Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133322e302f32342d3234203d3e20343032393736.roa
File: 3138392e31322e3133322e302f32342d3234203d3e20343032393736.roa (raw, json)
Hash identifier: AerCqdkv/5ULmZxkdaXkX6zNlzFaV07NGsD+R8U3u7M=
Subject key identifier: 90:41:FF:A5:29:CC:C4:93:B1:EA:D2:94:E7:0A:80:1A:D0:26:20:46
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 6208260DECB61D844040A7FBD60601716C21FE6A
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133322e302f32342d3234203d3e20343032393736.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 402976
IP address blocks: 189.12.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:08:26:0d:ec:b6:1d:84:40:40:a7:fb:d6:06:01:71:6c:21:fe:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=9041FFA529CCC493B1EAD294E70A801AD0262046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:da:c2:3c:b1:af:f5:96:3d:a1:69:ad:91:
57:e3:bb:14:71:91:90:3b:56:b0:6e:39:3b:67:54:
0b:d5:2e:19:08:33:20:a0:55:c3:cb:86:dd:03:90:
3a:e0:15:c7:92:5f:51:8f:f4:93:52:16:11:35:3f:
b2:05:98:21:b9:c0:bc:b6:0b:e0:85:6c:2d:1b:78:
2e:af:4c:d3:14:03:51:de:20:f9:58:b0:65:98:fc:
97:bc:01:65:7a:86:f1:b9:46:96:2d:5b:6d:d1:3d:
01:ba:d6:5f:bd:04:4b:54:6b:e7:fb:2c:e3:de:56:
c2:1d:e1:8b:59:96:8c:5f:66:69:b6:27:7d:73:96:
29:1b:bd:02:1d:80:5f:8d:81:21:7e:c9:3e:0d:4b:
14:f5:d4:09:9e:f7:5b:88:89:8a:05:ab:02:0a:d2:
be:e3:88:17:bf:e4:ba:11:cf:64:9b:d4:31:5d:dd:
13:e3:7b:80:e4:b0:ce:42:8a:e9:91:82:19:3a:06:
5a:a4:01:a1:c1:ea:08:6e:31:d4:4a:af:c1:7a:3a:
cd:3d:aa:41:7e:17:7d:cd:87:45:23:ee:d7:b3:2c:
16:75:23:2d:64:78:ab:09:29:05:19:21:6e:39:4c:
42:b5:bf:65:e2:bd:44:4f:55:26:ef:49:e5:53:10:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:FF:A5:29:CC:C4:93:B1:EA:D2:94:E7:0A:80:1A:D0:26:20:46
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133322e302f32342d3234203d3e20343032393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2f:8b:82:97:24:39:ed:6f:87:b4:02:40:2b:ba:26:93:ee:
a2:98:81:19:d8:72:f9:d2:dc:be:a5:2b:9d:c7:82:c8:97:df:
9f:14:3c:c6:75:67:e4:e9:2c:13:da:a6:1e:35:f9:23:85:c7:
3f:b4:df:4c:15:1d:cf:96:f6:4d:5d:82:c4:f0:d8:38:12:e3:
54:9b:ca:e7:5b:62:f1:7b:27:a9:da:8e:3c:d5:5d:59:36:86:
4b:9b:50:4e:1c:94:05:c9:4f:f1:f7:9e:d6:b1:ab:92:2f:c4:
f0:05:2d:2e:ac:02:d5:c6:6b:d1:b0:ca:36:81:a6:12:77:cd:
c8:c3:f7:63:c8:38:1c:21:c5:82:f2:23:28:c9:9f:22:46:24:
ec:50:e8:3e:ce:ac:2b:61:33:06:1f:c3:97:41:b8:87:67:b9:
78:90:82:53:b4:5b:2f:30:08:64:ce:d7:b5:c2:63:1f:d8:4e:
e8:2c:19:7f:67:e4:c6:35:7f:07:3f:c7:d1:b1:95:9b:74:ee:
1b:cb:ba:b1:e1:73:8b:ab:02:f8:e8:9e:7d:39:dd:92:ac:d4:
80:a2:28:72:8e:61:92:4b:be:3b:58:14:11:d3:30:05:fb:68:
f4:97:76:c5:d5:ee:5d:23:23:80:b2:f0:a5:92:1e:0e:0d:35:
3b:95:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:08:00 2026 by rpki-client