Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e39382e302f32332d3234203d3e20383334.roa
File: 3138392e33302e39382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: GfFc4UA7210/aL+WMBhOktapZPghK8UIqno/QBqGT/U=
Subject key identifier: E6:53:D0:4F:93:C1:66:37:A0:06:DF:6E:B3:54:E0:A0:92:B2:57:46
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 78B693910B260F9819F6FE6CCA516944DB2BD7A2
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e39382e302f32332d3234203d3e20383334.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 834
IP address blocks: 189.30.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b6:93:91:0b:26:0f:98:19:f6:fe:6c:ca:51:69:44:db:2b:d7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=E653D04F93C16637A006DF6EB354E0A092B25746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:41:64:47:c6:55:04:ba:f5:20:6d:7c:49:
3e:c6:45:b9:91:d7:9e:3c:4f:ef:d0:f7:cf:4d:06:
65:62:13:69:9e:e7:1d:63:b7:00:10:03:c6:c2:a2:
bc:89:17:fd:20:fd:18:17:15:ed:de:de:c2:5c:78:
e6:f9:6b:29:3b:04:c8:0b:30:1c:f1:52:b7:4f:17:
08:7e:f4:2e:ba:39:1b:0d:9e:58:e7:84:ad:2b:ca:
b1:19:71:c7:32:d0:3e:13:ba:bb:6e:a8:f1:b0:9d:
2b:d5:0c:20:83:30:f1:7d:37:a8:a1:52:19:6b:24:
b7:98:10:18:31:18:45:54:b4:82:f7:e3:ee:ea:29:
ef:8f:c8:e2:51:7b:95:70:e0:b8:bc:ab:08:c9:ee:
50:9a:41:60:31:7b:ca:87:90:db:b0:35:48:cb:9c:
41:55:e3:a0:40:74:0a:07:6b:97:c8:b0:df:bc:3a:
7d:78:8c:f9:4c:4b:05:44:d5:41:b9:38:5d:03:09:
cf:3f:fe:64:1b:16:f7:73:e3:23:ac:18:a9:0a:ff:
fb:da:b0:21:a2:41:a2:63:12:88:81:84:8b:37:ab:
77:f2:fc:72:84:e3:b8:64:d7:a4:11:3e:72:63:eb:
d4:71:15:ec:7d:87:04:4f:d1:85:3d:66:56:bb:1e:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:D0:4F:93:C1:66:37:A0:06:DF:6E:B3:54:E0:A0:92:B2:57:46
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3138392e33302e39382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.30.98.0/23
Signature Algorithm: sha256WithRSAEncryption
e0:67:4c:92:a1:df:98:22:e9:cd:83:46:65:5f:60:fe:65:c4:
a6:2b:3d:ba:f2:52:f1:1d:67:43:96:09:02:5a:c7:f9:1d:83:
dc:8a:da:a6:2c:09:89:6d:57:7e:42:c8:9e:f8:37:b2:12:ec:
8f:d5:6e:70:23:0a:1b:27:9a:4c:3a:fc:83:6e:e5:6b:31:a8:
96:88:33:87:f0:33:98:29:eb:f4:a0:70:96:07:fa:b2:09:8b:
64:09:da:8d:8d:d9:e8:27:36:4d:22:16:35:13:4c:de:8a:f4:
4e:71:66:3a:ca:08:25:d9:7a:2f:1c:8f:67:9c:4d:58:25:fb:
5a:e8:2c:0e:1e:a5:5d:6a:4b:46:b3:dd:1c:1a:c5:81:12:39:
86:21:39:6e:04:ef:ea:61:90:f9:ca:25:0e:dd:c2:41:72:2b:
0a:1b:da:0d:35:f0:e8:c1:92:c4:65:7c:b3:0d:45:3b:94:9f:
79:f9:56:51:44:49:9b:c7:df:a9:9f:05:c7:52:81:c3:35:39:
c8:e4:6b:cc:9b:6b:07:7e:41:46:62:e7:93:76:76:c6:c8:23:
1a:1d:ca:12:bf:9e:0a:7e:1a:e7:5e:f6:b3:84:6d:c9:a5:4f:
b3:d9:45:13:1d:da:51:3c:38:70:1c:36:50:fc:7d:8f:62:fa:
76:86:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:20 2026 by rpki-client