Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa
File: 3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: dQyIbFIlpEN+08ZMYgTg4xTQkQjii1Wv0clqDw1T7bA=
Subject key identifier: 9E:73:C1:3A:1E:42:B3:D8:89:25:99:D3:37:A5:25:DA:5D:95:93:22
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 13B057109172DD18A4626FF5E90D65620C642609
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 214483
IP address blocks: 189.30.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b0:57:10:91:72:dd:18:a4:62:6f:f5:e9:0d:65:62:0c:64:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=9E73C13A1E42B3D8892599D337A525DA5D959322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:15:4c:29:13:cc:9d:28:ab:a4:90:fd:2f:
3d:df:fc:e7:6d:6e:78:1e:bb:ee:d8:c0:14:a1:77:
3a:2b:67:c2:ed:36:66:55:79:bc:02:5e:ab:34:2c:
a0:48:90:7e:c3:de:51:93:24:cc:88:7a:70:6f:10:
fe:ed:d8:6e:84:d8:7d:8b:cc:e8:68:5b:02:c7:91:
e9:42:4d:43:41:5e:27:6f:af:19:6f:e2:a0:5d:a3:
bc:5c:2b:11:54:55:8d:f7:a7:07:4b:79:7f:7c:8a:
09:37:02:b2:e4:58:c4:b0:16:af:29:77:db:c8:fd:
be:5a:34:85:9a:6d:fd:8d:7f:66:2e:cb:f9:fe:00:
49:e1:dc:ea:6f:c6:80:19:1c:d7:ce:b9:7b:de:42:
2e:a9:e8:7d:51:8b:67:26:09:25:43:ad:ae:48:40:
dc:54:3f:cb:54:f4:79:04:c9:13:a6:07:9c:4d:30:
4c:8c:18:a3:78:9c:cc:6a:bc:67:99:5f:f6:f6:79:
35:0c:d0:2d:5d:8a:05:64:5f:46:5f:62:57:31:36:
bc:ef:61:19:fd:12:60:27:72:f9:19:70:89:ea:77:
dd:67:34:34:c1:81:23:70:4b:73:c2:2f:68:98:71:
11:7e:c5:98:c0:43:fd:20:0a:f5:95:b9:00:29:08:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:73:C1:3A:1E:42:B3:D8:89:25:99:D3:37:A5:25:DA:5D:95:93:22
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130302e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.100.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e0:f7:21:e4:d3:28:d7:57:ab:f2:45:bc:1b:05:cf:c7:38:
3d:06:e0:b3:b1:c0:4e:cc:8a:44:0a:34:6d:8a:64:45:42:50:
ed:e0:fb:d4:14:f9:53:5b:c0:7a:5b:2c:f7:5a:27:1e:1d:ad:
22:1d:9d:fa:75:82:ed:1d:5b:10:7f:67:02:f8:2e:26:c7:10:
96:32:72:62:b6:0f:c7:dc:a5:38:9d:23:38:b6:b6:59:c7:c7:
fd:b4:e6:2e:22:fd:e5:7d:6d:a5:10:00:0f:75:de:99:bb:4a:
65:ee:20:4f:07:23:e5:38:a1:9c:4f:b6:58:77:11:56:df:1a:
29:f9:67:f8:ae:ac:12:ea:c2:25:f5:da:93:1e:3e:47:48:3f:
31:c9:69:18:5c:00:c3:ff:4c:4a:78:88:e0:f7:f9:e6:15:f7:
c4:a5:0f:cd:52:53:ed:94:f7:c0:17:f3:8c:55:bc:d7:2f:3f:
6a:ab:a5:dd:f9:f6:63:2e:62:c5:87:a8:f2:00:75:96:02:d7:
85:93:dd:31:78:7f:04:d7:bb:b1:54:c6:f8:ae:67:eb:3e:b4:
21:6c:35:de:dd:4c:2f:46:f6:1e:46:a7:2a:d0:9f:d9:6d:3c:
7c:5e:ec:73:6b:7d:12:25:50:31:25:b0:42:08:ab:bd:34:cb:
a4:4c:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:34 2026 by rpki-client