Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa
File: 3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa (raw, json)
Hash identifier: zST+afP+UoM58av8NbBM71dAtAysJcQSSL+7WWyGXJk=
Subject key identifier: A2:34:C4:50:7C:08:60:07:06:22:D3:8A:62:9C:BC:73:A3:4B:91:C9
Certificate issuer: /CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Certificate serial: 64B555082E1A6859B737D21A95E483660CCB5A03
Authority key identifier: 02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa
Signing time: Wed 16 Sep 2026 15:35:01 +0000
ROA not before: Wed 16 Sep 2026 15:30:01 +0000
ROA not after: Wed 15 Sep 2027 15:35:01 +0000
asID: 218809
IP address blocks: 200.141.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b5:55:08:2e:1a:68:59:b7:37:d2:1a:95:e4:83:66:0c:cb:5a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0211335370d92b6e733e38a6fe83f1920bc863b5
Validity
Not Before: Sep 16 15:30:01 2026 GMT
Not After : Sep 15 15:35:01 2027 GMT
Subject: CN=A234C4507C0860070622D38A629CBC73A34B91C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:68:d1:87:01:a9:32:2f:47:fc:5e:55:31:
44:a9:8b:37:51:b8:a8:50:d2:3a:db:8b:b8:df:a3:
e5:03:30:e0:11:b2:14:77:e5:f9:94:57:ef:8a:62:
f7:1e:e6:36:d2:46:79:09:7f:87:50:d2:51:5e:15:
ed:fc:06:47:a3:8a:6c:78:a9:33:a8:ef:72:fb:60:
c8:20:a3:91:b8:05:b9:be:bc:bb:cb:25:d1:ba:63:
1c:c3:df:33:da:47:99:74:3a:10:3e:b0:33:0a:4d:
8d:62:dd:4a:d8:48:20:e7:1e:39:d3:15:1e:92:50:
11:72:d2:36:90:f4:02:07:f1:f0:96:e4:ee:02:d6:
37:b3:f2:3c:9c:c7:32:87:b2:62:ec:2c:c2:b9:23:
ba:9a:1a:bd:56:8a:ce:84:1d:6e:ee:2f:76:f6:ca:
d5:ee:d0:4b:09:f3:86:12:1f:73:94:f1:88:42:53:
6c:36:2e:cd:55:6c:ad:81:9e:ff:69:66:dc:2d:fa:
2a:1d:fe:df:33:b3:bc:d0:97:30:6a:c6:3e:31:bc:
43:c7:d4:11:76:ce:1e:8c:cc:bb:b6:63:22:41:5a:
2e:8f:f6:9d:2e:06:33:94:8e:f7:7d:0f:ce:ac:63:
db:05:00:73:42:53:76:db:55:f8:fe:3e:24:01:bb:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:C4:50:7C:08:60:07:06:22:D3:8A:62:9C:BC:73:A3:4B:91:C9
X509v3 Authority Key Identifier:
keyid:02:11:33:53:70:D9:2B:6E:73:3E:38:A6:FE:83:F1:92:0B:C8:63:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/0211335370D92B6E733E38A6FE83F1920BC863B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhEzU3DZK25zPjim_oPxkgvIY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6bc1ff76-2930-4007-bd6a-baff5169a63f/0/3230302e3134312e3138382e302f32342d3234203d3e20323138383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.141.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:16:b6:c9:34:57:c9:74:95:1a:f2:06:43:bb:57:9f:59:c8:
43:d5:24:3c:65:d8:79:b1:8e:42:52:9a:97:f8:40:97:5b:aa:
d1:7d:44:ec:c9:bb:1c:70:67:74:77:69:a0:5b:db:a3:b3:35:
ea:9b:a5:9f:8c:4f:03:2b:63:b4:16:a4:4a:33:67:7f:dd:84:
a6:1f:fa:78:77:62:69:38:f3:ef:11:44:6d:a5:da:5d:11:1b:
b2:30:d4:c0:2d:09:7b:f7:36:fd:4d:d5:5e:4e:c4:8d:1b:23:
40:43:3e:f8:0f:76:5a:29:50:5c:48:c9:9a:58:db:51:ac:dd:
82:f2:c7:60:b5:2e:0d:d4:26:4e:35:67:cf:5f:ce:c9:8a:c3:
fa:8c:10:cf:8f:7f:41:96:50:4e:32:62:98:09:8e:19:bf:56:
4d:7f:83:ac:86:5c:68:8f:fa:fb:33:cb:80:cb:55:04:9f:d4:
93:e1:9b:c7:a7:6b:9a:fc:80:62:c1:44:51:80:d3:52:49:9d:
40:96:98:48:ae:7f:08:be:67:d5:e0:26:6e:25:b5:69:fb:ae:
df:0b:3e:28:e3:e5:75:62:d0:a3:ed:19:26:6e:11:ca:b1:f8:
16:5b:5a:44:6c:6b:63:f4:14:ef:4d:5a:9b:7d:53:dd:7e:39:
67:81:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:01:10 2026 by rpki-client