Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e20343031373736.roa
File: 3138372e352e342e302f32332d3234203d3e20343031373736.roa (raw, json)
Hash identifier: 7j0B7rf5zied0Vm/Xuqc90kNHgJ3FCl1+jRdTQYQqAo=
Subject key identifier: A1:4E:2C:8B:14:17:5E:3B:0D:20:C7:B4:1C:AD:E0:8C:24:CF:EF:2C
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 12D7C3A3E8182F6A6567166082961776CEB66E25
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e20343031373736.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 401776
IP address blocks: 187.5.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d7:c3:a3:e8:18:2f:6a:65:67:16:60:82:96:17:76:ce:b6:6e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=A14E2C8B14175E3B0D20C7B41CADE08C24CFEF2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:ca:81:4e:00:8c:2c:e9:f0:49:02:90:60:
3f:ec:73:24:8b:db:a4:80:73:b8:f4:9b:4e:b3:4a:
41:05:75:52:4c:5a:d6:0a:15:c1:b8:e8:fe:78:25:
8d:9b:32:cc:c0:ff:4c:7f:a3:7a:24:4d:06:03:08:
55:0b:83:87:f1:65:9b:cf:0f:62:7d:f0:d1:48:df:
dc:0b:03:19:2d:ad:71:f8:41:f5:93:85:a3:c7:35:
5d:ef:47:20:89:ef:5c:f6:a9:1f:3b:c4:08:61:b2:
fe:cd:c7:f5:22:9d:fd:cc:e8:e5:7e:99:ba:4c:0a:
be:25:e0:fe:53:1d:11:bb:84:55:ec:d9:b4:ea:11:
46:cc:0d:9e:2e:76:2d:59:52:df:74:a9:0f:61:94:
f9:0f:2c:91:c5:35:7f:d1:c4:9a:48:8e:a5:64:e3:
22:ba:e5:14:0c:0b:e3:fa:f9:a5:21:ee:24:a1:77:
1e:2b:79:13:20:4c:ad:34:b1:4c:b8:0c:6e:d0:4f:
c2:42:01:76:60:a1:f6:c5:7d:eb:b4:60:72:91:72:
ef:46:b1:a7:c5:f1:d8:fe:88:49:0c:48:6b:46:f2:
76:3f:36:f8:1b:60:e4:ec:d6:88:49:36:68:dc:33:
b7:ee:bf:c4:9f:4f:0f:8a:0c:34:16:81:29:6d:a1:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:2C:8B:14:17:5E:3B:0D:20:C7:B4:1C:AD:E0:8C:24:CF:EF:2C
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e20343031373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.4.0/23
Signature Algorithm: sha256WithRSAEncryption
e9:85:22:90:f8:f8:1a:0e:26:65:86:8b:ef:81:54:df:c6:77:
88:a4:b6:2f:11:92:67:89:bb:68:4c:3a:b9:7e:d5:04:f0:bd:
0d:46:d4:f6:5c:1e:91:c1:7f:4c:51:2c:d5:35:30:6e:74:44:
83:fb:c7:04:29:bf:b8:57:60:50:d7:e4:2a:a6:2f:46:c7:50:
ba:7a:29:dc:9f:c2:8c:2e:6e:3d:c6:53:e8:6e:6a:c1:90:59:
c3:f6:eb:98:5c:06:f3:d2:30:ec:9a:51:ef:7c:ab:7c:3f:01:
dc:0b:47:82:aa:46:2b:ca:4b:5b:b5:01:2b:d3:ea:11:9a:d8:
d9:b4:87:a9:fd:6d:df:c5:76:e7:99:6d:27:10:5f:26:1e:3d:
41:51:5b:11:92:2f:be:16:d3:73:40:0d:8b:31:3b:f7:3c:a7:
1e:d7:0a:1d:e9:b7:12:5b:45:20:0a:2b:68:16:08:67:f9:e1:
8b:98:cb:73:69:d4:f6:46:72:dd:c2:08:0e:fd:58:25:27:a8:
b7:ea:ed:bc:60:91:59:91:52:2d:55:85:14:fd:0d:22:ee:57:
87:6c:06:3e:18:15:7a:a2:64:c4:7d:2f:08:3d:a7:d8:15:b0:
6f:c9:d2:5b:b4:e4:32:62:06:aa:75:24:4e:6f:11:69:48:24:
6e:c5:3c:5e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUEtfDo+gYL2plZxZggpYXds62biUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NTlaFw0yNzA5MTUxNTM0NTlaMDMxMTAvBgNV
BAMTKEExNEUyQzhCMTQxNzVFM0IwRDIwQzdCNDFDQURFMDhDMjRDRkVGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOLMqBTgCMLOnwSQKQYD/scySL
26SAc7j0m06zSkEFdVJMWtYKFcG46P54JY2bMszA/0x/o3okTQYDCFULg4fxZZvP
D2J98NFI39wLAxktrXH4QfWThaPHNV3vRyCJ71z2qR87xAhhsv7Nx/Uinf3M6OV+
mbpMCr4l4P5THRG7hFXs2bTqEUbMDZ4udi1ZUt90qQ9hlPkPLJHFNX/RxJpIjqVk
4yK65RQMC+P6+aUh7iShdx4reRMgTK00sUy4DG7QT8JCAXZgofbFfeu0YHKRcu9G
safF8dj+iEkMSGtG8nY/NvgbYOTs1ohJNmjcM7fuv8SfTw+KDDQWgSltofAfAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUoU4sixQXXjsNIMe0HK3gjCTP7ywwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM3MmUzNTJlMzQyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzNDMwMzEzNzM3MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG7BQQw
DQYJKoZIhvcNAQELBQADggEBAOmFIpD4+BoOJmWGi++BVN/Gd4ikti8RkmeJu2hM
Orl+1QTwvQ1G1PZcHpHBf0xRLNU1MG50RIP7xwQpv7hXYFDX5CqmL0bHULp6Kdyf
wowubj3GU+huasGQWcP265hcBvPSMOyaUe98q3w/AdwLR4KqRivKS1u1ASvT6hGa
2Nm0h6n9bd/FdueZbScQXyYePUFRWxGSL74W03NADYsxO/c8px7XCh3ptxJbRSAK
K2gWCGf54YuYy3Np1PZGct3CCA79WCUnqLfq7bxgkVmRUi1VhRT9DSLuV4dsBj4Y
FXqiZMR9Lwg9p9gVsG/J0lu05DJiBqp1JE5vEWlIJG7FPF4=
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:37 2026 by rpki-client