Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e20343032363238.roa
File: 3138372e352e342e302f32332d3234203d3e20343032363238.roa (raw, json)
Hash identifier: kqadylwDPfdhFybl/OD7ZR5o6+1amL3GEF8IhVwvMN4=
Subject key identifier: 8E:75:38:57:36:E3:2B:CD:50:51:2C:8A:40:BF:F7:1D:15:0D:EF:7C
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 51C30BC098989CEB5AF01E4F9D5A7CCE28727D78
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e20343032363238.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 402628
IP address blocks: 187.5.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c3:0b:c0:98:98:9c:eb:5a:f0:1e:4f:9d:5a:7c:ce:28:72:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=8E75385736E32BCD50512C8A40BFF71D150DEF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:e5:c3:b2:cb:36:34:fe:72:ea:83:27:47:
55:94:40:a2:91:44:d9:ed:68:9e:5a:61:0c:b6:ae:
fe:53:66:47:42:4d:96:a4:f9:ec:df:9f:86:14:21:
ca:c4:33:fd:e5:76:28:fe:d1:b8:ed:d1:75:bc:d1:
e1:db:e4:5c:ce:8c:40:4f:30:93:bf:02:31:a6:65:
1f:05:9e:cb:a3:9e:20:44:89:61:87:e0:68:61:10:
17:60:f7:e5:37:ce:3d:72:0a:d4:e8:05:b5:36:b0:
fd:e5:42:77:9d:bc:00:00:1b:03:ff:39:94:3c:e1:
a6:e9:8f:67:0a:f8:13:f2:cd:91:5e:5c:25:53:f6:
97:70:77:5c:09:61:72:d7:38:6e:ec:a7:e2:bb:32:
89:40:53:7f:cf:e3:9a:16:1f:f1:18:47:05:26:41:
0c:df:b8:78:c5:b9:23:44:be:e3:73:a5:31:88:2b:
62:69:f8:b0:e7:59:0a:ed:53:b3:39:c6:1e:26:75:
af:e2:88:e2:a6:38:95:b7:33:be:2c:ac:bb:86:57:
00:b3:44:f5:ab:5c:d2:9f:8a:c9:d1:4e:2d:65:50:
63:9c:d4:94:f4:74:7f:40:2c:ea:68:46:2a:b6:14:
3d:16:14:47:63:d6:a8:a0:7c:6a:54:0d:4c:ec:91:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:38:57:36:E3:2B:CD:50:51:2C:8A:40:BF:F7:1D:15:0D:EF:7C
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138372e352e342e302f32332d3234203d3e20343032363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.4.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:f7:49:23:a9:cb:93:82:1b:d2:6e:3c:98:0e:68:39:05:93:
82:83:b9:33:5c:83:0d:4c:a8:7c:ae:b9:3b:36:72:7b:8a:c0:
9a:11:e0:df:06:b3:96:3e:41:9a:48:99:67:e7:55:f3:1d:38:
81:34:73:3a:4a:32:56:3e:0e:53:a7:7c:e8:21:e9:74:2b:a2:
e8:3a:af:12:cc:9f:7b:a5:c2:e5:4a:d6:fa:7d:e8:c6:f0:48:
d0:0f:07:6f:29:a1:06:b7:d3:6d:fe:7f:e9:75:6a:7f:02:d5:
42:d5:03:e8:3a:e1:c4:bb:94:66:e7:5e:00:cd:50:fd:b7:d6:
1f:c0:25:65:12:ad:7e:5e:b5:37:d7:f7:fe:b2:48:02:03:aa:
37:38:54:56:4f:ed:50:f6:f0:86:ee:30:17:c0:0a:34:c5:e3:
fa:a0:a3:f8:51:3f:a1:2a:e4:57:1b:1a:c6:11:58:3d:07:e4:
5f:b4:75:1d:00:90:4e:06:b0:d8:ef:2b:77:37:b4:e1:e2:64:
57:c9:19:57:51:24:8c:45:43:4e:a6:77:9e:a1:b5:74:e0:02:
ed:34:e3:e9:fb:5f:93:4d:13:08:6a:5f:ba:8f:a7:c4:5d:2e:
40:7d:0f:da:6f:eb:1e:20:d7:cf:db:f9:c7:1c:0e:b4:32:d9:
7b:9e:c1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:35 2026 by rpki-client