Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133302e302f32342d3234203d3e20383334.roa
File: 3138392e31322e3133302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: spEYM/+BIkgy3hSnaH6y4p7+rjc9uctc6jcM+ENFOm4=
Subject key identifier: D3:18:B3:ED:17:7B:CA:8E:EE:77:2A:8E:03:16:B8:83:88:B1:FD:9A
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 1C0C311E24971630EBAA4ECFAD016F6BC56E31C3
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133302e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 834
IP address blocks: 189.12.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0c:31:1e:24:97:16:30:eb:aa:4e:cf:ad:01:6f:6b:c5:6e:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=D318B3ED177BCA8EEE772A8E0316B88388B1FD9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:90:1f:8e:e2:83:db:82:f5:d2:5b:42:30:3b:
15:d9:23:9b:57:6b:0f:56:9f:ef:b0:e6:e2:39:7a:
5d:6c:8b:1a:38:f1:57:4d:d0:f2:ed:13:c6:a8:81:
d4:28:60:10:dc:7a:83:87:45:c1:b1:cf:52:9c:aa:
1b:84:43:1c:c8:bf:cf:dc:5b:db:ff:fb:54:db:4d:
63:fb:0e:5b:de:5e:0f:0d:5f:c8:84:8f:f6:48:16:
44:54:66:9d:9b:f9:60:f1:25:0e:49:c1:1c:a4:3d:
f9:85:99:40:a7:68:9d:e9:69:19:71:46:44:0e:8e:
ef:b6:de:ca:61:b5:2b:33:bc:55:e2:92:72:16:48:
20:62:bb:db:b5:5f:d6:df:7f:2a:7b:b8:e9:b0:b6:
f6:49:fa:56:d1:78:75:68:20:8e:6d:ff:ac:6f:40:
36:fb:cd:11:90:b5:7e:8f:59:f6:09:14:9e:a9:ff:
2e:1f:be:98:3d:d7:93:a8:c7:47:9a:9e:ca:ef:71:
41:dc:dd:2e:d2:ee:01:ae:48:92:c4:ed:e8:14:a9:
25:b7:7a:ae:5d:da:87:80:a8:0e:60:68:1a:34:13:
b0:fc:ab:53:e6:cd:15:b0:20:eb:16:f1:7d:d4:b1:
93:b1:4e:7d:9f:cf:06:ef:b1:9a:f6:1a:30:5a:87:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:B3:ED:17:7B:CA:8E:EE:77:2A:8E:03:16:B8:83:88:B1:FD:9A
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.130.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3e:b3:ae:b9:0c:0b:5a:e4:ad:00:f6:62:3d:57:71:ba:00:
02:7b:d4:13:c1:98:68:35:87:7e:42:f7:61:09:74:21:f3:8d:
73:aa:ba:a6:42:f4:84:80:09:c7:e0:4e:fb:df:c0:21:4c:85:
87:93:48:ba:61:d1:1f:2b:e9:83:95:00:e2:7c:74:0c:14:14:
e8:ce:0a:1d:c1:66:95:cc:21:bc:6b:39:dd:6e:b7:eb:bf:0d:
7f:96:a4:58:9f:21:24:f8:2f:f3:9f:9a:47:4c:0a:e5:2c:f6:
90:57:22:8a:55:89:db:05:33:38:5a:ff:95:58:9c:eb:85:f7:
ea:d2:60:cb:69:9f:97:7c:a6:37:1d:a4:07:05:53:e0:69:51:
c2:c1:db:aa:9e:b6:7f:fb:12:ed:0a:05:07:8c:65:2b:ba:94:
c7:3f:29:11:41:b9:65:6c:ed:d3:c4:50:79:c3:64:73:45:80:
be:4c:37:42:96:4b:ff:2c:d9:be:44:b5:14:67:90:a2:62:df:
68:b1:1e:72:3e:eb:83:dc:44:da:ed:ee:38:60:f3:37:cf:35:
70:be:f3:68:6d:29:b3:f6:99:ec:36:43:0d:60:5b:0d:c2:6c:
87:87:e6:0e:17:b5:5a:e9:8e:19:ac:a2:26:82:74:86:77:e6:
3f:cc:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:57 2026 by rpki-client