Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134382e302f32322d3234203d3e20383334.roa
File: 3138392e31322e3134382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: DhcyDgVeA1r1yecFHQwVTfjTHjLWZ+SuE16Gp3Oyd00=
Subject key identifier: C7:81:A6:C6:37:40:78:18:F4:7D:FA:DB:5E:8B:B8:38:BA:58:66:5F
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 2E6E218693B2F4326A28031103A11B403CC14A9B
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134382e302f32322d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 834
IP address blocks: 189.12.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6e:21:86:93:b2:f4:32:6a:28:03:11:03:a1:1b:40:3c:c1:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=C781A6C637407818F47DFADB5E8BB838BA58665F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:98:1b:6a:ad:d4:5a:b2:f9:ec:8e:64:82:
1b:ea:60:e6:c3:f2:d7:0c:56:3e:8e:d1:65:80:b1:
fc:7d:13:55:60:e9:4b:3c:36:88:a1:52:b2:7f:be:
f5:9c:ec:ee:b2:c4:90:f0:ea:38:c3:09:e2:6d:c8:
37:b8:87:53:c8:13:bd:67:66:67:a8:43:b4:8a:a5:
22:83:ed:a4:8f:fb:ad:18:fb:54:60:55:46:cd:05:
2d:6c:ad:c1:3d:bc:ea:79:d8:a2:06:69:94:7b:89:
02:60:8b:87:25:d2:64:8b:af:05:ab:00:aa:bf:dd:
28:81:6a:b9:4a:17:49:e2:fc:5a:56:ea:1f:0f:03:
6a:4f:66:d8:00:c5:9f:14:94:dd:e4:8d:28:9d:f1:
1f:2a:f3:58:bc:62:12:40:fc:96:b3:99:1d:82:a2:
4d:07:95:6f:cb:ad:18:bf:12:7e:b6:cd:ff:b8:d1:
b5:21:b7:ad:39:4b:eb:1d:ed:28:19:55:03:28:2f:
8b:fe:a8:db:9f:43:c9:58:8c:e8:50:a2:ac:94:a5:
06:94:15:0a:2e:56:39:6b:a1:ca:46:01:26:58:d7:
d4:7b:01:7d:cd:cb:ca:f1:22:e6:76:ed:c7:aa:0e:
7a:2f:90:5e:21:b6:4c:2e:d4:c1:f7:c1:d2:61:77:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:81:A6:C6:37:40:78:18:F4:7D:FA:DB:5E:8B:B8:38:BA:58:66:5F
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3134382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.148.0/22
Signature Algorithm: sha256WithRSAEncryption
66:03:68:7f:ac:7d:ba:dc:6f:8e:6c:15:dc:24:3d:cb:82:3b:
46:07:a2:a5:26:73:eb:1e:4c:6a:33:e2:a1:ce:38:02:a0:f0:
8d:2e:7d:cb:23:c1:d0:36:80:7f:e9:7a:61:b6:0b:af:3c:0c:
32:d1:0e:45:ea:f6:8c:e1:9e:6e:68:72:60:6a:a6:42:dc:0c:
2d:d3:e2:8d:08:3c:27:1b:23:43:e4:92:09:86:19:b0:28:1e:
f5:49:a4:b0:05:8e:2e:cf:55:53:fc:f1:ec:b9:1f:00:ed:db:
cf:09:07:d9:0f:53:96:46:51:f3:bd:5d:40:33:8f:32:43:8d:
6b:6c:d7:61:47:ed:d8:7e:e6:38:41:ca:8f:2a:92:7e:3b:af:
75:0b:c1:07:b0:f9:51:04:92:79:b3:28:83:fb:96:5f:a7:41:
4b:26:9d:66:f5:0c:0b:88:8a:65:a7:5b:06:f2:73:7b:71:47:
f1:fc:f6:78:eb:18:f6:0f:e6:b1:81:e7:36:00:9a:1e:6d:94:
a8:23:40:0e:fc:88:2a:b4:36:8d:6c:42:98:43:59:29:6a:09:
db:12:88:74:e9:6a:5b:6a:89:34:65:dd:5f:6d:7e:1c:b4:ec:
09:cf:02:d7:3e:da:9a:23:2c:6e:43:b9:df:59:69:39:e9:44:
0a:b5:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:01 2026 by rpki-client