Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138322e302f32342d3234203d3e20313532313739.roa
File: 3230302e3134312e3138322e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: eZuO4YUEYv6hzsG0i7mCnWG+oL/1COAlUCN0hh73mw8=
Subject key identifier: 7A:B1:FF:8E:E2:C1:9F:D6:15:89:8A:08:F1:47:E4:09:6B:9B:AC:99
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 1DE0D38730D97A96775149A115B26C385DE1E7F7
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138322e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 16:03:06 +0000
ROA not before: Wed 16 Sep 2026 15:58:06 +0000
ROA not after: Wed 15 Sep 2027 16:03:06 +0000
asID: 152179
IP address blocks: 200.141.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e0:d3:87:30:d9:7a:96:77:51:49:a1:15:b2:6c:38:5d:e1:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:58:06 2026 GMT
Not After : Sep 15 16:03:06 2027 GMT
Subject: CN=7AB1FF8EE2C19FD615898A08F147E4096B9BAC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:a2:f8:43:b4:16:a9:88:29:4c:cf:84:91:
76:5a:37:98:76:c7:3d:65:97:41:7b:41:9a:42:b4:
e6:76:80:93:1b:15:24:c0:cf:a7:ad:23:d0:57:3b:
51:4f:9b:ff:e1:45:de:ed:0f:fb:05:4f:e6:77:16:
52:df:28:21:ab:06:05:26:37:8b:5f:ae:79:11:76:
69:12:3a:32:b1:74:21:7d:e1:20:ba:6a:de:14:00:
94:45:40:22:84:0d:ce:41:60:75:4e:3e:c5:fd:38:
47:e2:5e:a3:72:82:a1:1f:b8:f3:78:62:3c:15:ac:
20:8a:24:a5:36:07:5c:d5:69:4e:b2:19:f0:33:d5:
27:09:ea:69:2a:2a:d5:02:31:ac:3c:ed:80:58:77:
e4:ea:c3:35:2b:f5:35:29:35:ac:c4:19:1e:73:c9:
af:03:62:55:ef:73:0f:e0:ea:7c:48:44:e7:c9:64:
88:4a:17:85:24:e2:d1:ab:4b:d2:b5:55:2c:f2:8b:
6d:77:53:9d:67:9d:70:1f:64:07:69:53:f9:b0:05:
b6:85:31:be:c3:6b:e0:91:08:01:c3:ac:c3:ba:7e:
f6:06:96:6c:0c:45:5b:1d:6b:3b:a9:6d:98:b2:7a:
b1:c8:a7:e8:74:9e:08:60:9c:e9:50:81:1a:90:33:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:FF:8E:E2:C1:9F:D6:15:89:8A:08:F1:47:E4:09:6B:9B:AC:99
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138322e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.182.0/24
Signature Algorithm: sha256WithRSAEncryption
08:da:6c:ee:94:ae:44:2f:b5:99:1a:14:43:13:ab:4d:a6:60:
1c:57:6c:4e:4b:e9:b4:35:1a:0a:cd:2b:64:24:c4:4d:df:98:
bb:14:e7:13:ba:c7:88:24:8d:7f:72:2b:2b:08:ee:04:49:32:
51:89:e5:aa:c4:c2:47:87:82:2e:de:db:31:7f:17:c0:69:2c:
32:14:36:0d:f8:45:2e:68:a0:29:f3:dd:85:a7:a7:70:7e:d8:
8f:15:45:dd:bb:bf:ef:e8:f7:b7:a7:88:6f:60:54:62:a1:3c:
b8:b5:02:5c:97:bb:d8:a6:48:e8:be:ce:12:d6:68:dd:c0:e1:
e7:4e:0a:a4:bf:79:6c:11:0a:df:71:cc:43:6b:ab:72:95:6a:
a1:a7:2b:81:32:09:f1:87:59:02:af:38:e3:8c:db:9d:a6:f9:
d9:e7:7a:bb:40:5e:fb:8b:41:ee:bb:9e:c3:90:d7:85:31:5a:
b3:d1:c9:0c:33:03:e5:cc:0a:06:d0:09:46:dd:4b:13:22:e9:
67:ae:df:4c:b7:bc:25:b6:52:9c:d2:c4:b2:62:45:86:8e:64:
e1:06:57:e6:3c:18:32:fc:c6:e6:2e:88:90:7f:25:5b:1f:b5:
bf:64:2f:84:33:1f:0f:32:79:48:9c:94:9f:bb:f4:c3:45:80:
91:ad:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:46 2026 by rpki-client