Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa
File: 3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: XIAkUqXKNZkGFnE3akqVdN7CIPALnQq7nUShC9+yC48=
Subject key identifier: C8:D6:1E:41:D5:4A:3D:26:38:D4:C5:FF:69:73:80:70:46:CC:4B:36
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 596307DA7401AE5342FC7B5882477B5297CF8BE7
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 152179
IP address blocks: 189.12.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:63:07:da:74:01:ae:53:42:fc:7b:58:82:47:7b:52:97:cf:8b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=C8D61E41D54A3D2638D4C5FF6973807046CC4B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:40:fb:50:a8:80:2f:42:3c:e7:ab:92:32:
43:3b:1c:e6:58:38:a6:b1:1f:8e:8d:f8:fd:64:47:
e8:dd:88:a8:13:ab:b8:1a:fe:c1:1a:e5:93:d9:01:
95:9b:e3:2c:5a:16:41:b0:a5:5f:0f:74:80:8b:91:
42:6a:d0:c1:d9:2a:8f:8f:56:41:8b:b3:ff:d4:44:
16:a7:43:6e:ab:e2:c1:a0:4a:3f:9e:68:71:fe:6a:
ef:07:e5:bc:9e:c9:16:a7:f6:af:60:40:0b:dd:9d:
9e:8b:ff:ee:1b:f7:4a:a4:6c:9a:77:b4:85:9b:09:
3b:0a:23:8f:76:61:9f:f2:dd:40:da:ea:32:b7:17:
7c:16:8f:6b:c5:39:a6:3d:c8:fc:f7:33:12:6b:6c:
7d:c6:e9:d2:c1:a9:86:2a:2b:a4:c1:04:f5:25:48:
b1:ca:87:10:9e:12:d4:f3:99:7b:54:29:15:c5:bb:
2e:46:57:25:4d:de:9e:dc:ca:06:ce:02:a9:5d:04:
20:5b:99:f6:b7:ce:6a:46:46:37:67:dc:2b:f7:80:
dd:4a:e3:0e:26:de:72:ad:56:43:cb:fc:2c:ff:96:
76:c3:91:0b:4d:37:6c:50:30:0a:50:8a:ec:d0:fc:
91:fb:87:9a:ba:9c:e0:68:f7:2e:05:67:8a:93:3f:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:1E:41:D5:4A:3D:26:38:D4:C5:FF:69:73:80:70:46:CC:4B:36
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3132392e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fa:c3:b0:2a:d4:1a:7e:52:04:23:6b:50:ae:5d:a6:9e:90:
39:8a:11:b8:ff:65:87:14:ad:ee:a3:54:0e:5d:dc:cc:bc:8e:
b9:c8:2b:59:8f:9e:03:eb:69:0a:85:18:bf:ab:f0:29:84:9a:
44:6b:ea:af:c3:d9:76:93:b5:4e:93:30:28:bd:3e:5f:c8:00:
ea:a5:30:03:08:86:52:06:89:f7:db:31:9f:6d:b7:8c:62:62:
30:9f:89:a6:e4:4e:05:55:15:f5:b9:61:e6:24:c5:fd:de:96:
f6:2b:b0:d5:1e:50:23:87:80:18:1f:23:7f:78:78:90:f5:52:
cd:a3:85:f5:5b:44:bf:63:1b:6d:ec:d6:4e:69:e6:d2:53:22:
a6:a3:a6:98:cb:9e:c9:95:9c:db:5b:46:e2:81:08:a9:7b:7b:
6d:09:14:86:e2:d9:d8:11:16:d5:2b:d4:87:49:90:90:66:2a:
b0:fa:20:9b:8c:1d:6f:c1:7c:24:5f:0e:16:fa:da:7e:bd:af:
20:2e:01:41:36:2d:22:28:ae:b5:ed:cb:88:3a:4c:17:b7:62:
32:a6:1c:37:8e:0e:c9:fc:de:f9:3b:11:45:6a:6b:36:53:8c:
07:c9:87:dd:49:e8:d4:09:ec:c8:b9:9a:cc:db:ae:be:f7:be:
25:2c:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:23 2026 by rpki-client