Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3135322e302f32312d3234203d3e20383334.roa
File: 3138392e31322e3135322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: ouEdo/0xikU13qqvWPfsML5C0v6+QlMZfKHMNqF20Zk=
Subject key identifier: CE:DF:FE:78:45:44:3A:1C:7D:58:64:C2:BC:5D:FB:FC:D6:E9:87:F6
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 034E11F41D8ACDFFBF595376EE065CF41AAA97EF
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3135322e302f32312d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 834
IP address blocks: 189.12.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4e:11:f4:1d:8a:cd:ff:bf:59:53:76:ee:06:5c:f4:1a:aa:97:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=CEDFFE7845443A1C7D5864C2BC5DFBFCD6E987F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:34:27:74:1f:a3:8a:2f:07:d3:de:da:d7:
5a:2f:a4:bc:1e:54:cb:36:b4:71:b8:13:1f:5b:97:
3a:1f:a6:45:37:c3:7b:b3:2f:c0:a5:a3:12:f2:08:
f0:b9:19:7b:e6:ff:44:ab:b0:0f:f0:09:74:ca:98:
60:fa:9e:69:20:bb:e0:bc:5e:92:ba:49:17:3b:90:
49:3b:75:9d:14:b9:90:02:4d:11:86:e5:9c:bf:20:
bb:d5:6a:ad:52:32:18:26:14:00:f6:c8:d1:cf:2b:
30:ca:7f:f4:ab:67:cb:fa:60:a8:ca:7a:73:20:ed:
47:b3:c1:72:94:45:68:79:bc:c4:b1:7c:d4:15:bd:
25:74:57:82:f5:65:54:0f:02:07:8a:01:d4:1f:1e:
1d:1c:78:8f:71:c0:2e:aa:8a:2e:b6:2f:83:9e:3f:
c2:eb:cc:22:63:8d:28:f7:f1:48:1f:f6:c8:33:e5:
c2:ef:bc:e8:31:d3:ae:6a:5b:01:02:a6:8b:90:84:
10:09:79:3d:e9:08:0c:27:2c:9e:da:5e:b3:5f:22:
5a:f3:8f:81:ca:5f:b2:a7:8f:98:a8:4d:15:28:77:
c4:22:03:ed:5f:76:f3:36:90:48:12:e8:bf:da:ef:
ab:dc:48:25:73:f3:d3:37:50:08:50:1e:66:d3:17:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:FE:78:45:44:3A:1C:7D:58:64:C2:BC:5D:FB:FC:D6:E9:87:F6
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e31322e3135322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.12.152.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:81:6c:4b:3c:b5:87:09:3d:cc:0c:d5:18:da:45:7c:4c:2e:
1b:ef:72:05:8e:1d:9e:6d:f3:93:f7:98:72:f2:d2:ba:49:23:
f2:99:34:4a:b5:49:77:e3:b5:d5:e1:9e:97:91:1d:63:90:71:
eb:d9:33:d9:0f:56:23:ff:64:bb:0b:af:8b:3a:d7:dd:30:10:
5b:b2:83:81:63:da:3f:10:70:4b:27:a3:1b:b4:2d:2f:60:51:
01:c3:96:42:11:d8:70:cf:60:a4:cf:8e:21:77:62:ed:6f:12:
d2:6e:00:a7:c3:f3:9c:87:1b:cb:92:f6:dc:f8:31:cf:2c:79:
9f:5c:f0:8a:7c:00:55:eb:04:77:06:37:d9:4c:77:c2:d6:8b:
e7:28:28:b3:4b:7f:0a:c2:8a:8c:55:79:17:c0:a9:d0:e4:cf:
88:96:47:33:58:ae:cc:c2:93:73:79:43:71:34:78:50:da:48:
1c:67:9f:27:ac:23:5f:ff:01:40:5e:52:1a:7f:ac:e9:4e:ba:
19:41:1f:74:ef:5a:c9:1f:78:66:5a:34:6c:8e:97:c7:b6:96:
0e:b0:e5:3b:80:33:ce:35:ff:6e:f1:30:aa:62:a7:e3:b3:98:
1e:7c:60:25:8a:04:dd:01:39:73:ab:2f:d3:f7:f3:07:ad:73:
09:27:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:43 2026 by rpki-client