Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138302e302f32332d3233203d3e20323735373631.roa
File: 3230302e3134312e3138302e302f32332d3233203d3e20323735373631.roa (raw, json)
Hash identifier: 8pULz6C+uq0DI9PTZ4rBW419fPGQno1reGJmgOX1kKg=
Subject key identifier: C0:24:3B:92:33:B2:53:C4:5B:6D:6D:D4:1F:DB:71:77:9B:7D:25:E5
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 51879E93F4EB0F9C7BD55EF5E894B06A7360B78F
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138302e302f32332d3233203d3e20323735373631.roa
Signing time: Wed 16 Sep 2026 16:03:06 +0000
ROA not before: Wed 16 Sep 2026 15:58:06 +0000
ROA not after: Wed 15 Sep 2027 16:03:06 +0000
asID: 275761
IP address blocks: 200.141.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:87:9e:93:f4:eb:0f:9c:7b:d5:5e:f5:e8:94:b0:6a:73:60:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:58:06 2026 GMT
Not After : Sep 15 16:03:06 2027 GMT
Subject: CN=C0243B9233B253C45B6D6DD41FDB71779B7D25E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:b6:5e:1b:88:39:ab:6e:11:fd:ed:67:40:
2e:67:c2:ee:1c:7a:9f:f6:75:a0:32:a8:f6:f7:31:
da:e8:8e:21:7d:25:3c:9e:a8:6f:0b:ac:b6:0c:e2:
55:b4:d0:48:38:f3:92:1d:d8:94:8e:6e:9b:f7:ad:
ef:b2:5c:de:d5:fc:a9:c6:97:80:43:9e:5f:48:4c:
b0:c4:84:5f:f0:3c:aa:1d:10:61:90:49:9f:86:59:
27:b2:29:ff:9e:a2:e2:ac:e3:8e:4c:02:95:f8:3e:
e0:a2:4e:b4:60:96:02:e2:83:89:1f:81:1d:75:f7:
d8:66:ed:c2:c6:3a:eb:58:84:86:71:b1:a3:64:f1:
9c:23:80:8e:1d:e3:22:6b:9c:d5:ef:7c:f9:5d:72:
ae:d8:7f:a2:83:d1:5a:bf:8b:10:f0:c5:f3:81:a2:
96:89:e2:c3:4d:71:f1:8a:5b:e9:4f:be:d6:a9:90:
f0:b1:0d:4a:37:af:6b:57:c5:3f:39:78:51:a6:66:
92:a0:b3:39:1e:3c:83:44:ae:2d:8e:88:a9:93:51:
83:a4:1d:41:3b:86:1f:d1:83:c3:4b:fa:a8:4c:02:
d2:06:d1:06:5e:52:2a:2a:93:79:b4:73:07:2c:d5:
26:ed:f0:c9:be:67:d1:03:65:0c:bf:dd:23:fc:cc:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:24:3B:92:33:B2:53:C4:5B:6D:6D:D4:1F:DB:71:77:9B:7D:25:E5
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138302e302f32332d3233203d3e20323735373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.180.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:59:a2:f3:7b:49:a9:4b:7c:35:67:c2:a0:ac:36:4f:2c:23:
c3:84:78:35:02:35:f5:92:3b:58:7e:b7:22:04:7a:7e:62:05:
91:36:4e:46:af:d1:37:57:81:7d:eb:b9:05:47:ca:43:48:3c:
69:a4:78:3b:8d:2a:8a:a5:68:af:86:97:7f:3e:88:a2:5a:e9:
42:77:0c:5f:be:8f:5d:4d:00:6d:c3:4a:61:41:2c:70:4c:f0:
fa:d6:bd:ab:44:64:3e:6a:0d:eb:8d:33:fa:a9:c5:09:ed:30:
58:c1:c7:2c:25:ed:91:c8:47:8c:8b:9e:b1:6a:d5:86:8c:0a:
09:4e:ec:5a:3d:43:56:18:cb:eb:1a:69:8b:6e:a0:38:e2:b3:
95:fb:2f:3a:84:2d:4b:c1:e9:89:ae:aa:0d:e9:8f:77:1b:e2:
55:46:41:f9:75:f7:a7:ae:5f:18:e1:70:dc:2d:f9:43:20:b1:
f6:14:33:dd:f4:eb:d7:80:9b:61:f8:3b:02:89:70:8c:ea:fd:
b2:a2:c6:60:d4:8b:55:46:90:06:7e:db:90:ed:73:3c:93:79:
39:d0:37:d6:eb:55:21:f8:26:66:11:35:ba:19:a1:59:0f:be:
4d:e1:28:bb:82:d6:e8:be:7f:da:a6:2b:d2:da:ae:d2:35:90:
67:17:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:56:33 2026 by rpki-client