Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133362e302f32312d3234203d3e20383334.roa
File: 3138392e31322e3133362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: GG8xVqthbR+WpA6PA3ZCW5luuPzNNworewvTJmxag8Y=
Subject key identifier: 87:59:65:DE:57:9B:E4:5C:3D:EC:23:BE:F6:81:7D:4F:30:6B:71:73
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 352C4EB537BB41BFC2870BC4B3755997666C7C04
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133362e302f32312d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 834
IP address blocks: 189.12.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:2c:4e:b5:37:bb:41:bf:c2:87:0b:c4:b3:75:59:97:66:6c:7c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=875965DE579BE45C3DEC23BEF6817D4F306B7173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:b1:62:29:aa:d4:fa:eb:8c:85:d8:93:9b:
90:a9:d4:e5:1d:39:c5:12:4b:97:b6:7f:2e:75:e7:
55:4e:07:61:12:bf:9d:cf:76:18:a4:0f:8f:d6:c4:
c3:f7:24:01:e3:9a:e7:82:13:7c:b5:23:ae:a5:c1:
ea:91:82:c5:d7:2f:75:b0:a2:51:cd:a7:d4:a0:85:
d8:50:52:a3:ae:cc:53:58:ab:01:19:c0:3a:84:87:
07:7d:9a:4b:51:b2:ed:41:77:d0:4f:ba:24:3d:32:
04:ba:f5:da:64:36:b1:02:31:79:6d:be:00:b1:49:
cc:07:0c:4c:dd:e3:e5:a3:c0:b9:4c:3f:05:0d:17:
29:27:cb:20:4e:de:e3:df:5b:a6:92:c7:29:a6:4f:
2a:b3:98:41:c9:bd:3c:85:4e:70:14:a0:6e:bf:cd:
ff:05:9e:5a:84:d1:f8:60:eb:fe:cb:fc:48:47:20:
bb:46:b5:a1:04:19:fd:37:59:a1:fc:2d:62:f3:5c:
74:48:99:c8:23:81:24:be:f7:c4:99:4c:b8:cd:a9:
46:d8:55:29:8b:a8:15:2f:2d:68:4c:18:c7:92:4f:
dc:fc:30:09:50:82:bf:71:54:17:dd:f3:fc:20:56:
db:78:5b:9e:3e:e4:bc:7f:a7:cc:3c:71:ea:13:38:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:59:65:DE:57:9B:E4:5C:3D:EC:23:BE:F6:81:7D:4F:30:6B:71:73
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3133362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.136.0/21
Signature Algorithm: sha256WithRSAEncryption
84:b4:6d:7b:f6:fa:59:ee:1e:a3:3a:33:f4:4a:61:d4:85:7a:
9d:3b:3e:90:19:f9:31:ec:7d:d6:aa:44:9c:92:4f:5a:75:ba:
65:c7:85:b9:fb:b3:75:b6:1b:2c:58:0b:12:e6:37:e6:15:c9:
1a:f7:f4:9b:1b:0e:fa:a2:eb:31:d3:50:2e:f6:19:54:a5:31:
b7:00:ea:48:3a:41:f6:15:34:0e:b1:0d:24:63:01:0d:9c:00:
be:f9:5c:7f:e8:c7:33:87:9c:39:44:dc:9f:b6:78:87:13:3d:
23:f5:34:10:b0:b0:8a:73:99:60:3c:f5:5b:f9:37:92:f1:d3:
1f:25:00:1f:07:15:fc:71:33:5c:61:31:7b:c0:63:5e:49:35:
f7:3e:d7:29:d9:48:7c:18:88:a5:73:61:e3:7b:cb:c2:92:7e:
2b:22:99:b8:ef:2a:f0:ba:43:37:c1:c7:e5:d8:74:bb:01:ea:
47:dc:8d:89:0d:51:50:0b:60:c0:3d:0c:a6:06:ae:a5:01:2c:
c7:01:11:09:ee:93:6e:38:fa:63:e8:32:fe:5c:0b:36:b7:cd:
b5:7c:65:e1:fd:e6:b3:88:2d:6e:bf:53:fc:db:95:88:5a:8e:
15:70:d9:09:fd:d2:26:6c:93:24:d3:34:11:6b:47:1e:8c:7e:
93:fb:a8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:44 2026 by rpki-client