Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133312e302f32342d3234203d3e20323134343833.roa
File: 3138392e31322e3133312e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: OZeuQFf2W64fw/wxjAZp+JfCEXqFgE6gBIu5tLG5m+k=
Subject key identifier: D4:76:8D:F5:04:2A:FF:80:94:54:C8:10:E0:F0:25:5B:92:BC:AB:84
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 5428C04B3A77076FA7D28E6FD835E1F698B34477
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133312e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 214483
IP address blocks: 189.12.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:28:c0:4b:3a:77:07:6f:a7:d2:8e:6f:d8:35:e1:f6:98:b3:44:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=D4768DF5042AFF809454C810E0F0255B92BCAB84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:30:2f:fc:69:9f:57:46:14:36:f0:2a:9d:
61:d3:48:55:ea:20:a2:9e:f0:13:33:8c:bc:2d:47:
77:28:ff:82:9a:d5:d0:46:59:0f:8f:ad:06:ff:a1:
94:39:5e:92:12:54:8f:ab:1d:8a:29:18:07:02:bf:
5c:e0:02:38:17:b7:72:41:e7:1d:d4:ed:65:af:0e:
e0:45:7d:89:6b:4d:e7:5d:24:b7:92:f5:79:ac:04:
5e:63:9d:3c:54:84:5d:9f:c2:3a:6e:03:de:98:4a:
a5:ea:01:72:c7:e6:27:b5:7a:80:2b:a0:ad:c9:a3:
db:c9:97:aa:1d:27:04:09:30:cb:04:79:7f:da:9f:
29:92:2e:33:f0:20:5d:b4:58:09:94:7b:3e:48:c6:
4d:9c:4b:c3:ae:f8:84:31:f0:d7:f3:69:ac:77:c4:
bd:73:e2:c0:84:33:8c:5c:ed:0b:08:c6:45:f5:25:
21:a9:e4:6a:73:a8:27:20:58:f7:b9:5d:b2:7b:90:
aa:85:f5:07:cd:ad:a1:85:71:20:ed:e8:d4:34:cf:
35:e0:1f:6f:9b:a3:f0:6a:81:0a:78:e8:f7:cb:b5:
ef:46:4c:da:f5:c8:c1:42:66:ba:70:ca:ac:7d:f2:
71:35:6e:ef:c3:c5:bc:0b:3b:6c:71:db:65:93:eb:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:8D:F5:04:2A:FF:80:94:54:C8:10:E0:F0:25:5B:92:BC:AB:84
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133312e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.131.0/24
Signature Algorithm: sha256WithRSAEncryption
59:7b:7b:7a:cc:6a:ec:7b:b0:a0:fe:f0:33:46:8d:9d:63:c3:
b9:0c:17:ec:48:18:ee:51:6c:dc:13:12:5f:76:39:8c:9d:cb:
72:8f:58:99:e3:df:5a:f3:c8:74:2f:60:ed:8f:d5:36:3e:cd:
d2:5d:3b:9f:60:13:15:ca:00:92:e5:a3:84:02:30:98:f4:49:
d0:ca:20:55:90:0b:1b:b8:30:67:a5:f9:11:29:c7:d8:6b:69:
48:ee:5e:c9:23:b9:2a:3f:f4:56:94:88:6d:a9:fc:65:7d:06:
0a:46:2e:5e:b5:9d:a3:86:84:51:2e:21:ce:76:ab:e0:ac:ba:
cc:03:ee:11:46:da:eb:7e:5e:c2:b8:1d:5a:88:48:85:7f:17:
27:9b:51:d4:a5:8d:e1:22:20:c3:98:e7:bc:7f:ee:74:77:0e:
f4:50:5d:10:8c:87:91:f0:a7:4d:1e:5f:81:70:81:54:a3:ad:
47:cd:33:1a:72:1d:fe:49:6c:95:2f:d0:c2:e9:f9:00:6e:04:
83:1b:a9:f2:ec:07:ff:0f:ba:27:b2:3d:cc:09:30:51:11:e9:
f9:78:45:ec:b0:ee:70:7e:96:39:70:d0:3b:3b:ea:36:20:a1:
d4:08:2a:7d:99:e4:55:75:b0:c6:e9:07:8d:0f:84:81:3c:a5:
84:34:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:11 2026 by rpki-client