Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3132382e302f32342d3234203d3e20383334.roa
File: 3138392e31322e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: H4zGJoiroB2RuK/r1lVPLXSDCHrte7TkKUdZZiPfumw=
Subject key identifier: C0:38:2D:6C:9E:62:DB:97:60:C3:11:BB:1E:F1:6A:C7:BB:0E:19:12
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 4562F0FCFC3A3644328783CBED79043CF7C6A6EF
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3132382e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 834
IP address blocks: 189.12.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:62:f0:fc:fc:3a:36:44:32:87:83:cb:ed:79:04:3c:f7:c6:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=C0382D6C9E62DB9760C311BB1EF16AC7BB0E1912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:db:be:81:b4:ef:a4:d8:62:d2:10:8f:85:
a9:8f:13:a7:30:11:a4:1c:22:76:4f:df:41:43:57:
ce:b6:03:bb:25:32:08:0c:49:ab:b3:e4:8d:ec:8e:
3f:b7:15:26:9c:79:1a:fb:16:5a:4e:dc:83:d9:11:
fa:dc:fc:7e:f9:8d:9a:8c:fd:eb:6b:5e:8a:19:32:
60:7c:bc:31:92:b8:25:ea:e9:9d:86:2e:a7:ad:7c:
9d:7e:7c:c1:9d:09:02:bd:9b:53:da:d6:61:b1:a8:
25:4a:28:f6:18:ce:c2:17:9a:4b:11:42:0a:22:bd:
b6:9a:df:ff:df:37:9f:4a:1b:a5:94:0c:3c:04:ac:
6a:5e:b9:d9:f8:4a:41:f8:93:79:1a:6a:1a:ab:4f:
86:b7:f7:0b:29:e8:e6:dc:97:2d:e5:03:6c:24:ef:
34:a7:30:30:b3:61:a9:3e:40:17:2d:88:86:e5:41:
64:a3:6a:23:2d:d6:08:b5:34:ab:c7:df:1d:83:99:
3a:66:c2:45:b0:01:ee:a1:01:76:a8:29:80:1a:a0:
33:4d:09:ad:7c:16:75:dd:17:24:94:07:8a:1c:41:
e9:b8:b7:9b:4b:43:a7:00:3d:c4:94:13:71:de:bc:
a3:3e:5f:12:b4:86:59:75:23:7e:7a:27:d2:d8:70:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:38:2D:6C:9E:62:DB:97:60:C3:11:BB:1E:F1:6A:C7:BB:0E:19:12
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:63:c0:7f:88:e2:4d:82:fb:75:11:03:d4:50:dd:a3:86:45:
d7:ef:4f:a2:71:11:0a:ab:a5:a3:30:30:00:83:a3:b1:5c:8e:
83:fb:4d:73:6b:58:df:1c:04:45:fa:92:ac:b3:87:5e:d6:e1:
3c:28:51:e4:a6:55:ab:b2:20:32:8a:f1:4b:25:fb:bd:26:64:
bc:3c:df:d3:71:c9:21:98:2e:8b:5e:31:ce:e5:10:15:ff:10:
f3:92:06:0e:3f:1f:35:22:de:b5:93:50:0e:fb:15:2c:af:07:
b8:63:1a:10:e2:7d:8e:6f:3a:e3:b4:b4:ff:01:dc:69:37:46:
20:65:b8:b8:67:5b:df:cd:05:a7:36:cb:aa:a6:91:1b:ed:ed:
84:be:3d:f7:69:65:09:63:f8:c2:41:7b:4a:be:12:6a:60:7d:
a8:2c:5d:e6:60:b0:c8:19:c7:a4:45:63:92:17:30:11:c0:ac:
e3:0d:f5:27:8a:d0:94:e7:d6:c0:fb:e7:4c:25:5d:56:ca:a5:
46:38:30:63:10:a8:81:17:6a:a8:5c:df:1d:0b:84:0a:13:ca:
14:9c:95:37:e7:2b:27:ec:e3:ca:a3:56:08:b7:fe:6b:e6:3d:
43:8b:9b:e3:53:cb:8f:68:81:60:ec:85:54:ed:63:4d:8f:27:
ba:64:38:b2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURWLw/Pw6NkQyh4PL7XkEPPfGpu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NTlaFw0yNzA5MTUxNTM0NTlaMDMxMTAvBgNV
BAMTKEMwMzgyRDZDOUU2MkRCOTc2MEMzMTFCQjFFRjE2QUM3QkIwRTE5MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiltu+gbTvpNhi0hCPhamPE6cw
EaQcInZP30FDV862A7slMggMSauz5I3sjj+3FSaceRr7FlpO3IPZEfrc/H75jZqM
/etrXooZMmB8vDGSuCXq6Z2GLqetfJ1+fMGdCQK9m1Pa1mGxqCVKKPYYzsIXmksR
Qgoivbaa3//fN59KG6WUDDwErGpeudn4SkH4k3kaahqrT4a39wsp6Obcly3lA2wk
7zSnMDCzYak+QBctiIblQWSjaiMt1gi1NKvH3x2DmTpmwkWwAe6hAXaoKYAaoDNN
Ca18FnXdFySUB4ocQem4t5tLQ6cAPcSUE3HevKM+XxK0hll1I356J9LYcP21AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUwDgtbJ5i25dgwxG7HvFqx7sOGRIwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM5MmUzMTMyMmUzMTMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC9DIAw
DQYJKoZIhvcNAQELBQADggEBAC5jwH+I4k2C+3URA9RQ3aOGRdfvT6JxEQqrpaMw
MACDo7FcjoP7TXNrWN8cBEX6kqyzh17W4TwoUeSmVauyIDKK8Usl+70mZLw839Nx
ySGYLoteMc7lEBX/EPOSBg4/HzUi3rWTUA77FSyvB7hjGhDifY5vOuO0tP8B3Gk3
RiBluLhnW9/NBac2y6qmkRvt7YS+PfdpZQlj+MJBe0q+EmpgfagsXeZgsMgZx6RF
Y5IXMBHArOMN9SeK0JTn1sD750wlXVbKpUY4MGMQqIEXaqhc3x0LhAoTyhSclTfn
Kyfs48qjVgi3/mvmPUOLm+NTy49ogWDshVTtY02PJ7pkOLI=
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:41 2026 by rpki-client