Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130322e302f32332d3234203d3e20383334.roa
File: 3138392e33302e3130322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: DmtsEGy1QDkZnTijsyDxNDodi2A6Dq8vkt6MNxDFc6s=
Subject key identifier: 16:5B:7F:CC:2E:12:66:71:8B:77:07:D0:8E:0B:C7:A8:DB:8F:F0:C3
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7F2D8D9A3594ED27417DD76BF707B40390D6E8CC
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130322e302f32332d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 834
IP address blocks: 189.30.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2d:8d:9a:35:94:ed:27:41:7d:d7:6b:f7:07:b4:03:90:d6:e8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=165B7FCC2E1266718B7707D08E0BC7A8DB8FF0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:c7:12:dd:c0:ae:68:4a:db:35:18:64:ce:
4f:26:1e:c1:6c:23:c9:51:a1:d8:b5:b9:03:94:20:
9a:fa:5e:1a:82:03:9f:0d:cd:c6:e8:b7:34:ea:e8:
d3:07:94:6b:ed:18:62:57:e9:68:ef:39:cc:26:e8:
5b:18:b1:59:12:e8:b8:1c:d4:eb:1a:bc:9e:bb:8f:
57:d6:77:f7:37:ad:b8:d0:02:93:c8:3e:b4:8c:ec:
1e:ce:52:2e:8f:4b:ea:92:8c:d5:cf:f4:04:c0:d2:
a6:1b:79:54:c0:48:7d:a3:79:af:ec:be:8f:48:a1:
f7:a5:1a:6c:56:5e:52:8d:e4:1c:74:cc:2b:9a:f7:
f0:86:09:96:de:a6:33:88:b6:01:e8:01:42:44:c1:
6c:4e:1f:0e:79:7b:6f:36:90:7c:d9:4d:ac:cb:3b:
58:0e:ff:57:0d:7a:60:d5:ab:3a:0f:31:4b:8b:70:
71:0d:8d:a7:6e:8b:bf:b9:c5:22:a8:05:43:d1:a8:
db:2b:7a:ed:23:68:b4:de:de:a5:79:0b:ed:46:11:
b7:fc:18:d7:aa:62:c9:50:74:89:7a:f9:3b:2a:23:
b2:26:b0:ff:1b:d3:20:0b:95:49:19:c1:9a:b0:45:
6f:4e:63:b9:50:18:8e:f4:3a:b5:8f:ab:1f:16:f2:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5B:7F:CC:2E:12:66:71:8B:77:07:D0:8E:0B:C7:A8:DB:8F:F0:C3
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.102.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:79:f6:9b:2b:e6:aa:81:3b:5a:a8:91:1e:ea:ca:8f:1a:11:
5e:97:0e:41:2f:e4:ad:de:19:ea:4a:0f:73:da:d9:16:70:14:
82:52:3b:43:bb:47:99:79:6e:6c:dc:f7:fe:dc:42:a4:65:10:
ee:16:67:29:49:b6:93:31:88:10:49:9c:95:1f:78:10:12:8d:
6f:31:d6:c8:03:74:f0:f4:f9:40:eb:23:2d:96:76:f1:86:ca:
be:f4:da:5f:00:82:4a:c4:45:67:d3:6c:4d:0d:1f:6a:d9:e0:
5f:80:89:12:fa:8a:db:1a:85:39:fa:a1:ba:99:de:33:89:18:
f9:08:a3:e9:d5:12:21:99:d2:b3:0b:e0:a0:19:ab:93:65:42:
55:be:d2:6f:ff:b4:88:2a:16:3e:6b:db:a3:ec:8f:30:66:59:
bd:80:32:f2:4d:39:f2:b2:12:1a:47:4a:3c:dc:4f:86:26:d8:
cc:95:37:53:e6:3f:66:a9:76:9b:60:9a:eb:36:e1:0a:1c:ad:
3d:dc:2c:6e:73:0d:60:cd:8d:04:ed:0b:d9:f8:4e:d1:61:20:
3c:95:19:41:91:c9:62:2c:cf:5c:6a:8d:59:3d:24:a4:1f:13:
f1:82:4b:b3:1a:00:ca:9b:78:a0:93:64:92:a5:d9:77:9e:ea:
58:1a:fe:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:42 2026 by rpki-client