d4:59:0c:23:18:
66:e7:b3:01:d1:74:49:c3:a0:e8:3e:63:80:1e:6a:5a:27:a9:
36:38:8f:03:93:1d:32:b1:af:a1:29:02:1b:c3:e3:c6:05:19:
31:a1:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:14 2026 by rpki-client