Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138362e302f32342d3234203d3e203136323736.roa
File: 3230302e3134312e3138362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: JIbzeSVd7hlGotgD8zFe+uItZhwoKSi/n1rg37g6u/E=
Subject key identifier: C0:50:86:0A:23:11:53:81:A8:91:8B:4B:A0:61:75:0C:AE:9A:AA:BB
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 07007C1866A4DB1C5F7DBB7A4AA4F482B048F095
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138362e302f32342d3234203d3e203136323736.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 16276
IP address blocks: 200.141.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:00:7c:18:66:a4:db:1c:5f:7d:bb:7a:4a:a4:f4:82:b0:48:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=C050860A23115381A8918B4BA061750CAE9AAABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:1d:66:59:3a:4b:ca:88:fd:a3:b8:c7:8e:
0a:0f:86:a5:b8:f7:3a:cb:07:aa:b4:92:2a:b0:dd:
e2:6f:b9:70:51:44:85:7c:33:c8:fb:01:35:21:01:
f3:d7:63:95:8c:15:50:f4:6e:cf:23:2c:b6:de:fd:
6f:f5:5f:f7:b9:dc:44:cc:e7:65:bd:60:61:f1:bf:
9a:38:34:41:8d:45:9b:d2:b4:9c:a1:8e:f9:50:c0:
f7:d7:41:e9:d7:a5:9e:cc:dc:8a:1d:bc:35:e7:ae:
24:b0:69:f7:17:75:c3:b7:11:f7:fa:c2:ee:dc:af:
a0:d0:f9:08:5e:ac:e8:fa:10:af:a8:11:ad:ec:81:
17:4d:01:c4:c3:1f:35:02:ac:e2:05:3f:43:ee:ef:
4f:f3:98:a9:b3:63:fc:cc:32:38:a1:52:ee:2c:5b:
1e:05:5c:e3:34:b1:c3:3f:78:51:ab:ba:11:8d:db:
0b:f5:f6:b8:cf:0b:81:71:a0:32:ce:7a:fd:5e:53:
1e:57:94:9a:51:97:0f:7e:63:27:70:18:40:1e:f8:
c4:4c:50:f5:df:cc:76:1c:a9:08:ed:4f:cd:e8:49:
e9:ed:05:09:05:f0:ea:1f:4c:d2:e1:6b:1a:fa:d3:
57:17:e1:92:23:42:79:49:98:90:55:96:1b:78:a8:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:86:0A:23:11:53:81:A8:91:8B:4B:A0:61:75:0C:AE:9A:AA:BB
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138362e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.186.0/24
Signature Algorithm: sha256WithRSAEncryption
66:91:d9:b2:4d:c7:04:da:e3:22:17:0d:df:74:84:c6:01:36:
7e:83:ff:12:73:54:8f:15:b8:73:54:4c:18:6a:b2:ce:11:ca:
ed:1b:43:be:c6:6b:88:01:65:54:94:a1:15:4b:bc:8f:f8:b6:
34:36:a8:d0:e9:ba:a5:49:93:19:d5:f7:ab:f1:cf:e2:0d:c4:
64:dc:79:f0:32:a4:57:4d:9e:8c:9f:27:9f:09:b1:0c:83:5f:
1d:a8:cd:79:63:e7:db:1f:de:df:15:75:e2:5e:27:fd:ca:69:
18:ad:58:08:a3:96:23:01:13:37:f7:a5:d8:fd:5f:8e:22:55:
f6:62:22:85:10:ec:94:c7:22:d8:15:7a:50:0e:6a:aa:f4:b8:
07:7f:d9:ed:20:0c:a1:cb:a4:fb:bd:49:a6:0f:30:9e:be:87:
40:e2:ef:88:24:63:50:ba:b8:a0:70:ce:f6:03:64:fa:7d:4b:
2c:6c:c9:cb:17:c1:b0:f0:d5:71:14:e1:34:cd:53:e1:92:b7:
71:1e:31:7b:8f:77:d3:f7:c2:7e:b1:3f:e1:7d:3b:15:cf:37:
86:b4:4b:43:0c:e0:86:ee:93:09:11:23:e2:1d:60:1e:b3:d2:
a4:40:a9:82:e1:8f:cb:5f:49:e5:57:cb:5e:98:18:83:9c:c9:
53:00:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:06 2026 by rpki-client