Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa
File: 3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: NUAIEULjr7+B6KwnmHsFANAYxTjqJZzp+rHO7HBAtMU=
Subject key identifier: 40:83:51:E7:6A:9E:0C:59:1A:F2:24:FC:D8:59:78:12:73:3D:03:D0
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 119062F21752903E5A0287572A386DDD0492AC2D
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 15:35:00 +0000
ROA not before: Wed 16 Sep 2026 15:30:00 +0000
ROA not after: Wed 15 Sep 2027 15:35:00 +0000
asID: 214483
IP address blocks: 200.141.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:90:62:f2:17:52:90:3e:5a:02:87:57:2a:38:6d:dd:04:92:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:00 2026 GMT
Not After : Sep 15 15:35:00 2027 GMT
Subject: CN=408351E76A9E0C591AF224FCD8597812733D03D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:f2:97:d1:85:cf:a5:30:c5:f7:c2:af:a5:
7f:d2:1d:bb:3c:5a:5d:88:23:9e:a8:4c:55:df:a6:
6c:e0:6c:38:6a:9c:5b:f9:cd:fd:e1:22:3c:64:8d:
f1:fe:1e:4f:1c:f3:02:ff:de:1d:ec:e5:e6:5c:2d:
9c:d3:d3:1f:04:9f:39:43:78:e6:3c:f7:7c:97:89:
8e:96:70:20:c6:db:12:f0:61:06:e9:77:b2:9a:25:
63:db:08:fa:11:aa:71:85:9e:9d:fa:6a:27:c1:3f:
e3:de:ed:39:4b:d6:7d:fd:55:e6:f2:b3:e5:84:e6:
9a:24:dc:14:c3:b1:ee:6f:b5:02:94:b0:4a:c9:16:
45:3e:45:2d:cc:60:06:79:3f:63:e1:19:e0:6a:6a:
e1:e2:5a:f5:da:d1:b6:64:54:24:e6:08:0e:24:21:
c6:a2:e7:30:70:85:67:a2:ee:24:d4:ec:60:82:8c:
59:cf:7f:e0:dd:fa:75:c5:88:84:9f:a5:3d:30:84:
1e:95:ce:9a:64:39:f1:0d:08:9a:7f:65:78:67:19:
c3:b0:4f:33:c0:9d:c6:ab:96:4a:d6:7d:c7:dc:a9:
21:6f:4b:4c:99:c9:67:2a:44:f3:6e:c4:de:6b:bb:
c7:c7:a5:ea:6d:f7:29:09:17:c0:a0:4c:f7:8c:82:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:51:E7:6A:9E:0C:59:1A:F2:24:FC:D8:59:78:12:73:3D:03:D0
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3137392e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.179.0/24
Signature Algorithm: sha256WithRSAEncryption
77:62:1e:99:4e:8e:a5:74:6e:87:54:e3:ac:f1:ff:ee:53:43:
d9:17:10:c2:7c:0c:9b:89:12:ad:a2:18:c1:8d:cd:8f:79:b9:
d5:b1:49:36:8b:a7:58:2a:4c:84:a7:a3:70:92:03:94:30:5e:
ee:15:ff:70:a0:bc:e0:3f:7b:cb:c5:a4:17:fa:0d:2f:80:83:
19:51:da:34:60:5b:ff:95:5b:e9:ad:60:0c:7f:75:3a:fa:91:
37:a1:14:c7:4e:9c:cf:0f:cc:3f:23:20:65:7f:9c:f3:31:97:
40:2c:38:94:e7:33:60:63:2a:35:1e:ee:b7:12:fc:aa:66:e8:
24:80:83:53:1d:58:a7:0e:fd:c3:7f:bf:8b:a1:59:a5:19:65:
5c:78:5b:e0:e6:27:ed:67:71:05:ba:2a:8f:67:86:d2:0e:d8:
9e:59:09:38:3d:54:39:e4:36:32:a8:79:1e:a9:64:59:58:40:
bc:5a:2a:6b:40:0b:13:7a:ab:36:54:86:05:5c:e9:f7:a4:da:
53:45:b3:87:65:65:d1:e6:ff:33:4d:3c:28:81:ab:66:3b:64:
42:73:89:e7:70:88:01:7c:3e:1f:2c:e5:d3:ae:fd:c7:ec:a1:
4f:81:61:15:ad:2c:17:e1:30:4f:69:97:3d:d6:36:6c:43:a9:
e4:56:df:7e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUEZBi8hdSkD5aAodXKjht3QSSrC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDBaFw0yNzA5MTUxNTM1MDBaMDMxMTAvBgNV
BAMTKDQwODM1MUU3NkE5RTBDNTkxQUYyMjRGQ0Q4NTk3ODEyNzMzRDAzRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdF/KX0YXPpTDF98KvpX/SHbs8
Wl2II56oTFXfpmzgbDhqnFv5zf3hIjxkjfH+Hk8c8wL/3h3s5eZcLZzT0x8EnzlD
eOY893yXiY6WcCDG2xLwYQbpd7KaJWPbCPoRqnGFnp36aifBP+Pe7TlL1n39Veby
s+WE5pok3BTDse5vtQKUsErJFkU+RS3MYAZ5P2PhGeBqauHiWvXa0bZkVCTmCA4k
Icai5zBwhWei7iTU7GCCjFnPf+Dd+nXFiISfpT0whB6VzppkOfENCJp/ZXhnGcOw
TzPAncarlkrWfcfcqSFvS0yZyWcqRPNuxN5ru8fHpept9ykJF8CgTPeMgvdXAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUQINR52qeDFka8iT82Fl4EnM9A9AwHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM0MzEyZTMx
MzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzgzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMiNszANBgkqhkiG9w0BAQsFAAOCAQEAd2IemU6OpXRuh1TjrPH/7lND2RcQ
wnwMm4kSraIYwY3Nj3m51bFJNounWCpMhKejcJIDlDBe7hX/cKC84D97y8WkF/oN
L4CDGVHaNGBb/5Vb6a1gDH91OvqRN6EUx06czw/MPyMgZX+c8zGXQCw4lOczYGMq
NR7utxL8qmboJICDUx1Ypw79w3+/i6FZpRllXHhb4OYn7WdxBboqj2eG0g7YnlkJ
OD1UOeQ2Mqh5HqlkWVhAvFoqa0ALE3qrNlSGBVzp96TaU0Wzh2Vl0eb/M008KIGr
ZjtkQnOJ53CIAXw+Hyzl0679x+yhT4FhFa0sF+EwT2mXPdY2bEOp5Fbffg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:28 2026 by rpki-client