Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3131322e302f32302d3234203d3e20383334.roa
File: 3138392e33302e3131322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: nrUmJJaFqU6Xw+EkHweMp7+Q75GjP0qS45dTf1uSqUw=
Subject key identifier: 32:F5:67:F0:0C:57:F0:5E:A6:FB:6B:A4:04:00:C9:35:0E:69:6D:13
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 28C2B45707C327C133E5A097E76A2331235DE02C
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3131322e302f32302d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 834
IP address blocks: 189.30.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:c2:b4:57:07:c3:27:c1:33:e5:a0:97:e7:6a:23:31:23:5d:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=32F567F00C57F05EA6FB6BA40400C9350E696D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:d1:c4:d4:b4:45:28:d0:91:1a:ae:32:c9:
d2:22:eb:6d:01:84:19:11:78:d0:1c:dd:82:42:8a:
15:af:70:31:9a:0b:46:48:7e:79:49:6d:e3:6d:bb:
21:7b:05:4a:33:90:4d:04:ef:29:12:e1:89:4a:a6:
06:74:fc:ae:e1:bb:27:46:ec:b6:95:72:60:e5:57:
30:ea:f4:3d:df:01:e2:88:db:4e:45:61:53:7b:03:
44:15:aa:b0:0d:c9:3f:b6:77:7c:14:a1:1e:51:e3:
85:b7:2e:c0:09:10:1e:ea:d5:d3:9d:8e:bc:d7:34:
92:0c:f8:52:95:86:db:f8:22:8a:51:79:fd:49:93:
70:e0:cd:48:ee:7a:b5:0d:16:58:2c:ac:f5:8b:1d:
58:03:9f:0a:40:cd:2d:9c:ed:0a:fb:76:31:7a:b8:
2e:98:61:d6:35:34:b4:43:db:28:cd:a6:a8:26:99:
e2:16:2a:3e:c0:90:fd:82:89:2a:99:91:34:e1:6e:
6f:7d:81:a5:78:48:e3:85:18:9c:19:96:86:b9:5b:
10:22:57:8a:c6:54:8c:13:71:22:a4:77:25:3d:fd:
64:04:61:eb:de:da:ee:62:c8:3f:67:f5:6f:0a:7a:
c9:6e:ef:1a:eb:2e:30:26:fc:51:58:21:a1:89:26:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:67:F0:0C:57:F0:5E:A6:FB:6B:A4:04:00:C9:35:0E:69:6D:13
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e3131322e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.112.0/20
Signature Algorithm: sha256WithRSAEncryption
05:eb:d4:1c:2b:b5:d5:e2:60:17:b8:b4:b3:25:67:82:6a:39:
2d:89:23:44:03:ef:a9:c8:0a:6d:f2:74:e4:00:ad:47:aa:20:
00:c2:2d:a1:f8:6c:eb:34:d1:13:e0:7d:6e:5b:f1:85:ba:72:
7b:ba:ea:a1:f8:ac:36:42:17:82:ce:b1:df:c5:6d:cc:0a:81:
00:ad:e9:a2:5f:cd:c2:98:62:9a:18:f2:1b:34:49:ab:62:14:
53:36:17:3f:78:fa:59:b1:40:3c:74:7b:ec:fd:37:ef:cf:03:
3f:4c:cd:85:41:02:f0:cc:7a:f6:6b:01:0e:2c:96:33:7a:ab:
7b:c8:c4:88:10:97:1c:25:a9:7d:91:52:ad:26:b2:6d:f8:e4:
3b:99:b4:ed:d6:ae:61:2c:fc:d0:cd:f9:6b:1f:04:d6:f4:5f:
2a:b1:07:fa:7a:69:d5:b0:2f:3d:f5:53:3a:e2:9d:9e:58:fb:
2e:b2:65:45:96:22:2b:ea:13:fa:55:fd:b0:1d:e9:db:6a:e3:
5e:22:b3:b3:f0:38:b4:c4:24:23:34:dd:23:e4:c8:c5:e7:56:
1c:63:ac:e5:45:69:ba:7a:41:a5:49:73:11:e3:7b:fa:c7:da:
fd:a5:b3:c9:59:d2:4d:1a:a0:ff:ee:8b:c2:1b:83:18:67:22:
4a:ad:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:24 2026 by rpki-client