Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130342e302f32312d3234203d3e20383334.roa
File: 3138392e33302e3130342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: uzPYJYmUs+cg44AXpv2a9mIYg18STCR2IG94YEDPJsg=
Subject key identifier: 39:FD:67:00:19:78:A7:2F:5D:64:03:95:3B:59:9B:96:83:89:E5:F0
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 4D5778D7AD8A13F0529548C9340F4D7DB2C43152
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130342e302f32312d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 834
IP address blocks: 189.30.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:57:78:d7:ad:8a:13:f0:52:95:48:c9:34:0f:4d:7d:b2:c4:31:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=39FD67001978A72F5D6403953B599B968389E5F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:df:90:1e:87:05:15:99:f5:ee:a7:ef:f4:
84:76:12:a6:92:73:6e:1f:e5:b6:80:20:ea:d5:53:
6d:ec:b8:29:cb:5a:10:ad:ba:ef:84:3c:18:aa:45:
fe:e6:a7:96:7a:76:d9:9c:24:96:9b:e9:c0:e0:97:
22:e6:df:a7:a9:47:cf:aa:fd:ea:48:d0:64:bb:f8:
47:4c:4f:26:49:f7:c9:1b:f2:23:69:a6:82:5c:f3:
12:ff:9f:98:00:0e:64:af:59:98:e9:f2:70:e5:fc:
ad:7c:01:3b:c6:ac:14:1f:c3:c5:d4:77:e7:fe:a0:
24:0b:68:4a:2b:61:ab:08:c0:37:6f:6f:7b:bd:b4:
17:43:eb:63:e1:93:a2:b7:4a:c7:d5:10:67:93:20:
02:d9:1c:b0:e0:36:e1:89:e4:5e:72:bc:d7:4b:74:
93:67:85:7c:7e:14:8c:a8:83:2b:b5:65:fe:92:ed:
35:30:a2:df:b5:91:e6:47:7d:9d:38:12:29:62:ae:
81:f0:04:6c:8f:56:2a:43:68:5d:b5:07:ab:b9:aa:
0d:bf:6c:79:5a:30:07:6e:6e:0f:6a:00:68:de:0c:
c3:f4:da:f8:ed:23:75:a5:f2:17:8c:e3:22:57:6c:
37:49:57:ea:5d:1c:28:02:cf:30:37:37:77:fc:45:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FD:67:00:19:78:A7:2F:5D:64:03:95:3B:59:9B:96:83:89:E5:F0
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3130342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:db:57:20:85:74:da:0f:1e:df:1f:b6:64:8b:ba:91:2b:48:
89:e4:de:16:4e:7c:0a:53:e6:7d:01:20:0c:aa:22:21:df:71:
40:f1:97:e6:5a:76:61:d3:ad:83:52:c1:44:ed:3a:4b:b9:1d:
37:cf:c8:aa:dc:77:af:9e:f0:56:5d:eb:34:22:13:73:23:0b:
0a:b3:e7:61:14:17:d5:cd:6f:1d:4e:c1:c1:4f:33:97:f5:c5:
a4:f7:e7:9c:93:f5:61:fe:16:60:c1:82:45:46:68:5a:28:2e:
0d:e2:7d:c0:1b:bf:87:a3:68:be:8e:47:09:d7:e8:e3:41:1e:
c9:6f:2b:a1:bd:71:34:db:cc:09:86:50:dc:f5:1f:3c:cb:b9:
d0:f3:0a:f5:a4:c7:12:69:b0:93:71:a1:b4:d2:92:63:34:39:
5b:92:15:0f:7e:a0:b2:fd:cb:2e:ff:be:07:57:45:5f:bf:61:
f9:9a:7e:4a:49:15:74:d6:c1:b8:6e:56:b6:dd:76:62:74:4c:
2d:10:44:ba:94:19:72:3a:6c:03:2d:ba:09:f0:55:52:7c:8a:
3b:96:13:1e:11:f3:71:41:79:2b:74:0b:13:90:f2:fd:0d:da:
0e:b7:1c:cf:db:63:c4:6b:f8:9a:40:2f:33:42:99:f1:ef:71:
93:d2:84:98
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUTVd4162KE/BSlUjJNA9NfbLEMVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NTlaFw0yNzA5MTUxNTM0NTlaMDMxMTAvBgNV
BAMTKDM5RkQ2NzAwMTk3OEE3MkY1RDY0MDM5NTNCNTk5Qjk2ODM4OUU1RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvd+QHocFFZn17qfv9IR2EqaS
c24f5baAIOrVU23suCnLWhCtuu+EPBiqRf7mp5Z6dtmcJJab6cDglyLm36epR8+q
/epI0GS7+EdMTyZJ98kb8iNppoJc8xL/n5gADmSvWZjp8nDl/K18ATvGrBQfw8XU
d+f+oCQLaEorYasIwDdvb3u9tBdD62Phk6K3SsfVEGeTIALZHLDgNuGJ5F5yvNdL
dJNnhXx+FIyogyu1Zf6S7TUwot+1keZHfZ04EiliroHwBGyPVipDaF21B6u5qg2/
bHlaMAdubg9qAGjeDMP02vjtI3Wl8heM4yJXbDdJV+pdHCgCzzA3N3f8RRk7AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUOf1nABl4py9dZAOVO1mbloOJ5fAwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzEzODM5MmUzMzMwMmUzMTMw
MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO9Hmgw
DQYJKoZIhvcNAQELBQADggEBAD/bVyCFdNoPHt8ftmSLupErSInk3hZOfApT5n0B
IAyqIiHfcUDxl+ZadmHTrYNSwUTtOku5HTfPyKrcd6+e8FZd6zQiE3MjCwqz52EU
F9XNbx1OwcFPM5f1xaT355yT9WH+FmDBgkVGaFooLg3ifcAbv4ejaL6ORwnX6ONB
HslvK6G9cTTbzAmGUNz1HzzLudDzCvWkxxJpsJNxobTSkmM0OVuSFQ9+oLL9yy7/
vgdXRV+/YfmafkpJFXTWwbhuVrbddmJ0TC0QRLqUGXI6bAMtugnwVVJ8ijuWEx4R
83FBeSt0CxOQ8v0N2g63HM/bY8Rr+JpALzNCmfHvcZPShJg=
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:29 2026 by rpki-client