Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134372e302f32342d3234203d3e20383334.roa
File: 3138392e31322e3134372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jrt7w4SFAeSjejZE56+jGhJV31w9hC7i0sufykil/Hw=
Subject key identifier: 08:BA:95:F5:76:B4:E3:5A:8F:FF:BC:E0:F4:19:9F:FF:60:7F:72:D4
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7AC5BFEE5D649FF47F365E9D243F34259AE71020
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134372e302f32342d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 834
IP address blocks: 189.12.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c5:bf:ee:5d:64:9f:f4:7f:36:5e:9d:24:3f:34:25:9a:e7:10:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=08BA95F576B4E35A8FFFBCE0F4199FFF607F72D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:00:d8:ac:ca:b4:43:8d:38:18:c0:e0:d0:
bf:3f:9f:19:91:65:da:17:85:f9:a3:05:55:a0:f8:
b8:ab:34:84:72:26:b8:40:a6:4a:a1:4c:32:9f:42:
51:97:4d:78:6e:a3:8b:d0:1b:29:1e:6f:de:eb:2c:
28:e4:7e:37:b5:d4:f2:a5:77:f7:96:27:4b:33:44:
8f:6b:78:34:57:81:6d:44:28:8e:d0:54:e2:2f:16:
82:d3:f2:4a:b6:58:1d:a1:6d:b7:4b:fd:d1:93:a1:
0f:25:34:52:8e:f2:01:88:ad:77:cc:8d:08:3f:4a:
97:89:82:49:7e:92:5b:af:cd:70:8c:b0:89:4c:bd:
80:f2:cf:a2:8d:d1:60:8c:a2:4e:cf:ee:b8:ce:51:
24:a9:cc:11:25:7f:1c:7b:1b:da:d9:72:9a:7c:ec:
08:b3:ab:6f:f1:fa:c3:62:9c:87:dc:79:61:7b:2b:
ff:21:12:90:04:06:8c:91:9c:9f:e2:32:55:97:6e:
c7:1d:b2:73:53:42:39:ad:f1:f7:13:4e:0d:04:1f:
2a:e7:77:bb:80:5b:48:e7:2a:16:12:99:1b:54:b3:
cf:6a:72:e8:85:ea:a9:d8:60:d3:4a:02:8f:27:d0:
49:94:55:17:0e:34:c6:0a:f9:8e:0d:84:4f:4b:89:
b6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:95:F5:76:B4:E3:5A:8F:FF:BC:E0:F4:19:9F:FF:60:7F:72:D4
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.147.0/24
Signature Algorithm: sha256WithRSAEncryption
63:90:65:91:30:5c:ee:3b:18:80:c2:36:be:6f:47:7c:fc:08:
1c:c5:17:84:0d:95:5a:37:2d:35:24:65:f1:2e:4c:d8:7f:f9:
7c:df:c2:da:31:40:e2:96:5f:88:81:e6:97:87:4c:13:cf:ed:
59:73:aa:14:6a:f8:4f:2e:6b:9b:3c:13:50:26:97:2a:95:5f:
24:6f:e8:b5:4c:a9:28:99:00:61:f2:f9:d9:ae:69:a6:20:36:
6d:a2:d8:99:c8:95:e3:bc:54:e9:93:cf:10:0d:85:8a:e6:69:
6b:be:62:9c:fe:62:dc:18:4d:56:90:a8:0e:92:b2:03:a8:eb:
e5:f6:60:86:94:20:cd:37:22:b9:4a:2c:be:8a:c6:26:71:50:
7c:6b:3e:95:b2:da:48:1c:88:a1:15:dd:79:17:98:44:3a:35:
c0:dc:77:12:81:b0:92:61:15:52:d3:23:3e:1f:f8:64:11:60:
86:54:14:75:34:65:c4:79:ab:73:ab:11:67:61:8e:6d:45:a3:
86:d6:99:0f:f2:60:92:0c:78:c1:49:90:f7:2e:01:45:32:69:
f9:41:58:5d:59:cb:16:b3:06:33:52:aa:3e:fd:10:21:c9:0e:
5c:a2:2e:1d:04:d2:10:1b:d6:65:04:41:1d:20:d7:4e:75:9d:
9f:23:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:57 2026 by rpki-client