Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133342e302f32332d3234203d3e20383334.roa
File: 3138392e31322e3133342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: ISWDWHSWRXkqmNXLB5KpC2/oFu0+FIwvIj+c1HyGCoc=
Subject key identifier: 8D:CF:7D:15:50:C6:7E:87:8F:69:4B:5D:84:EC:CC:16:E4:86:68:E3
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 686B082703135B4E12B5E5DFA11585E90205A82C
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133342e302f32332d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 834
IP address blocks: 189.12.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6b:08:27:03:13:5b:4e:12:b5:e5:df:a1:15:85:e9:02:05:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=8DCF7D1550C67E878F694B5D84ECCC16E48668E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:46:7b:ab:9f:da:cb:65:43:b7:f1:77:c3:
62:c3:8c:9a:20:f5:9a:ea:c8:99:01:47:06:b6:17:
97:4e:fc:77:1b:fc:16:c9:31:f0:a0:bd:af:bf:43:
bd:13:c8:bb:a4:7b:2f:dd:58:97:f1:2b:9f:9d:2c:
aa:f5:ae:41:3e:06:e8:6b:fb:d4:f4:91:bc:ca:45:
91:fb:f3:aa:90:c5:61:34:24:98:a0:45:5d:69:fa:
7d:14:00:43:d4:c1:fc:5a:05:7e:71:81:10:31:7d:
f9:e5:7e:d5:93:81:06:6b:09:5c:16:c0:11:c3:6c:
91:6f:39:ee:3e:54:25:5f:b4:f0:00:77:f2:26:17:
80:6b:a2:07:69:46:d2:3d:6c:d7:99:6a:e3:c0:e5:
bb:c4:41:fa:5b:32:49:dc:15:8e:bc:ee:c1:ef:a1:
15:9f:a1:e0:81:19:19:23:0b:0f:1b:96:31:e9:1d:
4c:42:81:33:4d:fa:6e:74:31:b0:ad:41:5a:a4:03:
49:2f:d4:2c:75:06:c6:83:aa:ec:eb:43:23:80:6c:
2b:94:ee:c2:d6:b2:22:bd:03:c1:f8:2b:5f:42:8c:
c8:e7:c4:67:85:af:ec:4f:2d:59:58:18:53:74:c0:
f1:01:7c:da:d0:75:e6:14:a4:7c:e3:2b:7b:ef:cb:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CF:7D:15:50:C6:7E:87:8F:69:4B:5D:84:EC:CC:16:E4:86:68:E3
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.134.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:eb:99:b6:2e:81:09:d6:ed:fd:4e:23:e7:4f:a3:1e:0d:a5:
21:b3:69:a7:5e:54:8d:d2:d3:14:35:f8:1c:ce:4c:6a:0c:2e:
8f:08:ea:d2:a2:81:95:40:f4:de:59:fb:29:96:59:85:f2:ff:
40:8b:79:b6:64:08:77:a4:d1:fd:1b:45:02:1d:87:5c:af:2a:
b6:f5:9d:5d:f9:8c:3e:6c:69:ea:e8:2f:7e:8b:5a:27:35:5d:
82:be:b0:db:37:e2:16:eb:69:a4:6e:d5:1a:69:0e:6f:dc:9e:
0f:81:62:2a:e6:b5:bf:2a:fd:c9:a4:ff:9e:89:d1:f5:67:71:
d3:9b:0e:82:49:2f:c3:b4:44:f6:b3:60:49:99:4b:56:91:e9:
3e:e0:21:85:b8:d8:99:04:c3:7f:de:71:00:61:fa:b6:e6:11:
89:15:88:34:7f:3e:09:98:b1:d9:fe:1a:8c:2f:df:14:98:6c:
a9:ae:e5:10:19:d2:6c:b9:3b:9f:8c:7e:f7:08:5e:fa:c7:02:
40:34:ca:72:f2:a4:a0:ce:1f:19:39:fe:b1:cb:9c:39:2c:5f:
fd:18:70:e4:a3:d3:1e:d2:97:7d:aa:3c:65:7f:c2:52:a7:fa:
94:2a:c6:17:3b:e9:f9:66:7a:48:66:34:d1:9f:7c:1e:db:23:
c6:bb:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:09 2026 by rpki-client