Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa
File: 3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier: X1jMylqqFd9DaHoSwr6RDb8s15xR27+9qOINnvGxvD4=
Subject key identifier: A6:54:EE:DB:33:AA:43:7C:A2:4E:9C:A1:DD:C0:E0:66:46:02:60:3B
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 7C6B81A7F55ABB4159D59EB9C9AD3D33BEB068F8
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 152179
IP address blocks: 200.141.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6b:81:a7:f5:5a:bb:41:59:d5:9e:b9:c9:ad:3d:33:be:b0:68:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=A654EEDB33AA437CA24E9CA1DDC0E0664602603B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:c2:f6:e6:57:16:27:bb:0a:78:75:a1:c8:
cc:7d:a1:de:62:e4:cf:01:88:b1:ca:b4:d7:db:0c:
da:f7:b1:53:25:14:f6:40:4a:c0:af:8a:fd:5a:83:
a6:b5:58:d0:a5:7c:0d:d0:80:df:24:06:48:84:76:
71:ef:c6:25:43:74:c2:28:75:f2:ee:3a:c2:2a:cb:
67:59:14:d7:e8:db:83:7d:b6:33:69:44:09:c0:bf:
5a:6d:39:d9:8e:36:64:7d:c4:e7:21:3b:94:cf:ca:
74:d4:19:25:d9:60:b0:05:7b:3f:03:5a:b4:b8:0f:
72:c6:ef:f3:ed:f7:84:84:b2:52:73:87:0d:77:0b:
59:20:1d:6a:84:08:5d:64:2f:09:25:3d:b7:b1:fb:
9e:06:ae:f9:56:b9:6d:25:b4:cc:22:c9:b0:f8:c5:
c4:c0:d2:41:3d:ab:1a:c1:55:12:ea:a6:cc:44:b0:
cb:92:20:91:d7:d5:33:b5:09:3a:45:fb:bc:22:a6:
0b:cb:e2:e8:68:c6:b0:d4:60:be:40:c4:59:32:06:
8e:93:76:46:88:bf:64:d7:d1:c8:39:de:75:d0:41:
20:1c:9a:5a:87:f1:57:6d:de:38:ad:03:46:f2:2a:
7e:0c:7e:0a:d7:59:4f:50:b3:63:2e:bc:2d:5b:93:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:EE:DB:33:AA:43:7C:A2:4E:9C:A1:DD:C0:E0:66:46:02:60:3B
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138372e302f32342d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.187.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ef:ac:d2:25:79:92:e1:db:b1:bd:85:a0:c0:16:93:51:5e:
96:af:36:6f:06:26:fd:9d:15:83:7e:1f:30:13:7e:96:ba:0f:
6c:9b:e7:d2:83:27:6b:52:99:a7:92:a8:be:9a:18:02:6b:91:
b3:3d:86:be:57:92:b4:28:33:79:5d:a0:35:d9:9d:a3:58:dd:
a3:69:5f:08:f9:68:7d:23:4b:b1:b3:70:ec:5f:f9:be:ce:45:
40:60:bc:2e:07:c5:c9:92:a1:d8:5c:2b:c6:59:5b:03:9a:f2:
81:bd:a6:3f:9a:09:4d:53:a9:6d:cb:54:7e:0f:02:c7:c9:30:
01:ae:87:ec:38:91:79:90:30:02:5d:d6:99:a7:44:f6:f2:6b:
b7:2a:d8:04:19:f7:73:2c:be:8e:99:4c:17:a3:07:5e:1a:d9:
bc:e0:25:a3:2e:29:e8:39:0f:fe:15:1e:dc:4f:02:08:08:17:
fd:71:5e:54:02:f6:06:54:df:5e:f7:ab:39:c4:3f:02:c6:67:
09:d9:7e:29:20:8f:f4:d5:91:35:44:e1:97:ab:a4:53:2b:f5:
8b:71:f4:b7:48:15:8f:a7:f4:02:44:5f:17:1e:d5:ce:a5:44:
3c:ce:1e:9e:ca:42:18:7e:23:1c:4b:45:18:cc:77:6d:03:e2:
c7:31:5b:a8
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUfGuBp/Vau0FZ1Z65ya09M76waPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxMTMzNTM3MGQ5MmI2ZTczM2UzOGE2ZmU4M2YxOTIw
YmM4NjNiNTAeFw0yNjA5MTYxNTMwMDFaFw0yNzA5MTUxNTM1MDFaMDMxMTAvBgNV
BAMTKEE2NTRFRURCMzNBQTQzN0NBMjRFOUNBMUREQzBFMDY2NDYwMjYwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbML25lcWJ7sKeHWhyMx9od5i
5M8BiLHKtNfbDNr3sVMlFPZASsCviv1ag6a1WNClfA3QgN8kBkiEdnHvxiVDdMIo
dfLuOsIqy2dZFNfo24N9tjNpRAnAv1ptOdmONmR9xOchO5TPynTUGSXZYLAFez8D
WrS4D3LG7/Pt94SEslJzhw13C1kgHWqECF1kLwklPbex+54GrvlWuW0ltMwiybD4
xcTA0kE9qxrBVRLqpsxEsMuSIJHX1TO1CTpF+7wipgvL4uhoxrDUYL5AxFkyBo6T
dkaIv2TX0cg53nXQQSAcmlqH8Vdt3jitA0byKn4MfgrXWU9Qs2MuvC1bk7D3AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUplTu2zOqQ3yiTpyh3cDgZkYCYDswHwYDVR0j
BBgwFoAUAhEzU3DZK25zPjim/oPxkgvIY7UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYtMjkzMC00MDA3LWJkNmEtYmFmZjUxNjlh
NjNmLzAvMDIxMTMzNTM3MEQ5MkI2RTczM0UzOEE2RkU4M0YxOTIwQkM4NjNCNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0FoRXpVM0RaSzI1elBqaW1fb1B4a2d2
SVk3VS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmJjMWZmNzYt
MjkzMC00MDA3LWJkNmEtYmFmZjUxNjlhNjNmLzAvMzIzMDMwMmUzMTM0MzEyZTMx
MzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMiNuzANBgkqhkiG9w0BAQsFAAOCAQEAWe+s0iV5kuHbsb2FoMAWk1Felq82
bwYm/Z0Vg34fMBN+lroPbJvn0oMna1KZp5KovpoYAmuRsz2GvleStCgzeV2gNdmd
o1jdo2lfCPlofSNLsbNw7F/5vs5FQGC8LgfFyZKh2FwrxllbA5rygb2mP5oJTVOp
bctUfg8Cx8kwAa6H7DiReZAwAl3WmadE9vJrtyrYBBn3cyy+jplMF6MHXhrZvOAl
oy4p6DkP/hUe3E8CCAgX/XFeVAL2BlTfXverOcQ/AsZnCdl+KSCP9NWRNUThl6uk
Uyv1i3H0t0gVj6f0AkRfFx7VzqVEPM4enspCGH4jHEtFGMx3bQPixzFbqA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:50 2026 by rpki-client