Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa
File: 3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: C1mr8dLyAg1ojhRIkFE1C7rbU8TA0LGfCaxuPEkZ3Is=
Subject key identifier: 4C:F0:6F:CF:21:C8:88:A6:4E:C9:4E:14:E4:83:4E:1F:C6:BE:87:71
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 570A531B373F9EED54F920C8A4E1B54CC25378F3
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 402866
IP address blocks: 200.141.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0a:53:1b:37:3f:9e:ed:54:f9:20:c8:a4:e1:b5:4c:c2:53:78:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=4CF06FCF21C888A64EC94E14E4834E1FC6BE8771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:fe:1e:f6:1d:a5:1c:54:c2:bf:4a:b7:3e:
0e:17:54:18:71:04:b3:91:76:b3:49:96:de:45:a5:
2b:ce:26:2b:ec:91:3b:ef:4d:09:50:e7:9f:13:1d:
85:e5:5b:be:85:e7:15:5c:be:86:e0:30:84:0c:a2:
3d:85:aa:61:bd:4b:61:d7:a1:84:a8:4b:f6:13:cd:
03:68:37:86:61:70:e6:16:a6:54:5a:50:1b:5f:1c:
86:10:fd:03:67:b1:93:0d:c3:9a:b2:05:1c:e7:72:
13:b3:30:ee:71:60:44:d6:0b:a9:71:98:82:24:1d:
56:3b:45:7b:97:db:e7:48:21:47:c4:69:c2:5b:63:
7a:c0:44:ad:4b:88:af:7f:2a:4c:b3:35:57:29:ce:
41:46:3a:25:75:8d:ad:2c:25:89:42:13:92:3f:aa:
30:7e:d9:15:08:59:5b:5e:d6:61:94:ea:67:06:16:
2a:2e:60:25:b0:0b:ae:6c:ad:15:53:5e:50:00:05:
ab:6d:26:ac:1c:fd:01:28:e0:87:13:aa:9a:63:2a:
be:18:c9:c4:77:65:c2:01:ad:e2:88:6f:ff:7d:63:
8f:92:b9:06:5a:97:7b:be:14:1a:ed:4d:97:f8:4a:
43:3d:bf:fb:04:6d:d9:2d:b6:16:9e:d7:36:d2:98:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F0:6F:CF:21:C8:88:A6:4E:C9:4E:14:E4:83:4E:1F:C6:BE:87:71
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137372e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.177.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1e:33:7a:7c:41:0e:ab:cd:6c:b5:50:06:9a:a2:98:e1:4f:
10:cc:ff:fa:ea:7c:67:1f:c6:92:b7:34:1c:81:0f:a8:fe:3f:
2a:80:67:1f:9d:fa:d2:05:5b:91:56:95:b5:8b:85:ee:c6:4f:
92:70:a9:f6:53:9c:41:17:92:72:a5:8a:ed:b5:1a:71:16:3e:
cc:60:31:8f:86:c9:39:b5:df:fc:9b:85:54:c8:f0:1a:47:18:
88:d0:25:7c:ee:b1:a4:10:75:81:17:94:fe:f3:05:de:93:06:
79:7a:60:01:89:8d:d3:f9:3e:91:01:19:33:2b:5a:9c:8f:80:
f2:82:16:3c:28:40:7c:66:3a:32:bf:64:b0:3b:83:ae:ea:95:
70:32:08:99:22:ed:46:b9:a7:0e:8c:e9:ef:6c:6a:5f:9c:55:
f8:ff:c8:e6:4f:94:23:99:a4:de:71:2f:07:81:5e:e0:ec:73:
ec:ff:fe:90:ce:c0:1c:29:d7:bc:0a:81:f9:c5:4b:bf:3a:0a:
83:2f:db:41:8b:8b:0c:1a:64:df:7c:01:5f:12:fb:7c:9a:33:
61:3b:b9:94:b4:79:b9:c8:c4:c8:63:c8:62:91:11:26:56:d1:
dc:22:80:d0:0f:d4:2d:42:6d:4f:47:f9:43:45:0b:1d:45:5f:
e7:5b:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:46 2026 by rpki-client