Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138352e302f32342d3234203d3e20313437323831.roa
File: 3230302e3134312e3138352e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier: bJY3yL1fmp3HX6HYt8YxjHfpzo7ixOaHUoEQcQkui7o=
Subject key identifier: 04:CD:3C:43:6C:25:2C:FC:A2:4F:EF:37:24:8E:7E:AE:F1:91:F6:AA
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 77A9819D5C9295F9B88E50500A6DAA83ED8EE736
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138352e302f32342d3234203d3e20313437323831.roa
Signing time: Wed 16 Sep 2026 15:34:59 +0000
ROA not before: Wed 16 Sep 2026 15:29:59 +0000
ROA not after: Wed 15 Sep 2027 15:34:59 +0000
asID: 147281
IP address blocks: 200.141.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a9:81:9d:5c:92:95:f9:b8:8e:50:50:0a:6d:aa:83:ed:8e:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:29:59 2026 GMT
Not After : Sep 15 15:34:59 2027 GMT
Subject: CN=04CD3C436C252CFCA24FEF37248E7EAEF191F6AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:7a:44:84:53:c9:93:f0:bf:b2:ec:c8:8f:
c4:96:83:2f:21:d5:32:fe:88:af:90:9a:90:e1:8b:
c4:e9:9a:8c:25:2b:c4:c8:de:03:99:5f:f1:2b:c0:
10:d0:a1:ff:ba:fe:06:c2:10:27:cc:82:aa:08:04:
02:5f:da:6b:0f:3e:c6:6b:d5:29:89:fc:f6:d1:6a:
f8:8e:82:74:4e:c8:e2:93:61:aa:4a:b1:ce:8d:cc:
c6:96:ea:1e:67:b8:85:32:32:7a:8c:f9:36:ca:14:
7a:b9:df:21:cd:db:7e:82:6f:0a:d4:cd:91:de:66:
d9:d3:32:88:d4:0e:f0:2c:4c:c5:38:d3:3f:af:4e:
5f:1a:35:0b:0f:e3:1e:d1:d5:85:69:30:6a:54:fa:
3d:f1:46:56:a5:77:10:7c:e1:46:2b:1b:56:22:fc:
cc:81:ba:a9:42:25:d4:d2:19:2e:89:2e:b5:99:99:
75:17:53:9e:74:23:58:7e:1c:a2:ae:c3:32:77:4a:
a7:69:55:b8:9e:5e:cd:2f:bd:b0:22:7f:84:b6:96:
56:29:30:7f:f2:61:56:c5:54:b3:a3:09:46:97:16:
e0:d4:20:26:bc:22:c2:93:d3:98:6e:3b:1a:8d:f4:
c0:2b:7c:b3:12:87:d4:7f:b6:d2:80:0a:91:08:ef:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:3C:43:6C:25:2C:FC:A2:4F:EF:37:24:8E:7E:AE:F1:91:F6:AA
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138352e302f32342d3234203d3e20313437323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.185.0/24
Signature Algorithm: sha256WithRSAEncryption
59:39:35:a9:e5:4f:fa:49:cf:1e:c7:08:09:06:13:7e:50:57:
14:a7:96:6e:f6:81:c8:1e:ac:9f:56:c4:1e:e1:c6:77:12:88:
15:d3:9a:27:38:3d:e2:a2:75:89:54:44:4a:bf:89:c2:c0:d3:
75:68:fc:78:fd:c9:ee:01:d2:8a:5a:34:12:0b:ac:e1:c0:32:
80:b6:2d:de:d1:ec:1b:8c:77:79:ac:58:ce:88:60:eb:f2:34:
7a:6b:c2:0c:4d:77:f9:d9:84:b6:64:23:15:ab:3b:c6:cb:cf:
7f:90:1e:26:1c:be:3d:13:3a:4f:a5:af:c4:c4:95:11:10:7c:
f8:ef:aa:99:07:29:df:a7:12:c1:8b:ab:92:b9:97:ba:5c:68:
df:73:1b:e6:b6:3d:97:b5:cc:e6:d9:9b:b5:86:d9:36:39:12:
1f:b8:6b:9b:c9:9e:c8:8e:e6:fc:16:ef:d5:ce:5a:3f:32:c4:
85:40:81:f0:12:46:36:d9:c8:85:87:f4:3a:f2:a3:71:d1:86:
e7:a6:fb:d8:52:38:6f:c6:6c:68:fb:8e:3a:22:dc:6d:78:65:
2e:74:f3:54:c3:1c:e9:b7:69:08:e1:b0:11:3f:ba:dc:9a:b7:
a7:23:67:2b:2b:48:04:23:87:25:8c:01:ac:8b:95:19:b5:6e:
56:c4:2c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:39 2026 by rpki-client