Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa
File: 3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: reBM1WOlLHOAJMmcCtrLU1wZalP1Hjg5R7LFbgQB1jA=
Subject key identifier: 33:B3:86:B2:62:50:71:04:93:77:14:52:6D:20:6F:23:96:5E:72:BF
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 290238B3A2964A09D1858BB4FCDC50C865ACF20C
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 142146
IP address blocks: 200.141.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:02:38:b3:a2:96:4a:09:d1:85:8b:b4:fc:dc:50:c8:65:ac:f2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=33B386B262507104937714526D206F23965E72BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:83:be:02:cc:ea:19:61:71:79:a0:41:e2:
3f:ea:24:1d:bf:b9:54:96:03:50:69:02:a5:31:6e:
ef:5b:8e:0d:27:b6:44:2b:fc:05:5a:b0:2f:7a:e7:
4a:4c:5e:27:d3:7f:7d:c8:9f:f8:a7:49:f5:d9:07:
9b:ab:3a:ee:08:69:39:bb:19:0a:f7:3d:c4:04:f7:
e2:01:e6:8a:3f:40:78:5f:2a:5d:78:2b:59:8a:d3:
74:3f:8c:93:d9:dd:a3:13:11:e9:8d:51:9f:66:bc:
c1:b5:c9:cd:57:79:cd:1b:12:f6:d6:b5:6e:52:26:
9e:34:24:fd:c1:4c:25:71:f8:b8:45:8c:55:b2:d2:
b8:23:9c:5b:1b:7d:94:af:3e:73:6e:e2:74:fe:bf:
6f:5c:b1:09:de:5e:17:5b:a6:78:b5:0d:6e:5d:60:
77:25:e2:cf:cb:51:18:ab:35:b3:d9:cb:af:c6:6d:
49:3f:8d:f6:47:7c:04:c9:2b:a8:66:c9:26:e8:c2:
ac:e1:73:72:d5:8e:06:08:8d:70:50:94:cf:00:df:
b5:8f:3d:72:eb:92:e0:69:8a:32:eb:e9:95:91:a1:
68:a5:00:d9:a5:e1:cb:78:33:a5:f5:d0:76:53:0d:
03:bd:bb:94:45:3e:de:fe:bf:4a:ef:fa:d8:8d:86:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:86:B2:62:50:71:04:93:77:14:52:6D:20:6F:23:96:5E:72:BF
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138332e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.183.0/24
Signature Algorithm: sha256WithRSAEncryption
df:ad:09:ce:07:97:ea:03:97:6e:76:88:71:79:b8:1b:16:b3:
29:90:6f:88:05:bb:12:69:b8:4f:86:f6:ac:ab:fe:99:dd:fa:
fe:bf:68:7a:be:cc:8d:ed:c1:f4:b9:55:92:d1:17:23:b0:20:
3a:ea:ad:6d:8c:8c:2b:57:f5:ee:b7:51:1b:2f:f7:84:18:f7:
7e:be:a5:55:6c:f7:0a:27:83:fc:f5:c5:40:89:78:c4:d0:62:
1e:a5:b3:2e:61:08:6a:6a:b7:2c:45:ed:13:c6:90:77:32:56:
21:56:65:e1:2d:fd:7a:be:23:64:84:5d:50:f2:0b:7f:66:f1:
fc:c6:6f:45:a0:c4:b1:ea:ed:cc:bb:47:1b:c5:1b:9c:f3:e1:
af:28:d7:b8:8e:55:17:c8:43:c7:7f:1a:ee:2d:25:ef:32:f6:
a8:b9:7a:7a:ef:42:d7:11:4d:fc:03:43:1b:fe:bb:d4:57:62:
e4:4b:9e:f7:19:97:29:19:e0:f3:70:0e:9c:b8:0f:71:09:6a:
df:03:38:35:24:5c:23:ad:e5:2f:81:8f:a7:22:ca:c2:52:d1:
1d:80:25:27:47:76:77:09:bf:e5:3d:8e:66:f8:8c:51:b1:2e:
3f:9b:f0:7f:83:11:f6:93:08:d1:e5:c0:89:d7:76:1f:14:fe:
07:66:d3:4a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUKQI4s6KWSgnRhYu0/NxQyGWs8gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKDMzQjM4NkIyNjI1MDcxMDQ5Mzc3MTQ1MjZEMjA2RjIzOTY1RTcyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CYO+AszqGWFxeaBB4j/qJB2/
uVSWA1BpAqUxbu9bjg0ntkQr/AVasC9650pMXifTf33In/inSfXZB5urOu4IaTm7
GQr3PcQE9+IB5oo/QHhfKl14K1mK03Q/jJPZ3aMTEemNUZ9mvMG1yc1Xec0bEvbW
tW5SJp40JP3BTCVx+LhFjFWy0rgjnFsbfZSvPnNu4nT+v29csQneXhdbpni1DW5d
YHcl4s/LURirNbPZy6/GbUk/jfZHfATJK6hmySbowqzhc3LVjgYIjXBQlM8A37WP
PXLrkuBpijLr6ZWRoWilANml4ct4M6X10HZTDQO9u5RFPt7+v0rv+tiNhlGxAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUM7OGsmJQcQSTdxRSbSBvI5Zecr8wHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM0MzEyZTMx
MzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMxMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMiNtzANBgkqhkiG9w0BAQsFAAOCAQEA360JzgeX6gOXbnaIcXm4GxazKZBv
iAW7Emm4T4b2rKv+md36/r9oer7Mje3B9LlVktEXI7AgOuqtbYyMK1f17rdRGy/3
hBj3fr6lVWz3CieD/PXFQIl4xNBiHqWzLmEIamq3LEXtE8aQdzJWIVZl4S39er4j
ZIRdUPILf2bx/MZvRaDEsertzLtHG8UbnPPhryjXuI5VF8hDx38a7i0l7zL2qLl6
eu9C1xFN/ANDG/671Fdi5Eue9xmXKRng83AOnLgPcQlq3wM4NSRcI63lL4GPpyLK
wlLRHYAlJ0d2dwm/5T2OZviMUbEuP5vwf4MR9pMI0eXAidd2HxT+B2bTSg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:47 2026 by rpki-client