Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa
File: 3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: G4b9h7B0GLMtLrI5n3SEtDrZHww4ovf1yKkAX8oYLeU=
Subject key identifier: 06:F1:CB:68:9A:11:9B:01:6E:EE:B9:F4:22:5B:96:DB:F4:58:F7:C0
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 111CEFEDDA52ECAAC75EF561A30E12B20FA75010
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 152179
IP address blocks: 200.141.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1c:ef:ed:da:52:ec:aa:c7:5e:f5:61:a3:0e:12:b2:0f:a7:50:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=06F1CB689A119B016EEEB9F4225B96DBF458F7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:73:d7:11:85:c8:c8:83:c3:b0:de:e1:c5:
f8:dd:38:32:e9:ef:71:3f:3e:12:87:9d:f4:cc:4c:
60:9e:c9:e3:0b:6f:f4:fc:9c:67:64:58:25:37:bd:
ec:85:72:83:2b:50:a7:32:03:28:b9:9f:fc:d0:f6:
93:04:bc:7f:e4:31:c6:aa:02:fa:d6:77:03:1f:f1:
26:82:02:c8:9a:f1:50:eb:3e:99:d9:ab:4f:38:aa:
3e:0b:68:a2:9b:86:7d:76:b0:73:66:2c:d9:4c:66:
78:29:f7:79:cb:d3:aa:df:b1:7a:0e:c5:81:84:d0:
9b:c6:49:18:c9:e9:9a:6b:60:7f:5d:fb:92:5f:07:
05:8e:7e:24:65:e5:1d:db:46:c2:b2:0d:a2:a5:1b:
87:45:53:59:09:9b:2d:c0:14:e3:7e:11:a3:4d:05:
44:3f:c0:8b:f3:29:ac:59:ee:a9:34:f3:24:9d:3a:
14:ac:07:09:4e:a3:cf:16:b3:95:aa:ef:0e:4b:c1:
08:3b:3f:da:e2:45:16:92:d4:4c:c3:e3:a8:2d:2a:
7d:93:d6:66:f8:03:05:50:fe:d0:b1:3c:1e:54:7a:
59:f3:b0:69:9e:11:6b:a5:ee:1e:41:85:9f:9c:5a:
a2:3f:a1:d1:de:97:e3:d8:fd:9e:81:5e:77:3a:4d:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:CB:68:9A:11:9B:01:6E:EE:B9:F4:22:5B:96:DB:F4:58:F7:C0
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137362e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ee:39:be:bf:3c:9a:a7:6f:fc:52:47:a1:7f:be:b8:7e:eb:a3:
20:10:e9:c8:20:40:cf:f7:0f:96:84:7e:e1:cf:bc:41:6d:84:
cb:73:f6:ba:59:7d:61:50:0f:8c:33:31:50:56:05:45:40:c1:
f9:95:51:8c:cd:89:ba:03:b1:12:45:c8:d1:11:de:f6:82:60:
1e:4d:bb:56:c9:d0:21:01:a8:22:7f:76:6f:40:e8:94:b3:37:
dd:c4:19:5e:a7:92:04:d5:8a:5b:c3:94:a7:f4:b2:5e:10:7b:
65:0f:e8:a6:9c:34:3c:df:b1:50:68:9a:51:51:98:e4:10:c7:
a1:92:3e:ef:d8:91:a9:8a:e0:cf:a1:be:67:01:40:e9:f1:31:
c9:e0:36:be:6e:d7:e0:5c:13:9e:76:ed:e6:f9:bc:5b:69:94:
5e:db:8f:56:69:e6:1a:63:bb:06:36:0a:9e:a1:f4:ab:c7:10:
e7:5b:91:c2:5f:e5:de:96:76:17:25:95:3c:24:5f:23:a9:e6:
0a:36:bf:0e:d1:c4:73:3d:e5:e0:7a:1c:b5:72:c5:ce:4d:c5:
f8:03:4a:a1:8f:da:46:8b:81:ad:20:15:7c:41:1b:48:b3:cd:
7b:09:12:35:68:dd:52:ba:9c:6e:50:d2:b5:ab:f2:30:3a:69:
d3:67:80:37
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUERzv7dpS7KrHXvVhow4Ssg+nUBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDBaFw0yNzA5MTUxNTM1MDBaMDMxMTAvBgNV
BAMTKDA2RjFDQjY4OUExMTlCMDE2RUVFQjlGNDIyNUI5NkRCRjQ1OEY3QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEeXPXEYXIyIPDsN7hxfjdODLp
73E/PhKHnfTMTGCeyeMLb/T8nGdkWCU3veyFcoMrUKcyAyi5n/zQ9pMEvH/kMcaq
AvrWdwMf8SaCAsia8VDrPpnZq084qj4LaKKbhn12sHNmLNlMZngp93nL06rfsXoO
xYGE0JvGSRjJ6ZprYH9d+5JfBwWOfiRl5R3bRsKyDaKlG4dFU1kJmy3AFON+EaNN
BUQ/wIvzKaxZ7qk08ySdOhSsBwlOo88Ws5Wq7w5LwQg7P9riRRaS1EzD46gtKn2T
1mb4AwVQ/tCxPB5UelnzsGmeEWul7h5BhZ+cWqI/odHel+PY/Z6BXnc6TUNXAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUBvHLaJoRmwFu7rn0IluW2/RY98AwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM0MzEyZTMx
MzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMiNsDANBgkqhkiG9w0BAQsFAAOCAQEA7jm+vzyap2/8Ukehf764fuujIBDp
yCBAz/cPloR+4c+8QW2Ey3P2ull9YVAPjDMxUFYFRUDB+ZVRjM2JugOxEkXI0RHe
9oJgHk27VsnQIQGoIn92b0DolLM33cQZXqeSBNWKW8OUp/SyXhB7ZQ/oppw0PN+x
UGiaUVGY5BDHoZI+79iRqYrgz6G+ZwFA6fExyeA2vm7X4FwTnnbt5vm8W2mUXtuP
VmnmGmO7BjYKnqH0q8cQ51uRwl/l3pZ2FyWVPCRfI6nmCja/DtHEcz3l4HoctXLF
zk3F+ANKoY/aRouBrSAVfEEbSLPNewkSNWjdUrqcblDStavyMDpp02eANw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:55 2026 by rpki-client