Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa
File: 3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa (raw, json)
Hash identifier: il/azY9vw+cnTAiGEub9jZKMh8asGTj6X+5g6LnUcO0=
Subject key identifier: A8:57:38:C3:E5:8F:9A:3D:62:4A:57:50:8E:D5:CA:BE:BC:30:E0:CD
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 1DB5EA78F531877C0AEACE4412BE9AADF4304CD3
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa
Signing time: Wed 16 Sep 2026 15:34:58 +0000
ROA not before: Wed 16 Sep 2026 15:29:58 +0000
ROA not after: Wed 15 Sep 2027 15:34:58 +0000
asID: 199707
IP address blocks: 200.141.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b5:ea:78:f5:31:87:7c:0a:ea:ce:44:12:be:9a:ad:f4:30:4c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:58 2026 GMT
Not After : Sep 15 15:34:58 2027 GMT
Subject: CN=A85738C3E58F9A3D624A57508ED5CABEBC30E0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:03:3f:c2:7c:6c:57:8c:56:27:20:20:af:
07:ea:11:00:74:57:87:84:e4:71:74:ba:93:36:77:
85:87:ca:72:42:53:90:46:cc:17:79:ee:8e:d9:0a:
97:ea:bf:29:20:6b:db:71:af:cb:48:6d:94:eb:b6:
47:29:c4:bf:70:27:d6:9a:89:c0:32:d9:49:43:60:
b1:13:71:ba:27:13:3a:69:f7:91:d7:06:30:8c:aa:
a1:66:fb:c6:24:bb:c0:d8:81:6d:36:c7:82:0b:53:
99:21:3f:ba:e5:c6:85:99:a7:54:f8:5d:2c:4d:57:
9b:1e:a6:b6:5a:54:65:65:88:04:1b:67:83:04:89:
50:b1:7a:0d:28:46:b6:f0:8e:b6:27:10:19:55:ea:
b2:a0:e9:3f:d2:0c:27:62:22:61:3a:32:40:09:64:
58:c0:b5:6f:6a:3d:b2:4f:34:b4:1b:9e:61:49:09:
1a:83:b3:35:f1:5f:52:a9:36:1e:5a:56:60:aa:93:
cd:b7:f0:13:aa:fe:11:3a:5a:32:53:f8:d3:dd:52:
47:76:85:45:12:26:22:7c:96:79:e1:1c:5a:70:c0:
22:05:c9:99:41:18:b3:98:a0:fd:dc:9e:e4:62:7f:
da:df:47:62:70:5b:b8:df:71:4b:db:1e:3e:59:b4:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:57:38:C3:E5:8F:9A:3D:62:4A:57:50:8E:D5:CA:BE:BC:30:E0:CD
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138342e302f32342d3234203d3e20313939373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:00:79:48:46:48:db:4e:9c:02:ad:03:3b:45:5e:02:da:49:
44:83:78:40:76:b7:c5:93:72:2e:3a:ba:f9:6a:2e:93:84:2f:
7e:11:47:05:3a:a2:2f:69:d9:10:d1:5b:f1:2c:77:81:93:23:
9c:7e:7b:27:06:48:72:64:84:3a:2e:17:6c:1a:6e:4e:f0:33:
93:1a:0d:5a:38:30:90:e9:af:78:26:61:be:7a:f2:d5:fb:f5:
3d:3f:eb:47:6a:f2:19:02:07:be:7a:a0:7f:13:be:af:d4:81:
82:67:4b:77:05:99:41:1c:de:1b:6e:a8:22:2d:05:91:20:ea:
c3:c1:85:28:d9:d2:82:dd:ea:fa:5c:61:b5:e6:6b:9c:df:d2:
8c:c2:72:f3:06:e5:d3:cb:08:8c:5b:ea:41:d7:4c:d7:04:17:
92:c4:8b:86:29:57:9c:f0:ac:30:51:59:f6:d1:79:50:85:c4:
9a:c2:a2:8d:f6:82:8e:da:9f:d6:b6:9d:8f:f6:37:b2:59:9e:
70:8d:de:e8:e2:b6:ea:70:19:80:c5:8d:ea:fd:ab:28:2b:9b:
ba:10:1c:29:30:da:0e:a8:27:eb:fa:e3:96:3c:98:29:dc:91:
74:4c:a1:4d:9c:c8:66:94:62:54:60:2b:ae:5c:ba:09:61:f8:
0e:04:7c:e0
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUHbXqePUxh3wK6s5EEr6arfQwTNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTI5NThaFw0yNzA5MTUxNTM0NThaMDMxMTAvBgNV
BAMTKEE4NTczOEMzRTU4RjlBM0Q2MjRBNTc1MDhFRDVDQUJFQkMzMEUwQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9QM/wnxsV4xWJyAgrwfqEQB0
V4eE5HF0upM2d4WHynJCU5BGzBd57o7ZCpfqvykga9txr8tIbZTrtkcpxL9wJ9aa
icAy2UlDYLETcbonEzpp95HXBjCMqqFm+8Yku8DYgW02x4ILU5khP7rlxoWZp1T4
XSxNV5seprZaVGVliAQbZ4MEiVCxeg0oRrbwjrYnEBlV6rKg6T/SDCdiImE6MkAJ
ZFjAtW9qPbJPNLQbnmFJCRqDszXxX1KpNh5aVmCqk8238BOq/hE6WjJT+NPdUkd2
hUUSJiJ8lnnhHFpwwCIFyZlBGLOYoP3cnuRif9rfR2JwW7jfcUvbHj5ZtKZJAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUqFc4w+WPmj1iSldQjtXKvrww4M0wHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM0MzEyZTMx
MzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzOTM3MzAzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMiNuDANBgkqhkiG9w0BAQsFAAOCAQEAyQB5SEZI206cAq0DO0VeAtpJRIN4
QHa3xZNyLjq6+Wouk4QvfhFHBTqiL2nZENFb8Sx3gZMjnH57JwZIcmSEOi4XbBpu
TvAzkxoNWjgwkOmveCZhvnry1fv1PT/rR2ryGQIHvnqgfxO+r9SBgmdLdwWZQRze
G26oIi0FkSDqw8GFKNnSgt3q+lxhteZrnN/SjMJy8wbl08sIjFvqQddM1wQXksSL
hilXnPCsMFFZ9tF5UIXEmsKijfaCjtqf1radj/Y3slmecI3e6OK26nAZgMWN6v2r
KCubuhAcKTDaDqgn6/rjljyYKdyRdEyhTZzIZpRiVGArrly6CWH4DgR84A==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:24 2026 by rpki-client