Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa
File: 3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: opXOpT6BFqojGG5BUDG10fXq17GC24AhxKEJUDULc6M=
Subject key identifier: 9A:5C:49:59:CF:AB:73:69:B7:22:E2:08:69:23:6B:85:4A:49:E2:F7
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 4877B0ABE315C34910A15875DEAD6CE0EA299236
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 214483
IP address blocks: 189.12.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:77:b0:ab:e3:15:c3:49:10:a1:58:75:de:ad:6c:e0:ea:29:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=9A5C4959CFAB7369B722E20869236B854A49E2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:b5:65:9b:c6:01:e3:71:37:54:ef:49:f8:
f3:6d:c9:06:e0:12:78:1b:4a:42:59:9b:90:e4:91:
42:fc:14:57:3d:7a:f3:ee:30:84:65:8d:cd:2d:0f:
54:75:19:d1:ab:ca:14:58:5c:6e:37:64:78:fb:32:
8a:dd:46:46:bf:82:8b:26:7d:0d:3c:2f:9c:2a:2d:
fe:7d:db:05:6f:b2:ef:3d:f2:77:55:67:3e:e7:85:
f4:0d:90:ca:7d:7a:d2:51:84:7f:49:c2:ff:e7:78:
f9:02:a4:f6:a6:b9:e1:76:c5:7e:a2:98:40:70:00:
bb:f2:80:b6:18:8e:8f:75:37:a0:e9:48:f1:87:e1:
8e:85:97:f7:56:57:51:3a:75:b9:0f:da:89:41:07:
04:49:5f:d0:c3:c9:18:a1:93:82:36:bd:a7:7d:fa:
63:14:5a:f3:f7:d3:1d:65:2f:c4:47:e8:72:a5:fd:
1b:48:5d:6a:0a:f3:51:fa:51:3c:ac:8c:c6:31:ae:
11:af:a5:ca:53:69:8d:80:71:2a:c2:d2:36:97:57:
b8:50:e7:7c:32:36:d8:2b:e0:91:e7:fe:58:e6:5e:
8a:d7:5c:6b:01:af:99:02:94:0d:34:4a:74:b8:14:
8f:82:3a:00:a7:ae:cc:59:bc:07:6a:49:4d:08:b0:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:49:59:CF:AB:73:69:B7:22:E2:08:69:23:6B:85:4A:49:E2:F7
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134362e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.146.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:40:58:7a:74:06:22:c1:26:a1:b3:fb:f9:da:d9:4a:3d:61:
f4:44:6d:6a:4b:d5:8e:52:8b:d6:d0:29:f0:88:d3:3d:3f:2a:
2a:83:67:5b:ce:3b:c0:4a:4c:6d:8f:0a:48:92:30:ba:23:fb:
08:42:b3:87:a8:aa:b0:4a:1e:b1:a2:35:a9:76:55:18:75:a5:
26:b7:ef:81:d1:a6:92:57:99:3d:ca:e7:b4:bc:ca:76:ff:4d:
cc:13:a1:f5:2b:9f:2f:43:f7:ea:96:e8:81:a7:ad:03:ac:6e:
c6:ef:98:7f:3b:81:e1:d4:bd:48:69:30:85:a2:50:70:fc:42:
a0:bd:68:2f:ff:33:86:1f:cb:09:f9:cc:4d:43:f7:8f:a4:cc:
5f:73:82:03:32:b2:54:85:ad:80:fb:41:ce:ba:b9:b1:19:40:
92:e6:9d:5f:ff:27:5e:53:4a:b5:b4:6d:81:57:76:71:2e:23:
a8:72:37:ac:6f:ee:3e:42:ae:42:81:28:e5:c2:1f:df:83:80:
4e:6d:2a:86:18:ac:26:c7:79:4a:42:cb:83:a7:95:29:3c:9a:
18:4a:ac:a6:d2:65:de:4a:f5:99:b7:03:32:9f:3d:83:02:fb:
2f:90:f6:9a:28:47:28:7d:2e:49:21:6a:b2:4a:2f:1a:90:fb:
e2:20:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:07 2026 by rpki-client