Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134342e302f32332d3234203d3e20383334.roa
File: 3138392e31322e3134342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: hFtUFZjzBtFH0kiPE0zYKVP/qcyVjJW0Csg6CBER30w=
Subject key identifier: BA:4F:27:1D:74:0A:86:3B:0A:C2:B7:F2:56:F6:AF:BA:BB:F2:DE:EE
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 5457C7898CDEDD707421AE68DF8280D142372E1F
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134342e302f32332d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 834
IP address blocks: 189.12.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:57:c7:89:8c:de:dd:70:74:21:ae:68:df:82:80:d1:42:37:2e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=BA4F271D740A863B0AC2B7F256F6AFBABBF2DEEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:ba:e2:a4:c1:13:b2:51:a5:8c:fb:b7:c0:
84:68:55:2a:1a:7b:6b:cf:17:95:bf:1a:fa:4a:84:
37:68:ca:43:b9:cc:f8:9e:ae:50:05:4e:72:68:23:
44:2e:fa:8b:22:7f:18:f2:44:bc:e1:b0:1d:17:87:
69:82:63:f9:7f:82:2d:17:a0:eb:11:54:52:50:12:
22:cf:41:6f:8f:65:b1:de:c6:d8:28:82:6e:eb:46:
65:7a:6b:c3:04:8a:fe:8f:44:5d:a3:42:17:34:d3:
1f:2c:2e:26:bf:bf:94:17:c4:86:81:a9:0e:75:21:
47:11:33:cf:52:51:02:21:c4:2e:f2:ab:c0:ed:83:
b0:95:b2:fc:9d:d1:ff:ae:16:0c:22:c0:e6:31:f3:
30:de:78:6c:a3:6d:96:f3:27:a3:f2:6a:fb:c6:6c:
cc:ea:8e:a2:8e:9a:e0:0f:37:86:4f:87:64:75:58:
a7:17:bc:ea:12:b2:9f:14:27:39:a7:a4:66:73:2d:
c9:87:9a:d1:ca:18:aa:28:8b:3b:26:8e:ae:e6:58:
43:83:81:d1:50:11:62:22:83:46:58:80:8f:c3:41:
08:32:e3:c1:35:03:28:8b:43:0a:b7:ad:8b:37:4a:
76:c9:28:0c:80:89:63:76:d7:86:92:f8:b8:4f:fd:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:27:1D:74:0A:86:3B:0A:C2:B7:F2:56:F6:AF:BA:BB:F2:DE:EE
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.144.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:29:05:f8:5e:66:33:e0:60:25:2c:d7:ce:4c:ab:7e:0d:ea:
18:fc:1f:e0:b9:73:05:14:8f:75:0b:b1:61:62:7d:81:b6:6f:
ea:d9:3b:46:f4:a6:70:c6:05:90:04:e2:a9:5c:23:27:df:2b:
74:67:c5:98:5d:fe:9c:58:d5:14:62:c7:fe:31:fd:75:16:39:
42:e3:59:10:c7:ef:24:4d:36:5a:30:f4:b3:10:c1:93:29:b3:
73:64:5c:9c:3f:0e:12:5d:ec:31:4f:5c:46:c1:6e:69:9b:fc:
12:ef:83:b6:9f:3b:cb:2d:2a:d4:7f:ab:d6:2d:a5:13:e1:c6:
bf:8a:90:74:71:e6:10:c8:64:c5:c0:2e:53:01:f5:1f:66:15:
60:8c:cb:c3:be:68:43:b0:0b:59:ba:f0:50:00:fd:df:e9:fb:
ed:d5:e0:13:ae:2a:04:14:61:47:0a:c5:df:ad:83:75:f8:d3:
89:a5:71:21:ae:1b:41:0f:31:23:22:60:d0:1b:1d:d7:7e:e0:
fa:c9:1b:16:2d:d3:46:be:2e:f9:4b:77:c4:73:ab:41:d2:23:
36:5b:26:ae:4c:8a:b4:4d:c6:db:b1:d7:00:d9:1e:33:2d:ba:
43:74:6d:d1:cb:67:f1:75:af:08:f0:0d:4f:92:05:aa:0f:4b:
d6:2b:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:45 2026 by rpki-client