Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130312e302f32342d3234203d3e20323134343833.roa
File: 3138392e33302e3130312e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: rDySTEpMwGzYh+h/b8RvaJJNS0flIJ4YPshq40xTZt4=
Subject key identifier: FF:2C:CB:C3:6A:A9:57:E7:4C:0E:C0:CE:9A:D6:7B:CB:F6:EC:84:03
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 53896E0D6C2D4781B3B7187E460287368D2C6A5B
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130312e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 214483
IP address blocks: 189.30.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:89:6e:0d:6c:2d:47:81:b3:b7:18:7e:46:02:87:36:8d:2c:6a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=FF2CCBC36AA957E74C0EC0CE9AD67BCBF6EC8403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:0f:59:3e:95:55:f7:e3:c9:27:b7:9e:bb:
ac:0d:64:04:f7:83:01:d4:5e:4d:a7:c8:a9:ce:08:
0e:d0:cd:33:de:d4:31:a2:07:f5:88:32:fc:43:47:
5b:cc:c6:d9:dd:c5:d4:05:b8:dd:de:fe:23:38:7f:
c3:13:00:a0:fc:2e:dc:29:65:5a:27:f1:0f:78:db:
a1:b2:3c:6c:b6:27:a5:bb:b6:94:57:ae:19:bd:36:
8e:85:1a:4b:d4:78:45:ab:11:a5:08:56:cb:b5:8e:
d3:fd:7b:50:f0:2c:08:f0:72:e2:d1:fe:39:98:e3:
58:84:aa:76:e0:4c:95:27:24:d7:4a:f4:80:53:49:
25:fd:97:27:75:54:08:38:77:5d:a9:8a:09:a2:46:
df:dc:a0:51:05:2e:01:7e:20:df:a1:87:54:b5:14:
e6:94:c9:32:27:7b:d0:e5:27:8b:27:d0:58:50:da:
4f:ab:df:d2:b4:8b:d5:ed:7d:1e:6f:7b:78:22:1a:
9f:07:61:9c:80:fa:fa:d3:b6:5c:a3:7d:76:a4:cb:
63:3c:a7:37:31:15:22:dd:b0:40:b6:c1:15:2c:12:
4e:8d:09:6d:8f:6b:5c:70:7f:c7:de:48:7d:dd:89:
08:84:89:30:b9:e0:6c:fd:96:4a:90:6b:47:b5:b8:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:CB:C3:6A:A9:57:E7:4C:0E:C0:CE:9A:D6:7B:CB:F6:EC:84:03
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130312e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.101.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:d2:51:5e:71:dc:d9:dd:96:88:71:b0:88:48:63:c8:61:8d:
24:92:0e:70:d6:09:33:3e:93:d0:d1:1a:7a:85:8a:f1:4e:11:
c6:1d:c6:4d:9a:d7:1b:91:55:14:ea:53:42:c9:f7:ec:c4:52:
e9:ff:b5:b2:13:20:c4:c3:c3:f6:87:8b:1a:6a:8a:fe:bb:32:
bb:e4:d7:c7:f3:bf:33:8c:41:22:87:9a:cb:53:ed:0c:9f:f4:
1e:96:a6:13:6c:49:c8:e2:4e:46:f0:d6:b6:d0:98:cf:97:99:
d6:2f:cd:7e:71:a8:01:dd:a1:12:96:58:4f:f8:91:8a:dc:38:
64:90:e2:93:e3:59:f2:b0:da:68:80:a9:fd:2f:4f:9e:b7:0c:
2e:57:f5:85:e4:da:2d:22:4a:37:6b:40:40:6a:5c:c6:53:8f:
5f:35:d6:3b:f4:26:dd:79:8d:09:f0:1e:33:b2:cc:51:51:99:
d2:a6:b2:4c:92:99:89:b5:1d:7c:0e:e7:e0:75:9a:43:63:16:
81:6b:25:88:4c:74:e4:a4:c3:e0:b1:af:73:0c:2d:86:51:38:
b0:dd:16:9e:10:49:23:97:1d:80:bc:b6:38:a5:bb:90:26:40:
c5:56:cd:52:09:62:6d:08:27:85:1f:be:15:6c:85:fe:17:b3:
38:07:ec:35
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUU4luDWwtR4Gztxh+RgKHNo0salswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKEZGMkNDQkMzNkFBOTU3RTc0QzBFQzBDRTlBRDY3QkNCRjZFQzg0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlA9ZPpVV9+PJJ7eeu6wNZAT3
gwHUXk2nyKnOCA7QzTPe1DGiB/WIMvxDR1vMxtndxdQFuN3e/iM4f8MTAKD8Ltwp
ZVon8Q9426GyPGy2J6W7tpRXrhm9No6FGkvUeEWrEaUIVsu1jtP9e1DwLAjwcuLR
/jmY41iEqnbgTJUnJNdK9IBTSSX9lyd1VAg4d12pigmiRt/coFEFLgF+IN+hh1S1
FOaUyTIne9DlJ4sn0FhQ2k+r39K0i9XtfR5ve3giGp8HYZyA+vrTtlyjfXaky2M8
pzcxFSLdsEC2wRUsEk6NCW2Pa1xwf8feSH3diQiEiTC54Gz9lkqQa0e1uPI1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/yzLw2qpV+dMDsDOmtZ7y/bshAMwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM5MmUzMzMwMmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC9HmUwDQYJKoZIhvcNAQELBQADggEBAMTSUV5x3NndlohxsIhIY8hhjSSSDnDW
CTM+k9DRGnqFivFOEcYdxk2a1xuRVRTqU0LJ9+zEUun/tbITIMTDw/aHixpqiv67
Mrvk18fzvzOMQSKHmstT7Qyf9B6WphNsScjiTkbw1rbQmM+XmdYvzX5xqAHdoRKW
WE/4kYrcOGSQ4pPjWfKw2miAqf0vT563DC5X9YXk2i0iSjdrQEBqXMZTj1811jv0
Jt15jQnwHjOyzFFRmdKmskySmYm1HXwO5+B1mkNjFoFrJYhMdOSkw+Cxr3MMLYZR
OLDdFp4QSSOXHYC8tjilu5AmQMVWzVIJYm0IJ4UfvhVshf4XszgH7DU=
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:43 2026 by rpki-client