Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137382e302f32342d3234203d3e20313532313739.roa
File: 3230302e3134312e3137382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: TfsYehqDwN/A5qzuJvEju3AGZ6gV54Mo0VHfUlMMh4s=
Subject key identifier: 02:C5:3E:FF:95:24:E7:A9:07:38:38:54:42:3C:3B:79:BF:78:DB:C5
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 012B815ECBB037D8E5ECB86E47873F470D37243B
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137382e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 152179
IP address blocks: 200.141.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:2b:81:5e:cb:b0:37:d8:e5:ec:b8:6e:47:87:3f:47:0d:37:24:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=02C53EFF9524E7A907383854423C3B79BF78DBC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:f8:45:0b:b0:61:1c:3b:32:e2:5a:d9:91:
ab:ad:3d:0c:ad:e1:ac:70:31:a3:ac:b1:17:18:e7:
01:56:7c:b8:b7:8d:8d:84:c9:6e:a5:19:51:45:3b:
16:91:92:eb:72:45:ac:fc:c3:f6:39:d4:4d:ee:6c:
79:78:22:39:34:3d:4d:30:ed:ac:16:97:c5:63:bc:
ae:63:b8:c9:3d:7e:e6:3b:97:22:1f:f6:ea:b6:2c:
9f:50:77:3d:53:9a:dd:9f:69:96:1f:2d:68:05:97:
eb:0b:1f:ef:45:25:f8:57:41:d6:ac:4c:74:a8:2c:
c0:f6:c9:38:3b:15:aa:41:24:b7:21:5a:5d:d3:73:
71:59:e7:5d:7e:e8:6d:ee:f9:3d:51:64:bc:94:66:
57:a3:0a:3c:02:ba:88:c4:39:ac:19:45:e9:5a:f2:
67:07:7f:13:60:ef:d9:dc:5d:f2:57:a6:94:ec:e8:
0d:29:00:ef:3c:94:3b:b8:e0:c8:91:64:2e:5e:be:
4d:c3:f7:77:ab:50:44:25:6d:bf:41:1b:39:eb:95:
7a:94:72:89:6f:b7:a6:94:5a:cd:0f:9c:e0:19:2b:
10:bb:dc:52:7f:af:e7:c8:93:93:40:55:f8:10:80:
cc:d9:9f:19:09:b8:1f:a2:61:79:2e:fc:9c:d5:55:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C5:3E:FF:95:24:E7:A9:07:38:38:54:42:3C:3B:79:BF:78:DB:C5
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137382e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:5b:de:71:94:47:82:a5:5a:db:32:d5:af:a5:b8:d3:2d:fa:
22:ec:04:74:9f:46:47:52:05:5c:9a:b6:44:2c:fc:3e:9b:d6:
df:f6:bd:85:97:62:61:9b:e9:c2:e1:75:61:e4:d6:ff:ad:45:
c4:b6:65:3b:3c:80:a9:66:ff:f6:b6:94:e0:53:7c:75:32:12:
ec:9c:65:da:18:57:53:83:4c:67:4a:16:da:23:c4:75:76:46:
3e:dc:65:10:23:6f:31:1e:35:b1:c6:0e:c4:d6:77:8c:a4:81:
82:19:6f:74:4c:1d:f5:79:05:db:b3:fe:28:98:5d:4f:a9:1f:
f4:2a:fb:f7:40:58:6b:a7:9b:76:4e:3e:7b:77:a6:02:ff:7c:
c6:61:23:4f:86:61:58:0a:70:58:86:13:98:9e:a9:d4:f4:7a:
b0:2a:29:9c:c5:05:70:7e:47:59:8d:75:06:b5:e9:c4:ed:74:
23:74:a6:72:fe:0e:7b:f0:81:cd:6d:10:16:05:a0:66:78:0c:
7c:57:c2:7c:2b:c1:08:a3:d1:c5:56:30:bd:05:3c:7f:88:87:
00:44:ee:8c:42:fe:c9:ee:b7:12:7c:54:34:62:a8:d8:95:1d:
4d:dd:ea:20:6a:7b:91:70:7e:b6:4c:ce:e9:88:ba:f3:47:2f:
f5:b8:8c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:57 2026 by rpki-client