Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133332e302f32342d3234203d3e20383334.roa
File: 3138392e31322e3133332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: lUpquWMMsYKyN1U3+y2ujKfn5D9NK8dmbVvNVDLldRM=
Subject key identifier: 92:86:79:BC:55:72:2A:B3:10:02:ED:F2:4F:8B:1C:FA:D4:7A:3C:27
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 74F0E84F484E3171BD77A8A53974103448A605F3
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133332e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 834
IP address blocks: 189.12.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f0:e8:4f:48:4e:31:71:bd:77:a8:a5:39:74:10:34:48:a6:05:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=928679BC55722AB31002EDF24F8B1CFAD47A3C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:03:f5:22:8e:e6:7e:31:3d:1c:43:a6:f9:
de:63:ef:fa:ac:79:4e:e7:31:cd:82:49:05:8b:71:
8d:2e:b3:30:07:22:99:b2:ef:ac:1a:cc:81:c6:3e:
6d:8f:86:70:84:04:e8:eb:b0:0b:d3:b2:bc:67:00:
20:26:69:a4:67:13:8e:62:85:92:95:23:2c:e7:87:
bc:a3:25:64:52:ec:cc:ea:35:d3:10:1d:a6:b1:80:
6c:8a:d2:be:e7:d7:57:49:20:eb:eb:76:e7:25:3a:
b5:b1:d4:b4:8b:e1:68:02:51:b1:2d:c6:41:b6:25:
83:ba:86:e2:24:2d:be:a3:5e:b4:6b:9f:0c:b2:2f:
63:cf:54:15:27:2f:ef:1c:8f:e8:8e:34:37:4f:db:
fd:e6:11:ab:3f:b0:07:8d:72:2e:49:c3:ad:c9:9c:
1d:3e:df:67:59:30:12:62:9f:b1:8c:da:43:ee:a6:
57:71:ea:2b:29:62:1c:f5:b0:ef:c4:d8:a8:c7:53:
c1:9d:4e:79:c1:25:e8:08:cc:67:9a:b5:db:ea:81:
65:fe:d3:f3:7b:f0:3e:f6:b9:2e:0d:10:78:0c:6c:
6f:c5:89:35:13:04:61:e5:02:5c:d5:52:43:29:56:
a9:f0:2f:fb:d3:7e:6f:a8:a5:32:65:10:07:30:e8:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:79:BC:55:72:2A:B3:10:02:ED:F2:4F:8B:1C:FA:D4:7A:3C:27
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.133.0/24
Signature Algorithm: sha256WithRSAEncryption
88:dd:55:0e:dd:5d:84:6c:8a:4b:ce:69:0b:74:4a:61:57:11:
f7:35:7b:b8:e6:45:ca:1c:2e:3f:54:9b:55:e9:b0:e3:a6:6a:
71:30:11:d3:c6:58:2c:9f:f0:1e:13:3b:25:19:7c:19:28:49:
e7:17:6a:44:fe:18:69:f0:a0:ec:79:84:a0:56:2a:6b:53:e2:
35:f2:55:ba:32:b4:da:0a:fe:b1:7e:0e:47:0c:02:db:72:4a:
34:6b:9d:77:ad:7a:03:5a:7b:3f:63:30:01:1b:7a:c3:5c:fa:
ed:71:cd:fe:89:23:a9:97:25:0c:60:5a:8a:c5:20:e6:db:77:
fd:3e:81:52:06:62:43:ba:66:29:0c:94:4b:bb:a2:53:0d:71:
f9:d8:44:46:1b:5f:25:e2:33:b2:40:75:03:9a:65:bc:c1:ce:
05:e0:0e:c8:fa:8c:27:68:26:23:5c:8c:43:2a:20:e6:00:b1:
87:a6:dd:52:aa:38:35:b1:dc:2d:cc:36:24:e9:6e:34:c0:42:
7d:1e:ad:d0:81:2f:ae:a6:d2:a7:ad:78:4f:ec:77:10:b9:ed:
4b:88:c8:2f:ce:dd:ef:11:85:09:d7:b0:a4:a6:5a:dd:7a:61:
c8:ae:cc:1c:ed:02:40:a4:16:85:c4:5b:5d:9e:b9:79:b9:58:
33:df:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:11 2026 by rpki-client